Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
File:                     3136382e3132312e35332e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          aCf5+MHnAVmUqHgXa3ph+Zq4aWF/AKjHX1v5ixCC0BY=
Subject key identifier:   D6:2E:7B:92:7D:F3:8A:13:CC:58:70:C7:81:25:07:1C:FF:7B:CC:D3
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       C2D908BFC19A881811711DC7D8585992C68DFA
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        168.121.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c2:d9:08:bf:c1:9a:88:18:11:71:1d:c7:d8:58:59:92:c6:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=D62E7B927DF38A13CC5870C78125071CFF7BCCD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:94:b0:76:a6:2b:e5:48:91:2b:73:9e:a3:
                    3d:79:fb:4d:60:13:f2:a1:ec:1c:f3:0e:d8:ce:6b:
                    23:12:4e:6f:42:44:82:be:c8:26:43:35:5e:64:6c:
                    3b:67:e1:49:c0:43:56:e5:f3:94:88:26:fa:99:ca:
                    4a:8d:fb:d9:e8:a3:23:45:44:db:bb:29:89:03:fd:
                    d4:29:97:6d:ee:d9:39:25:cd:b1:44:47:8f:f3:93:
                    1f:df:c9:12:18:0d:66:2a:48:0c:c3:6c:f3:ae:ef:
                    dc:08:ec:d2:9a:b0:31:38:ab:06:67:f8:f0:82:be:
                    cf:1d:b0:cd:2f:5c:88:77:60:fb:0b:b2:5a:91:45:
                    9f:48:69:92:ea:c9:d2:da:cc:1b:4c:99:aa:e3:53:
                    e7:33:d9:0d:f1:69:57:0e:1c:7b:01:e3:17:72:ee:
                    fa:29:28:5d:dc:27:cd:e0:f6:fb:64:5b:1d:8b:5e:
                    60:25:ec:2a:41:22:cc:88:a1:dd:e4:a1:57:a7:89:
                    d6:06:89:d2:a6:27:65:8e:bd:29:61:4f:0c:12:aa:
                    4d:df:a4:6f:03:8e:17:7c:d1:46:34:f3:f9:7e:3c:
                    42:5b:83:2e:34:2c:23:d4:cd:d9:b9:49:58:0a:fa:
                    03:08:ca:b4:5b:b1:d7:0f:ee:82:cf:68:6f:42:aa:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:7B:92:7D:F3:8A:13:CC:58:70:C7:81:25:07:1C:FF:7B:CC:D3
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:a9:82:90:57:c5:33:8c:a1:4e:c2:16:be:6c:7a:d3:e0:
         92:15:0a:cf:18:d4:3e:c6:14:e3:5d:af:07:45:e0:27:55:fb:
         8e:1c:a4:90:f9:c7:a4:e4:02:e7:24:d8:35:e2:c5:e3:9d:d9:
         a2:43:3c:2f:2e:84:b9:41:0d:ee:b2:d4:11:43:a2:73:f7:bc:
         e8:90:fc:a4:83:65:94:68:b5:e2:28:1d:dd:89:84:0e:16:1e:
         b4:35:b4:f9:cf:4f:ae:4b:42:31:ef:43:f8:43:78:4e:4a:f3:
         fa:3f:09:f5:65:38:75:ca:57:1e:07:1f:8d:9b:a0:d3:48:25:
         36:16:b1:f9:88:7b:d9:1c:dc:3e:0e:b0:65:b4:0b:ff:71:98:
         46:c6:0a:a6:27:1e:2a:f2:76:58:a1:7a:1e:b7:67:8b:e4:42:
         02:ee:a5:c9:c9:19:09:51:ff:5d:86:45:68:9a:18:db:22:76:
         72:a5:4e:c6:51:e6:74:82:ac:c3:cb:82:2f:32:2a:14:38:b2:
         1e:18:0e:9e:f9:37:ce:90:0b:65:a7:c1:c3:18:15:65:32:d8:
         79:62:51:2e:f2:ca:33:e8:68:19:68:96:00:56:65:98:85:5e:
         bf:fb:ac:4e:2f:67:b8:e1:23:26:8c:70:7e:7d:4d:70:87:7a:
         58:64:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:54 2024 by rpki-client on console-fra.rpki-client.org