Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3136382e3232372e35362e302f32322d3332203d3e20323634383830.roa
File:                     3136382e3232372e35362e302f32322d3332203d3e20323634383830.roa (raw, json)
Hash identifier:          /4sK/DbCyiwrW7udz9+3KlYpFvUBLqIFFWtM14z87Gs=
Subject key identifier:   12:D8:C9:AE:C6:2F:8E:78:71:1C:25:D1:6D:C8:2C:2F:60:E2:88:15
Certificate issuer:       /CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
Certificate serial:       5E19335FD2907728D25DEE6EAAA9B7CC522D6F3B
Authority key identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3136382e3232372e35362e302f32322d3332203d3e20323634383830.roa
Signing time:             Thu 25 Jul 2024 19:34:57 +0000
ROA not before:           Thu 25 Jul 2024 19:29:57 +0000
ROA not after:            Thu 24 Jul 2025 19:34:57 +0000
asID:                     264880
IP address blocks:        168.227.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl
                          rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:19:33:5f:d2:90:77:28:d2:5d:ee:6e:aa:a9:b7:cc:52:2d:6f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
        Validity
            Not Before: Jul 25 19:29:57 2024 GMT
            Not After : Jul 24 19:34:57 2025 GMT
        Subject: CN=12D8C9AEC62F8E78711C25D16DC82C2F60E28815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:1b:b7:f4:fe:d1:d3:2f:01:66:2b:9b:36:
                    05:06:90:30:d6:40:c0:2f:85:f9:1f:c1:e9:40:e0:
                    2e:25:fd:35:6d:e7:5b:41:ca:a8:e9:b9:1f:b0:fe:
                    00:69:08:83:d5:0e:1b:96:64:2b:da:c6:7a:b7:0f:
                    66:e5:62:e5:51:3b:1d:7b:de:81:c5:ba:9a:5f:c6:
                    dd:98:88:3c:49:85:6e:23:87:59:f5:c0:a6:99:3e:
                    75:e7:a9:df:17:b1:27:19:d9:56:6d:bc:95:dd:72:
                    9e:36:5b:22:0b:82:92:b6:ee:36:46:89:ad:82:a3:
                    09:5c:3a:87:b3:fe:c3:ac:c8:e6:1a:df:70:3f:1a:
                    e6:e3:30:fd:08:17:4b:ac:b0:cd:6d:41:ca:6e:c4:
                    91:8c:ae:f4:48:a0:6a:7c:c5:1e:81:c8:04:c3:e6:
                    b9:7e:b2:75:46:e8:33:73:45:37:6b:40:c9:4b:65:
                    50:54:88:a8:09:dd:4a:3d:d7:5f:49:f2:ca:80:f3:
                    7b:e3:36:a9:43:44:b2:cd:05:7a:b1:8d:18:9b:04:
                    8e:a4:f1:08:a4:a6:52:d2:2f:a7:e0:8c:5f:7e:c5:
                    f0:70:0f:63:c4:3e:21:47:ce:7d:b5:54:00:88:0e:
                    21:12:83:8e:17:6b:2e:91:6c:d5:b8:58:e2:fe:bb:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:C9:AE:C6:2F:8E:78:71:1C:25:D1:6D:C8:2C:2F:60:E2:88:15
            X509v3 Authority Key Identifier:
                keyid:8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3136382e3232372e35362e302f32322d3332203d3e20323634383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:9f:6b:b1:b0:dc:36:00:29:42:f4:62:c3:7b:65:2d:ed:
         19:7d:0b:a4:9f:da:a4:e1:f3:c4:ec:13:a0:62:15:79:7a:9c:
         79:4c:1b:1b:7a:b9:24:2a:ab:e1:13:31:6a:9e:b7:3c:71:f3:
         cb:66:4a:04:de:fb:bb:8e:2f:b4:8b:d9:72:34:ee:b2:85:e5:
         65:b8:31:60:5e:b5:39:54:5a:d2:0e:bb:6e:8a:79:25:58:f4:
         ab:c5:a6:40:0a:46:fb:5a:d3:f4:51:be:1a:c0:8d:eb:c1:30:
         84:2d:28:2c:c6:e2:f2:25:30:c3:78:f2:12:57:74:64:79:15:
         92:25:19:ed:cd:40:36:71:ed:c1:82:37:0a:9d:f8:68:e7:95:
         c3:8b:68:5f:26:63:5a:f8:3e:a3:13:7f:0c:c4:b3:2e:ac:dc:
         b7:1f:fc:a7:38:61:c2:9b:6d:e2:58:58:cb:fc:5b:b8:51:44:
         0d:99:b8:c5:d2:5a:d7:57:04:8d:3a:9b:22:76:64:df:50:7c:
         e1:12:51:00:25:6f:d4:00:ee:87:75:c3:5a:cd:f4:53:f2:42:
         2a:57:9f:ae:a1:96:4b:14:34:4e:d1:98:43:c8:a8:8c:ff:69:
         b1:54:20:20:99:05:10:72:a9:aa:76:ed:88:c5:f9:25:3a:f6:
         51:19:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org