Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
File:                     3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier:          kx6IFn49rvQUMFTNvvDH7izbfjt9lIcK2Kl3s+Wiqlg=
Subject key identifier:   6B:5C:AD:93:DE:6B:87:E6:CE:FA:CB:A0:83:D0:15:D0:74:4E:37:FC
Certificate issuer:       /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial:       2C984300251D7D77F48EE2335AEFA54B89741C3B
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
Signing time:             Thu 04 Apr 2024 15:05:55 +0000
ROA not before:           Thu 04 Apr 2024 15:00:55 +0000
ROA not after:            Thu 03 Apr 2025 15:05:55 +0000
asID:                     264867
IP address blocks:        168.205.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
                          rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:98:43:00:25:1d:7d:77:f4:8e:e2:33:5a:ef:a5:4b:89:74:1c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
        Validity
            Not Before: Apr  4 15:00:55 2024 GMT
            Not After : Apr  3 15:05:55 2025 GMT
        Subject: CN=6B5CAD93DE6B87E6CEFACBA083D015D0744E37FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:88:8e:c8:12:1d:a1:8b:ea:7f:d5:ec:2d:7c:
                    e4:1f:50:3d:c5:54:bd:10:0a:60:70:4f:57:4a:a7:
                    de:d9:98:fe:a8:fe:0b:d4:0f:4c:b3:ba:c8:ea:e5:
                    8f:a2:b5:4a:88:6e:f6:41:72:71:ef:cc:dc:e9:95:
                    d3:4d:ec:44:fd:16:75:bc:fe:90:af:ef:2f:0d:0d:
                    52:cf:da:1d:f8:7d:ad:be:99:8a:4e:92:20:a5:a0:
                    ce:40:03:b9:ef:91:ce:26:aa:ee:2b:24:a7:41:c1:
                    51:f7:bc:ed:55:97:f8:92:21:a9:12:f0:13:ff:af:
                    a3:ef:f2:ea:14:ce:eb:a7:72:f2:35:e1:57:9f:30:
                    2a:66:c6:dc:46:dd:5e:a2:8d:ee:43:b2:22:eb:85:
                    a7:d5:e2:03:64:a3:aa:ea:b5:99:bb:6d:10:f2:7b:
                    02:39:00:c2:b6:37:bf:5d:a3:f6:1c:39:5b:df:41:
                    7a:0b:79:45:28:5d:a1:16:75:92:c9:db:2c:e5:bf:
                    b8:44:7a:fa:d9:64:78:46:b4:4e:61:6f:9d:e5:c8:
                    a4:e1:bd:f1:88:8a:a8:8c:b3:38:f8:b5:16:e1:9d:
                    3f:ad:4c:ea:aa:0f:d5:84:23:e7:7d:57:48:c8:e2:
                    ee:b2:4a:a4:d9:3e:75:ee:9e:32:4e:8d:fe:02:38:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:AD:93:DE:6B:87:E6:CE:FA:CB:A0:83:D0:15:D0:74:4E:37:FC
            X509v3 Authority Key Identifier:
                keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:93:41:be:34:f4:ca:d0:52:ac:8c:4b:03:ae:9c:a2:2b:87:
         0b:9b:e3:60:0d:a0:5a:69:29:3e:d3:f3:89:1f:d6:a3:8b:5d:
         24:29:4a:82:33:48:8e:0f:8e:30:88:3c:1d:17:ad:23:de:06:
         56:41:20:a3:93:4b:d7:8e:d2:79:54:4a:2a:29:ba:93:71:26:
         60:73:3c:d1:87:31:22:03:14:bf:5f:38:ba:ff:89:e3:9b:ed:
         0f:dd:df:db:57:cd:3a:22:de:4c:e8:5a:a4:02:ed:9d:a2:e6:
         17:5f:24:84:5d:3f:63:73:f2:de:46:d6:ed:5a:3a:2e:0e:eb:
         d6:34:09:cb:8f:77:d1:35:6f:d3:b0:16:e6:49:0c:42:8e:b3:
         2d:3c:b3:63:6c:12:70:cc:b9:5f:95:9e:d2:ac:65:a0:ec:cc:
         42:1a:13:2b:5a:33:d6:74:5b:a8:22:ce:d5:8f:77:b9:d1:d2:
         1b:42:f0:4b:70:bd:07:d3:c1:e4:8e:08:31:74:f4:bf:0b:e5:
         ba:97:e7:ac:0e:87:a4:27:36:8b:b3:18:7a:eb:af:c9:6b:52:
         84:9f:95:03:85:ce:aa:97:46:a0:a6:27:b0:83:f7:53:a3:07:
         b0:17:5e:cb:e0:ea:75:67:07:2d:a9:74:49:64:bf:aa:ae:39:
         23:32:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org