Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa
File:                     3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (raw, json)
Hash identifier:          W/jqha00SlsRLdR2AN8oA0PwvcHXQxMn38tFyeAWiLU=
Subject key identifier:   5F:77:72:64:AB:98:69:F9:10:FE:C3:BB:3B:BA:77:B7:6D:43:FD:3E
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       69C010ED87AA29788927E97E75FF723F908D5217
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa
Signing time:             Wed 05 Jun 2024 19:29:58 +0000
ROA not before:           Wed 05 Jun 2024 19:24:58 +0000
ROA not after:            Wed 04 Jun 2025 19:29:58 +0000
asID:                     265436
IP address blocks:        168.195.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c0:10:ed:87:aa:29:78:89:27:e9:7e:75:ff:72:3f:90:8d:52:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Jun  5 19:24:58 2024 GMT
            Not After : Jun  4 19:29:58 2025 GMT
        Subject: CN=5F777264AB9869F910FEC3BB3BBA77B76D43FD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:c2:54:96:44:9e:42:c1:73:bd:bd:fc:af:
                    ba:a3:e6:dd:53:c6:73:cc:61:93:38:5d:46:a4:f2:
                    41:80:d3:d5:41:f3:72:c4:79:42:72:e9:85:d4:64:
                    8f:bd:9d:61:3f:61:d7:69:f6:4e:b3:f0:7d:d9:ba:
                    d0:c1:3f:8f:ea:52:ec:74:75:bd:46:24:d9:3c:8d:
                    c6:1c:a8:39:e9:ad:44:26:0a:d4:94:5c:f1:2f:5d:
                    1f:7d:fe:a9:f2:ee:b1:db:0a:fb:9b:19:77:29:03:
                    fa:2d:82:67:3f:7e:45:c1:d9:a5:99:0a:fd:a9:28:
                    1c:a6:cb:26:79:0c:ad:44:e2:f0:9e:fe:d2:27:a5:
                    1e:e6:5d:ec:8c:22:11:fe:86:6b:ae:44:1e:ac:d0:
                    38:33:82:55:c8:38:5d:82:1a:77:6c:0c:cb:ca:10:
                    ef:f9:dd:62:5b:ed:ad:ea:a8:8d:ab:4b:04:82:bd:
                    ea:ea:aa:7a:2c:35:16:31:3a:45:7a:0a:a1:1f:cb:
                    33:4b:d2:58:5c:49:c4:d6:cb:40:9f:2f:2a:e1:88:
                    ad:53:85:ae:e0:e1:76:8f:1b:83:38:7c:c1:37:4f:
                    ce:25:35:5c:9f:12:8f:98:8f:db:42:d3:67:59:46:
                    e4:b5:5e:63:fe:1c:ed:59:76:01:8d:4d:66:01:86:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:72:64:AB:98:69:F9:10:FE:C3:BB:3B:BA:77:B7:6D:43:FD:3E
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:8e:e1:35:2f:8e:b8:68:94:58:a2:be:cb:fe:83:4a:31:
         59:77:52:cf:53:1f:bf:93:49:35:b1:f2:cd:d8:73:1a:07:04:
         c1:39:a4:f6:59:e4:87:c6:88:f3:ae:b8:82:9d:85:c9:35:11:
         7f:c0:7f:82:12:28:35:f6:17:c5:12:f2:8f:b0:12:2d:33:7b:
         0c:c3:b5:e3:b9:c4:cb:69:5e:bd:d0:d7:a3:42:f1:71:13:d5:
         cf:e7:6d:32:74:37:5b:42:e1:f8:12:6c:5e:8a:ad:b7:7f:f9:
         cd:49:e6:6b:d0:17:7e:ff:9a:ae:ec:aa:29:f6:12:be:b7:5c:
         85:e3:7d:d8:f9:a8:88:c5:42:36:39:c2:e2:b1:a9:60:6b:1d:
         de:c3:9a:c4:76:5f:72:31:cd:3e:ba:b0:8a:a2:9e:11:d9:1b:
         59:54:4b:a4:e4:c3:f4:f7:f2:18:c2:cd:f8:50:1c:3c:f4:9d:
         58:fb:50:53:ae:f9:8d:fa:61:6a:f7:5c:48:c5:87:b1:04:6a:
         24:3c:2f:18:7f:73:0e:b8:0c:a7:be:bd:18:fc:f3:b3:32:ad:
         58:e1:7f:95:f9:67:59:02:da:d2:06:35:dd:cd:06:1a:4c:fc:
         5e:67:c9:9b:60:8e:8e:7e:f6:a9:e5:a8:c7:33:5f:cb:38:15:
         04:74:0f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org