Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
File:                     3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (raw, json)
Hash identifier:          n9MqJXmtAOgLWU7fOpTEZBIA9EgWEFzsR4MMb5ZP1uc=
Subject key identifier:   4F:C3:9A:AF:22:7D:C8:BD:8D:77:11:64:D4:1A:3D:BC:7B:C1:81:59
Certificate issuer:       /CN=4F865EC6CC86C14ED41B0043889208511C897E9E
Certificate serial:       10CD339C367121EC0A07E77DF3771E1531C3E988
Authority key identifier: 4F:86:5E:C6:CC:86:C1:4E:D4:1B:00:43:88:92:08:51:1C:89:7E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F865EC6CC86C14ED41B0043889208511C897E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
Signing time:             Thu 04 Apr 2024 14:42:07 +0000
ROA not before:           Thu 04 Apr 2024 14:37:07 +0000
ROA not after:            Thu 03 Apr 2025 14:42:07 +0000
asID:                     266168
IP address blocks:        160.19.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/4F865EC6CC86C14ED41B0043889208511C897E9E.crl
                          rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/4F865EC6CC86C14ED41B0043889208511C897E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F865EC6CC86C14ED41B0043889208511C897E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cd:33:9c:36:71:21:ec:0a:07:e7:7d:f3:77:1e:15:31:c3:e9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F865EC6CC86C14ED41B0043889208511C897E9E
        Validity
            Not Before: Apr  4 14:37:07 2024 GMT
            Not After : Apr  3 14:42:07 2025 GMT
        Subject: CN=4FC39AAF227DC8BD8D771164D41A3DBC7BC18159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:87:aa:51:45:7c:6c:fc:6d:cf:7d:77:f2:3a:
                    52:aa:1f:30:f2:33:2f:ce:c1:b4:64:28:36:cc:55:
                    05:90:76:53:97:2b:bf:38:b3:6f:bf:6b:8f:b7:fe:
                    e1:aa:8e:0e:60:ff:c2:9b:d3:79:c8:64:31:a0:36:
                    c2:3c:6c:d0:00:05:6e:02:13:3c:aa:04:54:71:13:
                    61:33:d9:06:eb:8c:c9:b7:e2:7f:56:5e:57:48:d9:
                    05:63:f5:15:33:98:36:65:6e:fb:3a:45:17:30:0c:
                    eb:25:7b:71:f3:66:38:7b:96:cf:c4:f9:53:c9:44:
                    0d:02:88:a3:28:b0:89:b3:8e:7b:a4:48:96:10:8b:
                    22:b6:35:d3:31:5d:56:52:22:37:43:6d:51:e5:bd:
                    32:5d:c2:75:f6:61:7b:a6:4b:5c:3e:cc:49:7f:58:
                    1b:7a:42:9f:9b:15:28:34:e4:80:c3:3a:0d:5f:12:
                    87:43:0c:48:bb:a4:e2:db:e4:4c:91:6b:2c:1e:70:
                    96:0f:85:f4:76:3f:50:d5:71:25:ca:e9:fe:67:65:
                    24:49:26:ff:03:cb:b0:15:96:e1:71:dd:e0:d8:43:
                    f9:80:e5:ab:c7:33:94:4e:e8:8c:c1:7b:c3:c8:29:
                    73:ed:78:6a:4b:4f:2f:99:2b:d4:54:db:3f:a7:ea:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C3:9A:AF:22:7D:C8:BD:8D:77:11:64:D4:1A:3D:BC:7B:C1:81:59
            X509v3 Authority Key Identifier:
                keyid:4F:86:5E:C6:CC:86:C1:4E:D4:1B:00:43:88:92:08:51:1C:89:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/4F865EC6CC86C14ED41B0043889208511C897E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F865EC6CC86C14ED41B0043889208511C897E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/1/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:bf:6f:d9:1c:63:ba:72:60:e2:71:ae:e7:e8:d8:69:fe:9e:
         a5:51:76:57:42:71:99:1f:82:5d:e8:b5:bb:14:0b:77:d4:51:
         82:42:f3:c9:c5:f3:70:3d:2b:63:06:58:cd:a0:5a:61:51:48:
         9d:e9:d5:10:de:75:9c:2c:fc:bc:a0:db:a5:8c:9a:4e:2d:46:
         70:fa:ef:26:20:95:d5:b2:83:eb:6a:e5:23:7e:52:ac:3d:02:
         8c:5b:6c:12:4c:e3:5f:d1:54:38:f3:f2:ce:24:90:94:e7:a3:
         43:4e:c9:4e:7f:e9:b4:d6:ed:28:5f:74:33:23:41:3d:c6:7c:
         50:94:8c:e7:a1:87:e0:dc:45:77:e9:c1:af:86:d1:6a:fe:a8:
         b0:f7:83:58:e3:61:be:b0:8a:a5:9c:a4:0d:bf:3b:c6:c3:a1:
         bc:d7:ab:1a:6b:b2:dd:40:f7:48:73:fc:a0:5b:24:05:cb:d4:
         71:9f:5d:61:48:0a:7b:0f:5b:89:16:27:f8:57:49:6a:ca:6d:
         33:e1:70:f6:bb:6f:9f:84:35:52:2e:73:34:35:20:98:a8:6b:
         a5:84:9a:a9:87:9b:87:fc:cb:09:de:f2:6e:9f:bd:c9:2e:7b:
         b5:bb:55:c7:b7:fa:23:c2:09:67:d7:85:28:34:e9:dd:ac:a0:
         54:94:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:03:08 2024 by rpki-client on console-fra.rpki-client.org