Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
File:                     3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (raw, json)
Hash identifier:          xB53YcfdSUhvffrW2V41bi3mJM6vB4ePHMVNp3LT304=
Subject key identifier:   51:87:2A:EE:A4:8C:7A:1A:55:0B:D2:87:FE:D1:4C:95:4F:54:88:7E
Certificate issuer:       /CN=C6AE4DF0F67CA71F82451767F019B58122510AA6
Certificate serial:       1DE7AFA91214B6D45FBB6BA57A11DC4E1018B6F5
Authority key identifier: C6:AE:4D:F0:F6:7C:A7:1F:82:45:17:67:F0:19:B5:81:22:51:0A:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6AE4DF0F67CA71F82451767F019B58122510AA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
Signing time:             Tue 08 Oct 2024 18:49:00 +0000
ROA not before:           Tue 08 Oct 2024 18:44:00 +0000
ROA not after:            Tue 07 Oct 2025 18:49:00 +0000
asID:                     266168
IP address blocks:        160.19.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C6AE4DF0F67CA71F82451767F019B58122510AA6.crl
                          rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C6AE4DF0F67CA71F82451767F019B58122510AA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6AE4DF0F67CA71F82451767F019B58122510AA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e7:af:a9:12:14:b6:d4:5f:bb:6b:a5:7a:11:dc:4e:10:18:b6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6AE4DF0F67CA71F82451767F019B58122510AA6
        Validity
            Not Before: Oct  8 18:44:00 2024 GMT
            Not After : Oct  7 18:49:00 2025 GMT
        Subject: CN=51872AEEA48C7A1A550BD287FED14C954F54887E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:0a:68:d5:55:e6:b8:fd:14:3b:d7:78:46:
                    c0:c7:e3:aa:df:a5:e5:a8:1f:e4:0c:f1:ec:f7:f3:
                    d7:3a:8b:a1:2e:cc:48:9f:5e:a7:b3:62:c4:63:f3:
                    a3:a2:06:34:74:ac:79:2b:1b:f6:31:3e:64:29:93:
                    0b:5c:05:d5:fb:57:8b:44:b0:52:90:b2:9b:29:7a:
                    69:1b:33:db:06:f6:31:9c:4e:8b:e4:84:08:ff:ff:
                    cc:3d:4b:49:91:59:6f:92:0a:ea:11:79:37:61:ce:
                    91:25:e0:6c:7a:39:db:c3:78:23:a5:64:bc:89:70:
                    83:b5:38:4e:e1:cd:0a:d1:39:31:16:0f:c2:5c:cb:
                    68:a0:b9:99:a0:ae:63:00:15:78:02:13:5d:8a:ae:
                    d1:14:1f:1e:e6:42:94:d2:46:21:d2:4c:b8:39:d9:
                    d4:bd:db:a2:74:b4:72:18:43:68:68:8b:78:9c:15:
                    7d:68:49:43:f0:ed:d6:b1:b5:9e:df:2f:ba:ec:63:
                    9c:b8:a7:50:3b:ee:64:6e:b8:ec:45:dd:c4:16:7b:
                    cb:d2:f9:fa:0d:ae:0b:ec:84:7e:b2:03:96:b4:64:
                    12:08:5e:71:02:94:f2:94:b8:bd:67:2a:42:d9:e7:
                    7b:e7:10:b5:50:16:07:a3:cc:73:8c:e9:eb:c4:41:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:2A:EE:A4:8C:7A:1A:55:0B:D2:87:FE:D1:4C:95:4F:54:88:7E
            X509v3 Authority Key Identifier:
                keyid:C6:AE:4D:F0:F6:7C:A7:1F:82:45:17:67:F0:19:B5:81:22:51:0A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C6AE4DF0F67CA71F82451767F019B58122510AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6AE4DF0F67CA71F82451767F019B58122510AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:b4:ed:6b:cd:aa:32:90:24:a1:0c:ec:b1:9b:ee:0a:bd:
         b5:d9:75:f9:d7:3c:e8:fb:b6:e0:f6:77:1b:de:fe:39:ce:49:
         1e:b9:f1:28:3e:f1:7a:1f:f8:b8:5f:26:6c:3d:7a:a5:83:05:
         17:3b:c1:d5:05:53:58:4e:7d:b1:11:e4:ba:ad:66:ff:61:8f:
         59:ba:18:c6:05:10:e3:bd:3e:ff:a7:07:c8:57:0c:ac:e3:a6:
         47:2f:89:0a:59:9b:2a:e5:75:2e:b1:ec:4a:6c:15:ff:04:39:
         d6:87:fe:97:89:3e:02:25:54:a6:d4:de:82:f0:5f:44:93:64:
         dd:a2:44:98:32:a0:9f:93:e6:a1:aa:94:56:d4:09:61:97:fc:
         ea:c7:86:fe:e4:9f:7f:6f:b2:63:8c:21:2a:77:b2:36:69:62:
         52:f5:d8:92:0f:b2:a6:14:16:42:05:b2:4f:9b:9e:e0:e5:c1:
         7e:03:9a:c5:02:f0:bf:fc:8d:9e:17:c6:2b:e2:cf:ab:ed:16:
         9e:d8:15:43:f6:d5:40:d4:81:7d:55:04:5e:c5:e5:6a:28:03:
         59:51:1b:9c:bc:73:b2:a7:99:07:b8:12:ca:17:7b:ac:8c:8e:
         87:5c:ba:e2:6d:d8:c6:fa:b7:7e:7c:0c:28:22:f1:78:b8:3e:
         df:dd:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:10 2024 by rpki-client on console-ams.rpki-client.org