Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
File:                     3136382e3139352e302e302f32322d3232203d3e20323635343130.roa (raw, json)
Hash identifier:          ysIiHmNm4sTU+Wq3IPQH9xxUnGS/44r8PfWAPSgMdA0=
Subject key identifier:   CD:C1:11:63:31:AA:59:9F:CC:2D:B6:BC:98:CF:53:5E:F1:BC:7C:83
Certificate issuer:       /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial:       422C88E19221366394A6537EE2A9A9668190FF26
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
Signing time:             Thu 04 Apr 2024 16:32:58 +0000
ROA not before:           Thu 04 Apr 2024 16:27:58 +0000
ROA not after:            Thu 03 Apr 2025 16:32:58 +0000
asID:                     265410
IP address blocks:        168.195.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
                          rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2c:88:e1:92:21:36:63:94:a6:53:7e:e2:a9:a9:66:81:90:ff:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
        Validity
            Not Before: Apr  4 16:27:58 2024 GMT
            Not After : Apr  3 16:32:58 2025 GMT
        Subject: CN=CDC1116331AA599FCC2DB6BC98CF535EF1BC7C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:ae:5d:bf:64:ac:ec:6b:42:60:36:9f:2c:
                    dc:43:18:e6:ee:53:bb:0e:ca:68:9b:56:2f:ee:10:
                    e8:33:67:cb:ef:b4:77:ac:c1:b9:24:f6:bb:e0:98:
                    0c:85:17:d8:b8:60:94:fa:3f:d5:f1:98:1f:9d:a7:
                    9c:b2:90:e5:96:ce:3c:82:d4:b0:21:f0:db:67:3b:
                    1a:df:80:56:4b:17:a7:a7:a1:c6:b5:6e:23:fc:b7:
                    de:8a:2e:d0:2c:50:53:e5:36:53:4c:ea:ed:81:9c:
                    ca:9f:f5:c9:c8:80:ac:d5:d6:c1:20:ab:ff:a7:d1:
                    dc:fe:92:5d:57:57:6c:6e:b3:e0:3b:40:3a:af:92:
                    99:71:db:10:45:3e:4e:f9:3d:dd:d8:43:dc:d3:e4:
                    4e:df:99:b2:ab:4d:fb:8c:1d:2e:7a:5c:aa:09:97:
                    90:70:ae:ec:3c:1d:8e:c9:e2:8b:4b:99:8e:a1:53:
                    52:3c:78:45:f0:f0:88:63:0c:23:04:eb:cc:ed:f2:
                    a8:75:99:69:9f:15:f5:c9:62:61:89:8f:b7:e1:18:
                    9d:51:7e:35:43:9f:d5:4d:12:8b:16:8b:20:ca:ea:
                    9e:fa:53:fc:ec:33:37:5a:5e:a8:97:e8:8a:65:69:
                    93:75:61:95:fa:c1:4e:c5:8e:93:75:87:4d:a1:db:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:11:63:31:AA:59:9F:CC:2D:B6:BC:98:CF:53:5E:F1:BC:7C:83
            X509v3 Authority Key Identifier:
                keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:86:39:b2:cc:9d:da:3e:b3:76:c8:32:df:23:89:cd:46:09:
         34:00:ba:b4:42:4b:16:d0:52:9f:66:ca:f3:f0:54:79:3d:af:
         b3:14:c8:21:cb:ed:50:2f:a3:e2:9e:82:b7:53:9b:fd:17:07:
         f2:0e:36:4a:9d:01:0c:ba:b0:f9:7e:93:fc:00:5b:f3:c9:87:
         a8:34:95:0a:33:9d:0c:e7:c0:96:31:6c:f1:8b:97:87:91:00:
         b3:2a:e1:e4:cc:15:5f:5e:c9:a2:69:9b:ca:7f:e5:3d:15:ac:
         cd:d3:1a:5c:9e:34:46:54:3e:5b:6c:69:0e:7a:f9:95:15:bc:
         9a:b2:28:1d:43:cf:05:05:7d:b6:ff:b4:1f:73:df:d8:de:8e:
         9d:32:f7:a9:30:61:88:f5:16:7c:ed:42:0f:aa:e6:e0:c3:d9:
         a4:03:1f:be:10:1a:c4:9a:a1:f7:87:41:36:ce:97:6a:34:3e:
         8f:45:14:27:2c:23:2b:b8:67:aa:77:d5:19:34:67:b4:18:8c:
         b5:57:41:27:60:f0:9a:61:d5:a4:d7:4e:26:f4:b5:57:3b:95:
         f5:7a:a0:f2:35:26:a0:4a:38:b1:cc:15:3e:4d:55:d7:ae:e9:
         d5:09:00:64:b9:e5:2f:d2:d6:3d:e5:fa:23:c9:4b:e3:ff:65:
         b2:5c:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org