Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
File:                     3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa (raw, json)
Hash identifier:          /RPFDWHAU+XVHCr8HXyqJywXImU6Xy7436Ld5NAJZZk=
Subject key identifier:   63:80:B9:E8:4E:1D:AD:95:92:FE:CB:E0:C5:09:11:F4:C2:E5:4F:E0
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       73AC61E2A1A06D4BB12E3E8FE7AE3805347992
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
Signing time:             Thu 04 Apr 2024 16:23:05 +0000
ROA not before:           Thu 04 Apr 2024 16:18:05 +0000
ROA not after:            Thu 03 Apr 2025 16:23:05 +0000
asID:                     265311
IP address blocks:        168.121.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ac:61:e2:a1:a0:6d:4b:b1:2e:3e:8f:e7:ae:38:05:34:79:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Apr  4 16:18:05 2024 GMT
            Not After : Apr  3 16:23:05 2025 GMT
        Subject: CN=6380B9E84E1DAD9592FECBE0C50911F4C2E54FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:f1:f9:e5:33:43:08:ed:3f:96:66:b5:5c:
                    81:40:ae:7f:f0:e9:aa:76:4b:8c:5c:e7:07:47:88:
                    23:dd:5a:e5:42:2d:83:b8:69:0f:7a:5a:17:60:ab:
                    13:a8:80:61:d8:7b:e0:e0:fc:b4:b1:d5:c6:ad:2a:
                    e1:c3:33:2e:d6:c7:03:5e:7d:54:e1:60:3b:c8:55:
                    90:3e:32:19:dd:db:88:01:3b:49:b7:a6:88:32:a9:
                    23:03:5b:40:53:0e:ba:7a:76:34:d2:53:d1:dc:e4:
                    ce:b1:54:d7:f8:48:5b:19:5a:db:72:c7:ef:2c:3f:
                    2d:1f:ee:80:fa:27:05:0e:c7:69:2c:54:45:3e:d6:
                    23:20:a8:93:93:52:38:9a:6f:ec:dc:53:90:1b:4d:
                    45:95:70:18:b7:d8:04:87:32:ab:9c:d0:3b:af:fc:
                    7c:c4:a1:05:c1:6a:72:91:36:36:e9:65:1e:75:a3:
                    f4:8d:2a:42:6f:0a:be:9e:01:38:63:a8:4e:11:f9:
                    aa:29:1d:93:98:39:b7:ef:ba:31:0e:8b:e3:5c:70:
                    e9:11:0c:1b:f2:9e:83:17:4b:4b:86:3e:f4:77:0d:
                    58:34:42:81:3b:b8:91:e0:db:f0:44:c0:91:dc:c4:
                    11:b6:e3:a6:f3:3e:c2:93:d9:3e:de:06:b6:04:9f:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:B9:E8:4E:1D:AD:95:92:FE:CB:E0:C5:09:11:F4:C2:E5:4F:E0
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:ad:b4:51:56:59:13:e0:22:e0:0c:f4:ee:2b:b2:bf:3a:
         ec:04:33:a1:45:41:17:26:1b:6d:95:67:e4:65:be:a0:d1:77:
         db:a4:e7:63:b0:55:bd:92:15:43:f4:b6:19:fe:5a:5a:e0:65:
         29:b7:8e:4f:fa:8f:59:68:9e:e3:dc:a3:c6:79:b6:0a:7a:d7:
         93:6d:57:fa:ed:b6:de:6f:e7:b1:2a:4e:d8:59:5b:4d:c0:59:
         3a:19:b7:03:9a:fe:73:c9:3f:6a:7e:1d:27:ca:13:53:e5:da:
         f9:51:14:5e:43:75:9d:dc:be:9b:a6:10:da:d9:2f:10:54:b3:
         6b:07:26:b7:49:b4:21:2a:7f:b9:67:ad:0e:b1:88:d9:a1:1c:
         cf:2f:a5:32:10:56:75:4d:4a:a8:bb:06:6e:96:5b:d3:38:ae:
         d3:38:b9:d8:7f:57:17:55:0e:40:97:d6:b6:d1:0d:65:74:e5:
         6f:8d:ee:65:8e:83:da:c7:6c:00:ca:c4:b6:cb:8e:e5:af:44:
         a7:0a:f7:c0:32:81:df:2c:e3:bc:8d:c0:a9:d5:fd:06:f4:72:
         3c:3f:67:c3:3a:ec:8b:57:04:8b:6d:54:7a:56:8c:f4:fd:fe:
         d0:02:22:bf:11:0a:61:aa:4e:86:b7:9f:13:01:6e:fd:47:5a:
         11:18:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org