Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3136382e3138312e33322e302f32322d3234203d3e203532363533.roa
File:                     3136382e3138312e33322e302f32322d3234203d3e203532363533.roa (raw, json)
Hash identifier:          eTsDMiXVj4fauFE/YCMwxWg5bYVT8f/JKkWUpvw0RFE=
Subject key identifier:   FB:2E:61:47:8A:38:A0:C3:9B:1B:38:CA:0D:E3:FF:5C:8D:30:D7:C2
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1E6DC6435135978259D267DB48FFDA9F28724B
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3136382e3138312e33322e302f32322d3234203d3e203532363533.roa
Signing time:             Fri 30 Aug 2024 11:20:16 +0000
ROA not before:           Fri 30 Aug 2024 11:15:16 +0000
ROA not after:            Fri 29 Aug 2025 11:20:16 +0000
asID:                     52653
IP address blocks:        168.181.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6d:c6:43:51:35:97:82:59:d2:67:db:48:ff:da:9f:28:72:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Aug 30 11:15:16 2024 GMT
            Not After : Aug 29 11:20:16 2025 GMT
        Subject: CN=FB2E61478A38A0C39B1B38CA0DE3FF5C8D30D7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:0c:81:81:ab:e1:bf:95:cf:26:8c:a2:2a:
                    24:d0:f5:fe:1b:e4:67:04:f1:08:10:d7:f1:fb:b5:
                    f3:c9:42:78:3c:56:0a:98:3e:92:42:07:21:35:66:
                    59:20:aa:35:57:0a:18:cf:e8:90:44:34:60:60:55:
                    96:52:a5:be:cb:b3:02:2c:a0:22:00:b1:58:27:82:
                    82:ce:cf:02:75:3b:d4:88:50:ba:bf:79:3e:b9:f2:
                    5b:1a:c9:02:44:93:04:45:4e:b0:e1:3c:c6:dc:54:
                    46:b3:9a:7c:ac:97:7a:f5:b0:9a:be:3d:f0:8a:fe:
                    87:29:08:7a:b3:4a:8b:f8:4e:99:91:3c:f8:63:6a:
                    95:5a:06:38:4b:96:fc:25:b7:bb:ac:6a:05:4e:12:
                    34:08:90:5a:e1:47:a5:52:75:17:2a:d8:12:9f:9e:
                    2c:36:17:e9:24:40:2b:65:84:fa:9e:07:0d:ca:40:
                    04:7e:43:7f:ef:0c:07:db:e7:32:77:d1:37:5c:a0:
                    bb:ed:f4:93:f3:fd:0b:1a:f5:3e:20:9f:c3:12:cf:
                    52:85:e5:4f:c8:a7:cb:ff:b0:60:c9:bb:dd:e3:f8:
                    ca:f5:03:dc:3e:4d:57:a7:48:fb:48:d5:25:ba:a2:
                    ec:83:2d:34:4e:e1:1f:c3:19:33:f2:42:f2:77:d4:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:61:47:8A:38:A0:C3:9B:1B:38:CA:0D:E3:FF:5C:8D:30:D7:C2
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3136382e3138312e33322e302f32322d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:6f:a2:e3:64:91:e2:7f:d9:36:9e:46:9a:6f:96:46:ec:
         cd:be:c9:b2:67:55:aa:10:e6:50:cd:db:6b:a3:c2:fe:c8:79:
         63:c3:ec:f0:1f:31:84:ab:d2:fc:a1:76:96:b7:f2:09:87:77:
         54:63:3a:d3:6c:fd:b0:db:5c:08:14:d2:ec:03:62:34:32:9b:
         2a:b5:cb:2a:a7:bc:2a:f8:42:34:6a:01:05:0f:56:59:92:a6:
         b3:cb:07:f0:a1:59:8a:ce:86:6f:66:2d:d4:16:a5:fc:c3:b8:
         2e:66:3f:5c:25:9e:78:71:36:44:2a:40:6c:b3:5a:20:27:07:
         0a:43:5f:69:5f:27:7b:f8:bd:8b:ce:3d:c6:b1:7d:99:b2:4d:
         0d:2e:23:18:2f:96:e9:ec:2a:67:12:0c:82:d3:2e:e3:2f:73:
         88:53:79:1d:11:33:f1:16:0f:57:e2:60:e2:f7:35:49:2e:5d:
         f2:2e:65:cc:57:84:c6:64:51:e1:26:e4:2f:80:01:ce:3f:76:
         3c:25:47:2a:e5:1f:15:61:ac:d4:24:cb:f7:6a:8d:70:1f:19:
         e0:37:ca:72:cc:c9:d4:fc:c7:39:a5:30:1c:fe:5a:e3:7e:e7:
         8f:64:98:d1:31:1a:07:7b:c9:67:fc:c6:e2:ef:f9:16:3f:15:
         42:77:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:31 2024 by rpki-client on console-ams.rpki-client.org