Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
File:                     3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa (raw, json)
Hash identifier:          CrnyO67+CL21trK4zRBLwHtSZOOO4F28T93kDrW/Dyw=
Subject key identifier:   50:B8:A5:A7:4D:E5:BF:2E:2F:C3:5F:71:3C:B6:A7:59:90:FE:65:22
Certificate issuer:       /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial:       3D2D48AAD4072E3DAB0E8E6C6B45EFF23E3E1756
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
Signing time:             Thu 04 Apr 2024 15:05:54 +0000
ROA not before:           Thu 04 Apr 2024 15:00:54 +0000
ROA not after:            Thu 03 Apr 2025 15:05:54 +0000
asID:                     264867
IP address blocks:        168.205.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
                          rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2d:48:aa:d4:07:2e:3d:ab:0e:8e:6c:6b:45:ef:f2:3e:3e:17:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
        Validity
            Not Before: Apr  4 15:00:54 2024 GMT
            Not After : Apr  3 15:05:54 2025 GMT
        Subject: CN=50B8A5A74DE5BF2E2FC35F713CB6A75990FE6522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:1f:3e:23:91:ea:f6:ee:0d:f7:cc:b1:51:
                    b4:7e:e7:c5:d9:cf:94:1d:ef:2d:c0:bb:5e:d9:7d:
                    ef:8d:56:d4:e5:ab:09:ef:dc:e0:89:cd:2a:69:71:
                    14:f5:d1:c3:2e:a5:e5:3f:a1:a4:c8:eb:fc:1e:73:
                    ad:a2:ac:cc:54:a9:37:d3:af:46:02:77:01:69:cd:
                    ea:90:bb:db:67:d9:0a:49:59:26:05:18:3b:8a:8f:
                    1c:4b:db:67:35:1c:b1:a2:ef:50:2d:8b:12:52:56:
                    15:64:bc:23:c9:5e:9e:e2:11:2b:34:97:36:61:6e:
                    c3:c7:c5:04:0f:c5:08:d5:c4:dd:2a:5d:a9:a4:07:
                    f4:ba:15:59:15:91:e9:ee:e5:83:ba:89:c1:59:88:
                    4c:df:5e:bc:2e:11:4f:19:14:0f:0a:57:bd:bc:93:
                    d5:71:51:9b:02:08:f6:a8:cf:5b:1f:db:02:df:d4:
                    fe:91:d3:69:59:59:62:f2:e2:6e:40:2e:55:2d:8f:
                    7f:5d:e4:8b:a3:fe:7d:e6:66:e3:b7:c4:77:ae:87:
                    ef:c9:e4:54:e3:5a:74:07:fe:a6:d4:1e:5e:57:15:
                    b1:db:a3:8a:b9:8f:5b:d2:5d:a8:44:b3:8c:58:97:
                    91:c4:eb:45:16:2d:aa:f8:b1:da:d0:6e:f6:a6:98:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:A5:A7:4D:E5:BF:2E:2F:C3:5F:71:3C:B6:A7:59:90:FE:65:22
            X509v3 Authority Key Identifier:
                keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:46:73:15:ab:ab:55:1d:db:11:6c:15:c6:8d:76:47:70:c0:
         d5:b9:29:21:ae:28:74:a3:fb:31:7e:ec:f6:91:14:dc:7d:9d:
         8a:2a:f3:74:42:c2:d8:d8:ea:04:2c:8a:5e:53:ce:84:de:82:
         30:ee:a3:a1:98:cd:b0:5c:62:8f:dd:e4:d0:91:46:6e:ac:05:
         c1:a7:79:80:26:f7:b0:e2:ab:ef:ac:5d:f4:f9:1d:7a:b6:f3:
         3e:44:88:c9:88:58:5f:76:d8:43:09:63:cd:d1:2a:34:cd:94:
         02:de:92:7b:85:38:a0:65:34:83:1f:e0:44:65:a5:63:49:22:
         31:a3:61:d5:44:ff:eb:b5:63:3d:1e:f3:c8:83:82:dd:77:9c:
         31:bc:a5:e1:b2:ab:8c:41:50:d3:e4:30:52:fb:3e:1d:37:2d:
         33:54:13:c2:45:6e:12:6a:7e:01:90:0d:d4:da:be:58:a0:db:
         45:12:9e:05:fb:4d:ae:a5:b4:bc:13:20:5f:c6:e7:ec:09:7d:
         1c:a9:9b:34:0a:8b:1b:20:97:9d:91:86:d8:53:8f:e1:29:57:
         77:b4:37:4c:90:6f:09:b9:02:56:0b:ec:9b:e2:61:a6:81:5d:
         52:f8:6b:61:25:a8:f5:f7:8b:ab:28:85:96:14:ed:cf:8e:3a:
         e9:d4:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org