Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa
File:                     3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa (raw, json)
Hash identifier:          R+6wjyKClPe7dgIGymUHsKMJdwvFVb3wALHmuJZCAds=
Subject key identifier:   C3:72:4D:F1:A6:2B:91:8B:C7:16:CF:6D:0B:99:D2:98:F7:B5:D2:8D
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       709B6363901A1A17FC62C41E29D71F56A41923C6
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa
Signing time:             Thu 17 Oct 2024 13:02:34 +0000
ROA not before:           Thu 17 Oct 2024 12:57:34 +0000
ROA not after:            Thu 16 Oct 2025 13:02:34 +0000
asID:                     266556
IP address blocks:        160.238.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9b:63:63:90:1a:1a:17:fc:62:c4:1e:29:d7:1f:56:a4:19:23:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Oct 17 12:57:34 2024 GMT
            Not After : Oct 16 13:02:34 2025 GMT
        Subject: CN=C3724DF1A62B918BC716CF6D0B99D298F7B5D28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:7f:1b:65:50:b9:94:2a:66:73:29:ca:ec:
                    2d:c7:83:87:d3:7e:3f:8c:7e:94:c3:37:a6:ef:f8:
                    45:e2:0b:dd:41:49:df:4a:4e:c9:20:3e:4c:b3:4e:
                    6c:55:83:01:ba:fc:f4:01:ab:bd:85:27:3c:ec:b0:
                    c0:31:3a:63:20:83:b8:26:a8:d6:a5:2f:5d:cf:c6:
                    37:5e:6a:b6:a4:c5:2f:70:73:a9:26:b1:2f:e5:79:
                    fc:5d:ca:62:cd:35:f9:55:ec:d3:fc:3c:c7:ac:fa:
                    b8:ba:42:b4:89:0a:61:c5:90:2a:44:d5:a4:cb:d6:
                    f1:97:dd:b5:5c:19:9c:20:52:3e:ee:5a:b0:f0:7a:
                    b1:24:a0:a6:61:19:ee:23:ba:01:be:40:17:7e:84:
                    81:c2:38:89:42:4a:97:6f:db:08:ba:a9:95:88:a7:
                    98:d9:e7:49:dc:4d:e7:57:4d:3f:0d:2e:d6:46:af:
                    ab:cb:d3:16:5a:1a:1c:13:46:2e:c8:78:c6:9b:80:
                    33:99:07:5e:20:ab:2d:b3:06:3a:9f:7a:d3:86:c3:
                    2e:35:3d:e4:73:45:36:70:9f:2f:10:f4:0f:e1:f4:
                    79:2b:5a:99:6d:d9:14:84:3d:64:99:f0:44:6d:58:
                    16:fb:ea:c3:0d:56:d5:b2:2c:43:db:64:d3:ce:2b:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:72:4D:F1:A6:2B:91:8B:C7:16:CF:6D:0B:99:D2:98:F7:B5:D2:8D
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:c6:c0:5d:b0:db:25:87:f6:4d:20:fa:73:29:a3:e7:6a:b1:
         8e:4d:28:10:a8:69:74:77:95:15:f9:bc:c8:fb:24:96:23:db:
         56:25:9a:a1:f8:d4:7b:e9:0d:5d:86:ca:a6:1d:83:72:36:db:
         2e:2a:7a:4d:88:5f:b7:56:94:82:40:2c:f4:e8:cf:13:a9:82:
         c7:64:62:51:d4:c2:6f:08:73:85:8d:4e:da:f1:22:0f:1c:5d:
         67:b9:7e:06:d9:67:33:d2:41:34:fe:33:ce:66:5a:f7:90:85:
         32:5f:d8:28:a0:58:9e:5d:75:a0:85:e4:ee:42:ef:e9:3b:08:
         b2:bb:15:72:fb:07:b7:01:fe:2a:bc:4f:3f:25:36:04:e4:42:
         3b:62:8e:1d:bf:3f:c9:90:d1:96:60:2d:43:1c:3b:41:34:65:
         60:c1:4d:02:aa:e9:ff:26:91:ec:41:c6:0a:25:e4:19:62:a6:
         af:0f:d3:c9:da:97:c1:15:3d:e7:29:94:93:c8:31:8d:c0:44:
         ed:24:29:5d:72:07:3d:a7:67:b0:2d:13:b3:ad:40:15:91:9e:
         50:30:3d:f6:aa:de:b6:4d:31:c5:e9:a7:f6:ed:27:36:1a:4b:
         95:92:2e:ff:1c:95:0d:82:28:97:0a:b0:20:bd:07:bd:c8:4d:
         f0:f7:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:01 2024 by rpki-client on console-fra.rpki-client.org