Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
File:                     3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          tbXa1kALhGNH1Q6fyLfW3TfR7ItJj1cHUHnIqtyxoyM=
Subject key identifier:   B9:C2:E8:B5:3D:8E:E9:51:15:FA:76:BF:9A:FB:8A:84:B7:CE:30:5B
Certificate issuer:       /CN=97544BE1E037DEC68470E5CF05CB2966855E710F
Certificate serial:       24665EF0AF4EB8E17A55A719268BB354B4C31C4B
Authority key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:13 +0000
ROA not before:           Mon 08 Apr 2024 20:02:13 +0000
ROA not after:            Mon 07 Apr 2025 20:07:13 +0000
asID:                     262509
IP address blocks:        168.121.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:66:5e:f0:af:4e:b8:e1:7a:55:a7:19:26:8b:b3:54:b4:c3:1c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97544BE1E037DEC68470E5CF05CB2966855E710F
        Validity
            Not Before: Apr  8 20:02:13 2024 GMT
            Not After : Apr  7 20:07:13 2025 GMT
        Subject: CN=B9C2E8B53D8EE95115FA76BF9AFB8A84B7CE305B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:d7:90:72:27:ac:a3:fb:58:c1:ea:14:2f:
                    d8:c0:eb:e9:d7:54:6a:06:3e:1e:2d:f9:0e:5b:b5:
                    83:94:9e:41:12:80:38:6d:94:eb:94:c9:56:f6:c9:
                    6a:94:70:dc:c3:4a:dd:05:c0:fd:73:45:74:d8:c2:
                    26:fe:1f:3a:d7:37:56:34:9a:b4:22:3e:a1:8b:af:
                    72:69:83:3d:65:e8:5f:a3:2b:05:a3:0d:ff:59:3a:
                    2c:9a:fc:9b:7f:45:76:9f:ee:84:9e:e6:57:33:38:
                    dc:7c:2f:03:8d:39:9a:11:ec:4f:78:a6:9c:7d:fc:
                    d3:60:43:16:9e:8b:34:e8:47:5e:03:ea:cb:7b:16:
                    1e:e6:97:27:29:8e:8c:2e:f8:44:e1:3b:da:90:1b:
                    a3:f8:2b:64:9b:98:af:1b:c6:1f:f7:53:8c:bb:87:
                    72:7a:bb:d6:6a:b8:f4:39:b2:18:f1:a2:2f:cb:90:
                    33:3f:ea:ef:35:a4:90:4d:2e:3f:71:34:8b:ec:4d:
                    35:8d:0e:12:9c:9f:59:9a:18:2f:d3:c5:cc:bb:c2:
                    64:3b:cb:bc:75:2c:cd:9b:86:08:ba:0e:48:5b:ef:
                    8b:d1:c9:36:d4:8e:47:47:1c:05:aa:5f:42:b1:9e:
                    06:16:d0:64:b9:a6:54:f0:43:5f:0b:60:0f:66:24:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:E8:B5:3D:8E:E9:51:15:FA:76:BF:9A:FB:8A:84:B7:CE:30:5B
            X509v3 Authority Key Identifier:
                keyid:97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:4f:67:92:56:53:3f:5b:8c:e0:ed:cd:fe:c9:b1:83:2f:
         17:1a:7f:65:39:f4:c8:cb:e0:e5:81:2a:1f:53:94:eb:b9:ec:
         77:35:a5:39:00:0f:aa:04:0d:c5:0a:35:55:fd:ea:30:b8:ab:
         69:79:5f:93:99:9a:f6:77:ce:78:01:bf:00:66:a7:cb:f4:1d:
         63:a5:96:d9:90:ae:f0:df:f3:72:87:52:a5:51:00:02:fc:82:
         de:bc:6b:c2:0c:14:1c:ab:af:1b:bc:3c:aa:fb:3c:f8:b4:62:
         00:6d:c1:0c:bf:14:99:2a:42:d2:d7:3c:e7:92:e5:84:9f:07:
         f6:64:ba:75:54:54:9f:02:44:aa:35:47:6c:f1:25:57:55:09:
         8b:43:31:f9:d6:69:1e:92:e8:c8:d7:0c:ca:04:86:6b:15:e3:
         0d:c4:65:bd:2d:36:84:6e:66:9e:3f:d0:65:5e:fc:8c:f3:a1:
         4c:bd:7e:f0:4e:f7:0c:1f:1b:17:dc:82:60:b7:03:fe:a3:aa:
         9b:da:e6:6c:2c:68:e4:24:c4:f3:70:90:b3:6a:3f:f7:64:95:
         0d:b3:82:c1:5d:1c:97:c8:ee:2e:46:40:18:1c:e9:5e:85:73:
         5a:d7:ca:70:17:70:a7:48:57:b6:5d:0f:c1:fb:de:94:e4:ee:
         f2:4c:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:14 2024 by rpki-client on console-ams.rpki-client.org