Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
File:                     3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          UtZXEuCUxnpy7OU4/mh9NrfdLarhhU5qTxwNn47iUC8=
Subject key identifier:   4E:EF:C0:E0:9F:AC:36:9F:2C:11:2E:6E:0B:4B:90:85:38:B2:46:48
Certificate issuer:       /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
Certificate serial:       4EDCDF16457BA1D7FB8DA06EB13397E5E341A87B
Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 03 Apr 2024 18:39:22 +0000
ROA not before:           Wed 03 Apr 2024 18:34:22 +0000
ROA not after:            Wed 02 Apr 2025 18:39:22 +0000
asID:                     263145
IP address blocks:        168.205.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl
                          rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dc:df:16:45:7b:a1:d7:fb:8d:a0:6e:b1:33:97:e5:e3:41:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
        Validity
            Not Before: Apr  3 18:34:22 2024 GMT
            Not After : Apr  2 18:39:22 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:5c:1e:61:93:f2:6d:10:b4:c4:cd:47:80:
                    cf:0b:d7:c6:2d:12:b9:4d:12:ac:4a:3f:0b:97:3d:
                    5b:a6:c0:a0:a6:63:ab:24:5b:f3:51:a5:28:8a:14:
                    28:65:ac:35:cd:c7:93:5f:b2:bd:ba:a5:9d:d7:75:
                    1f:a6:29:ad:73:4f:71:84:4e:eb:b4:17:15:08:34:
                    bf:3c:1e:08:bb:85:2e:5c:94:87:c2:ea:bc:c5:89:
                    07:9d:31:e1:d8:34:23:54:b9:a4:0b:83:95:de:6e:
                    47:5a:5d:99:8a:85:6c:8f:02:0f:ee:8f:4d:63:0f:
                    62:25:b8:33:f4:44:44:bd:1b:09:15:67:50:c6:c4:
                    c1:67:22:d2:df:61:f7:d5:c3:6e:16:c5:69:06:15:
                    a9:bd:4f:08:67:25:c8:43:3d:16:e8:52:83:26:b7:
                    2c:a8:93:b1:7c:59:67:18:55:58:cc:28:ad:d7:16:
                    c4:2f:be:ab:43:dd:46:0a:61:69:aa:2f:51:70:f9:
                    1e:59:1a:a7:f2:5a:54:c6:ca:a1:05:d1:cc:64:9d:
                    d4:92:d5:56:e3:9e:55:48:b7:c1:0a:93:92:66:23:
                    73:06:6d:31:42:d3:bb:5a:5c:2c:85:05:8c:bd:31:
                    98:0b:52:10:08:6d:1d:29:84:40:92:46:69:7b:f3:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:C0:E0:9F:AC:36:9F:2C:11:2E:6E:0B:4B:90:85:38:B2:46:48
            X509v3 Authority Key Identifier:
                keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:90:6a:53:63:9d:60:11:b4:15:02:ec:bc:77:2f:e5:be:
         d3:33:2b:0f:91:7d:93:43:6e:c5:23:95:38:22:0d:ca:5e:62:
         b0:39:5c:33:ba:ba:ee:81:c8:3b:54:72:53:da:33:d1:44:ed:
         9b:ec:88:42:2f:a3:7e:4d:3f:07:8a:a2:14:2d:30:41:4c:dc:
         7d:79:01:a7:d9:7f:c5:3f:62:88:e6:14:eb:c2:87:3b:ce:78:
         52:dd:c8:7d:3a:bf:a3:fb:62:9e:49:11:fa:08:77:83:d1:b7:
         75:08:8f:8e:e4:88:4b:2c:bc:fe:1d:4e:5e:64:7a:1b:46:97:
         c7:f5:ab:e5:81:ee:b3:c2:2d:c3:2d:94:08:7a:bf:0a:12:81:
         7b:9b:76:11:44:87:7c:e4:f7:26:0f:58:8c:7c:9c:31:85:0f:
         89:f3:12:c5:3b:db:01:9f:0d:0c:06:84:1d:f2:34:fa:98:e8:
         47:09:27:53:d2:b3:60:9f:86:02:dd:7c:66:e7:7f:31:19:16:
         76:46:f0:87:5d:8b:4c:fc:eb:3e:f5:d1:f5:c8:af:9e:4c:66:
         e5:56:c6:a1:02:58:5d:03:70:fc:0f:ae:c3:24:08:e2:92:5d:
         29:7e:3a:93:20:c2:98:f1:6f:ad:07:af:bf:3c:14:df:07:87:
         af:3b:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org