Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          lOCvVLwtTS5j+K0CWF6A4CqPD1Ippp+/BMUpiesfp7A=
Subject key identifier:   93:6A:31:32:3E:89:6B:9E:25:60:4C:67:E7:5C:C4:E7:83:B8:0E:B2
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       0E786E85CCEB8B8DE542F60E55CDE36D78323C0A
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:04 +0000
ROA not before:           Thu 04 Apr 2024 18:19:04 +0000
ROA not after:            Thu 03 Apr 2025 18:24:04 +0000
asID:                     264936
IP address blocks:        168.232.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:6e:85:cc:eb:8b:8d:e5:42:f6:0e:55:cd:e3:6d:78:32:3c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:04 2024 GMT
            Not After : Apr  3 18:24:04 2025 GMT
        Subject: CN=936A31323E896B9E25604C67E75CC4E783B80EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:44:cb:40:4a:2e:4c:26:24:03:fc:4b:00:
                    84:9a:9c:0e:8c:ce:c1:cb:b5:94:1a:9f:b3:5f:32:
                    52:e2:81:60:2f:35:8f:da:38:62:3b:fd:68:bb:8a:
                    d6:95:ef:64:41:aa:0c:a2:a3:5a:ad:40:16:02:4d:
                    59:78:17:f1:30:d1:df:5d:d2:43:69:2b:d3:64:65:
                    57:cf:d8:77:2a:7c:f4:ea:dc:f9:0c:25:d9:53:5d:
                    ac:57:ed:80:e5:c5:08:43:a2:2d:38:f9:1b:31:11:
                    3f:8e:ea:df:2d:93:27:ee:6c:7b:8d:7e:37:f5:9c:
                    58:40:eb:ef:45:17:f6:b2:95:bc:53:43:81:e8:b1:
                    4a:a6:da:99:ca:4f:a3:90:9d:c1:c1:6a:c5:ed:9b:
                    2a:57:d1:e6:a0:06:c0:83:6e:3a:bd:f4:e5:4d:ac:
                    c8:7e:e2:25:d8:f5:58:78:bd:aa:7a:0a:d4:48:73:
                    bc:01:bc:95:bd:ca:b9:c9:29:8f:ca:05:84:a9:98:
                    83:fb:42:39:04:bf:48:7f:16:12:09:1c:a9:d0:fe:
                    3d:a2:c6:9a:6d:dc:29:ed:47:80:6a:81:41:82:0d:
                    85:6d:96:88:7c:82:ef:69:17:ba:9e:e2:4a:dd:d3:
                    11:b8:2b:71:5b:d5:91:71:02:2a:8c:96:7d:cd:b8:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:31:32:3E:89:6B:9E:25:60:4C:67:E7:5C:C4:E7:83:B8:0E:B2
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:50:2e:88:b0:bc:23:0d:62:8a:6a:ed:b4:78:eb:98:8b:
         0b:d2:7f:66:51:8b:e6:22:3a:5e:e1:15:70:f1:7b:50:64:c1:
         ef:9c:b0:3f:28:c8:d7:6e:8a:b8:f3:a9:c2:30:5f:f0:f0:12:
         9c:ed:42:f4:9a:9f:e9:a8:e1:7b:5a:44:81:db:67:e7:8c:e6:
         24:9f:37:f8:c3:fd:cc:26:1c:9e:1a:38:24:7f:b1:78:4f:f1:
         7f:44:96:e4:e2:70:da:34:c8:21:f5:77:cd:d8:33:c7:f6:b0:
         cb:47:fe:87:87:d2:ee:1a:b3:ed:db:26:b8:a3:fa:bc:e9:0f:
         78:61:20:2e:a8:6f:81:d4:29:b2:db:49:2d:58:6c:19:dd:5e:
         26:23:7c:53:de:46:f7:11:06:24:de:48:c4:88:3f:04:1c:80:
         38:52:ed:72:63:6d:14:9f:5d:b7:8b:c1:84:a4:cd:ab:78:c0:
         02:c7:8f:48:33:a2:79:0a:a6:da:d0:96:b8:69:23:c5:97:e6:
         43:e2:c8:9d:9c:19:b3:84:dc:15:8b:de:3f:e8:88:fb:6c:d1:
         5e:29:b3:9e:7d:c0:2b:f3:aa:fd:0b:58:12:ac:d9:db:c5:6f:
         56:55:05:f0:0b:75:a1:67:31:30:59:60:7a:64:da:99:11:ef:
         ea:13:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:35 2024 by rpki-client on console-ams.rpki-client.org