Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
File:                     3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (raw, json)
Hash identifier:          5ZoSA3t4CmuYl5galp38fak/ZKkB1wTwTIkdyhDqNRg=
Subject key identifier:   C1:52:77:7A:D3:19:C0:FC:AB:85:73:2D:78:17:CD:CA:EF:42:BB:93
Certificate issuer:       /CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
Certificate serial:       6120DF24919A4D35B9DF3085FE2A7DB79438B49B
Authority key identifier: 3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
Signing time:             Thu 04 Apr 2024 22:55:52 +0000
ROA not before:           Thu 04 Apr 2024 22:50:52 +0000
ROA not after:            Thu 03 Apr 2025 22:55:52 +0000
asID:                     265018
IP address blocks:        160.238.200.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl
                          rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:df:24:91:9a:4d:35:b9:df:30:85:fe:2a:7d:b7:94:38:b4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
        Validity
            Not Before: Apr  4 22:50:52 2024 GMT
            Not After : Apr  3 22:55:52 2025 GMT
        Subject: CN=C152777AD319C0FCAB85732D7817CDCAEF42BB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:94:a2:81:9e:e4:b4:dd:5c:03:13:97:24:66:
                    c5:1a:dc:bb:72:78:98:ff:29:62:b3:26:06:d8:b4:
                    d7:db:c1:3d:71:f3:85:cf:3d:31:9b:3b:2b:16:1e:
                    ba:21:ce:70:07:b4:7d:29:ea:c7:3e:e6:9f:6e:fc:
                    5d:be:78:d4:f4:05:54:1e:7d:bf:39:a9:9f:31:3c:
                    62:8f:52:f2:48:9b:82:e2:b5:d5:75:b4:4d:e5:02:
                    90:46:63:a9:df:1a:73:76:de:02:15:78:84:32:90:
                    65:04:2f:1a:8a:54:57:b4:04:f8:ce:61:02:bf:77:
                    7d:8d:63:5a:57:69:26:e5:8a:ca:2e:95:64:be:dc:
                    0d:4e:c8:8a:fe:09:ca:7e:59:13:c6:17:e1:a3:8c:
                    77:ee:74:8a:31:8f:ca:a7:60:c6:af:08:be:32:98:
                    85:43:84:0e:4f:5e:a6:ad:8c:51:43:1c:97:92:02:
                    c4:5a:2f:07:fa:dc:90:a9:84:cf:80:9e:45:c9:11:
                    97:85:1b:8b:00:93:0d:51:09:ee:a4:ea:a7:72:32:
                    1e:8b:c9:08:89:7d:a4:05:1c:1f:7d:1f:db:31:4f:
                    f8:1c:b6:5b:75:fd:5c:91:6c:7e:e9:7b:2d:f9:fd:
                    de:4e:3c:39:77:32:19:b6:7c:dc:76:d7:db:37:19:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:77:7A:D3:19:C0:FC:AB:85:73:2D:78:17:CD:CA:EF:42:BB:93
            X509v3 Authority Key Identifier:
                keyid:3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:02:a5:0f:b9:8e:96:78:16:5c:2b:e0:47:a2:94:04:ae:b2:
         d8:41:9a:96:ba:47:d3:34:d6:24:49:c7:b3:fd:45:b3:3c:e3:
         eb:91:52:dd:74:69:9f:64:2e:ee:e4:2d:34:33:2b:00:9b:1a:
         bb:d7:ad:7f:40:1d:3c:53:6e:1d:d6:d9:68:72:49:a4:86:87:
         b9:dd:5f:be:e3:9d:ef:de:62:ac:fa:80:8b:d2:7f:b7:bb:69:
         2e:fb:9c:79:c7:dc:7f:b9:98:2b:b3:93:1c:6c:10:bf:e0:ca:
         77:5f:34:55:93:63:ab:df:51:b4:00:2d:cf:36:a9:94:6f:75:
         73:18:6f:f7:49:27:30:c7:35:1e:94:96:cc:76:d0:15:7a:9f:
         de:49:92:72:c5:66:eb:17:ea:96:f8:08:52:c6:3c:61:5a:26:
         65:e3:2a:37:22:d4:20:19:7b:85:65:20:3f:63:08:29:c0:39:
         e4:98:0a:85:37:1f:00:b9:7c:b0:7a:91:6b:51:d1:25:b4:0d:
         bd:5d:8c:57:ef:7b:5d:1f:2d:e9:29:b2:e7:df:29:2c:42:14:
         87:72:fb:a3:25:83:6f:0d:2e:50:71:bd:5b:e4:75:8f:a7:86:
         db:aa:d1:23:f0:b0:7d:47:2b:47:23:90:86:6b:6b:b9:58:6c:
         37:75:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:49 2024 by rpki-client on console-fra.rpki-client.org