Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa
File:                     3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa (raw, json)
Hash identifier:          Q42pnf27rQFsVKkawZ7rbDCU4iV3MOg9/vdKwnhrZNA=
Subject key identifier:   FB:9B:72:A1:91:E4:AF:14:AB:EB:06:31:6A:E1:9D:15:EF:88:E7:F6
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       5B5875DA8AA3619FEB5C8DEFC26AFDD635CF62A0
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa
Signing time:             Thu 17 Oct 2024 13:02:34 +0000
ROA not before:           Thu 17 Oct 2024 12:57:34 +0000
ROA not after:            Thu 16 Oct 2025 13:02:34 +0000
asID:                     266556
IP address blocks:        160.238.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:58:75:da:8a:a3:61:9f:eb:5c:8d:ef:c2:6a:fd:d6:35:cf:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Oct 17 12:57:34 2024 GMT
            Not After : Oct 16 13:02:34 2025 GMT
        Subject: CN=FB9B72A191E4AF14ABEB06316AE19D15EF88E7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:73:61:6a:d8:5f:a7:10:74:fb:0a:18:4f:
                    8b:54:cf:45:86:fb:84:46:f6:f7:47:07:99:f5:81:
                    01:f4:89:e0:6a:2d:bc:8d:37:f3:f6:39:20:66:50:
                    44:83:d7:80:58:aa:95:f3:de:c7:7a:f2:91:e4:5e:
                    46:4e:6e:9c:67:ee:67:a9:61:e6:54:2f:e2:d2:f3:
                    b2:ca:2a:4f:a8:b9:1d:ae:54:67:c5:f3:06:d6:d0:
                    14:f9:0b:c5:e5:f7:d8:c0:d3:5f:d3:d5:23:82:c6:
                    c2:9b:c2:d5:f5:cc:69:b5:94:07:89:85:26:9e:3a:
                    42:1a:24:ad:aa:6f:bb:2c:96:04:80:7e:7d:06:42:
                    ab:56:66:2b:47:bd:df:b0:6f:d0:05:06:b3:f7:e8:
                    eb:99:62:ea:30:3c:ba:76:c2:09:74:b3:b3:8b:64:
                    1c:f6:18:e8:13:4a:98:8d:a8:c6:d3:85:62:91:c9:
                    cf:66:90:cb:09:08:24:f5:f5:51:20:63:7b:84:d8:
                    4b:f4:2f:72:e2:b5:c1:98:c5:a3:5f:ef:c0:26:5a:
                    74:1a:82:c7:59:49:06:eb:64:4a:2d:31:3c:b5:50:
                    7a:83:7b:39:d1:1f:43:3f:9e:b1:22:e0:95:36:7d:
                    71:7b:78:60:93:05:fd:36:43:6a:49:4c:7c:af:ec:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:72:A1:91:E4:AF:14:AB:EB:06:31:6A:E1:9D:15:EF:88:E7:F6
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:6d:ff:30:57:df:c8:b2:1e:a4:0f:a4:9d:47:1f:e8:63:
         69:3b:e1:da:a8:9b:64:a1:ac:34:00:c4:9f:8c:36:8c:28:af:
         1c:63:e3:50:72:da:bd:d0:8c:27:46:77:39:c8:70:72:41:43:
         c2:61:3f:6b:6b:93:c8:bb:f0:dd:61:14:9e:82:7a:2f:4f:9e:
         76:9d:e8:96:1f:2e:a7:8e:ff:5d:28:b6:d1:4b:f8:12:4f:db:
         83:2e:94:fc:18:d7:c6:70:68:52:86:f5:e1:ca:3a:2b:a8:6c:
         af:49:f6:a3:32:65:dd:cb:45:d4:93:e2:0c:44:61:b5:4b:d5:
         8a:17:63:da:5a:f4:80:74:f5:f9:68:5b:fc:97:1d:79:d5:62:
         04:51:e2:74:1e:3c:e5:b8:6d:f3:d8:6b:3e:49:de:df:43:28:
         b3:2f:a8:62:f0:55:fc:02:9a:fb:5a:50:4c:29:51:c2:c1:c8:
         83:97:d7:7e:2d:92:d1:21:d1:a7:1f:ed:2c:6d:cd:b8:88:5e:
         dc:0c:c8:88:ae:6d:a2:a4:fb:b7:59:8e:96:9b:e3:d3:f4:de:
         cb:31:2c:1d:83:6f:36:4b:b1:75:88:a7:3b:7d:84:ae:f6:e5:
         ea:84:50:51:5b:1b:7f:01:f8:0b:8d:c6:82:96:24:00:c3:23:
         8e:51:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:01 2024 by rpki-client on console-fra.rpki-client.org