Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
File:                     3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          Ch6E07hKxFhp2T6qiH2egazISycK3OtrMv1EtmegE9s=
Subject key identifier:   E8:C1:60:D8:C3:A6:96:56:D8:2F:01:6E:5D:E8:9C:A6:B9:F1:4F:2D
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       7958FDCD27504502E799D5736D3062D792A3C265
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:22 +0000
ROA not before:           Mon 09 Sep 2024 14:55:22 +0000
ROA not after:            Mon 08 Sep 2025 15:00:22 +0000
asID:                     28270
IP address blocks:        168.228.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:58:fd:cd:27:50:45:02:e7:99:d5:73:6d:30:62:d7:92:a3:c2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:22 2024 GMT
            Not After : Sep  8 15:00:22 2025 GMT
        Subject: CN=E8C160D8C3A69656D82F016E5DE89CA6B9F14F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:60:04:4d:66:78:31:7c:0c:65:94:ed:3c:
                    9a:a5:f5:d5:f4:85:aa:c7:ab:db:53:c6:4b:04:a6:
                    b6:da:f7:ed:81:ec:de:45:b6:cb:38:83:5d:18:95:
                    b3:6c:09:2c:78:32:2c:c1:b5:19:b5:9f:af:28:db:
                    09:2e:bf:db:5f:e6:09:65:4a:a7:96:52:4d:bb:a9:
                    a2:4d:f5:37:fd:68:cb:12:c8:48:ea:88:a2:bc:4e:
                    03:3d:72:f9:e9:b5:fe:4c:2e:bd:20:a5:55:36:3c:
                    c4:a8:60:11:ee:eb:3e:97:5b:ab:91:04:a5:ed:f6:
                    a2:f9:fb:f3:47:b2:a7:84:72:93:63:f1:35:e2:7f:
                    fd:ec:f3:d6:49:1f:75:42:5f:40:c4:54:4d:ef:41:
                    d2:4b:5b:2a:7f:92:8d:04:b2:e4:27:84:ff:11:82:
                    2a:4b:42:62:4d:28:73:c6:82:d8:e2:4b:40:16:46:
                    42:14:0b:19:a9:17:7b:de:03:12:f1:9a:ca:62:d9:
                    b1:1c:e9:cf:03:8e:91:c5:e7:3d:67:4e:ee:bd:fd:
                    4a:75:6b:bc:ed:1c:d1:00:93:3e:a1:74:47:20:42:
                    bf:08:2f:b7:07:f4:9b:27:96:e0:4c:f9:7e:e2:4f:
                    66:ba:d1:cc:14:83:d7:12:26:39:00:56:19:7a:64:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C1:60:D8:C3:A6:96:56:D8:2F:01:6E:5D:E8:9C:A6:B9:F1:4F:2D
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:8d:a6:aa:ef:ce:bc:59:0a:e2:d2:9b:f0:bd:a7:f8:63:
         fe:45:95:21:ff:4d:cc:93:a3:c4:e8:3f:f1:df:ff:93:95:0b:
         59:d8:59:20:a7:30:38:bc:fb:f4:f4:89:68:76:e5:43:ff:c1:
         85:b0:0b:bb:ad:f8:1f:60:05:ef:88:15:7b:a6:e2:34:a7:0c:
         b4:22:8a:88:7d:cc:d7:af:f1:ec:66:46:0e:0f:30:40:5f:0a:
         7a:40:ad:e9:9d:92:e2:71:cb:e0:dc:14:9f:2a:60:6f:9e:22:
         ed:b1:21:ea:b2:83:35:9e:f9:9c:72:b3:34:1f:1e:3b:4a:07:
         d0:43:a4:d6:b6:6a:3d:9d:2c:e6:0f:fe:74:97:6c:93:76:79:
         e6:ce:dc:dc:17:c1:14:c7:1a:fe:98:15:8f:34:8a:88:bd:c5:
         a2:9d:f9:b6:bc:32:aa:85:50:26:45:10:a4:a6:5e:22:4f:56:
         c5:d3:18:16:23:1c:af:fb:04:b4:9b:d5:61:cb:eb:1c:61:59:
         e9:c8:31:b1:11:59:15:c9:5e:c4:a9:48:ef:5d:28:75:91:a4:
         3c:ca:e0:fc:32:8d:48:96:ba:ee:2f:98:6c:7c:99:d5:2a:01:
         18:e7:50:67:26:ed:3c:e1:90:cf:67:f4:32:bd:5d:9d:a7:f0:
         fa:d5:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org