Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
File:                     3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa (raw, json)
Hash identifier:          irQxV59BIGRU1n2uUz+5OCLpyDVM1kfMJLXpjYaOhEQ=
Subject key identifier:   23:10:4E:6C:7E:F4:FE:F1:60:B8:1D:AB:FE:E0:63:CC:1C:33:BB:9C
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       377F41ABE378B6F42DFE3992205A5564BFCDC80F
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
Signing time:             Thu 04 Apr 2024 13:58:04 +0000
ROA not before:           Thu 04 Apr 2024 13:53:04 +0000
ROA not after:            Thu 03 Apr 2025 13:58:04 +0000
asID:                     263563
IP address blocks:        168.232.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7f:41:ab:e3:78:b6:f4:2d:fe:39:92:20:5a:55:64:bf:cd:c8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Apr  4 13:53:04 2024 GMT
            Not After : Apr  3 13:58:04 2025 GMT
        Subject: CN=23104E6C7EF4FEF160B81DABFEE063CC1C33BB9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:65:b9:fd:51:91:6c:b7:8a:b9:7d:78:d2:
                    7f:2c:8f:7a:ab:63:a5:ad:88:28:1f:d8:43:bc:fc:
                    3c:66:52:2e:32:f7:9f:37:2b:6d:55:5f:1a:d0:28:
                    58:7e:86:b9:f2:fd:14:29:93:39:e9:5d:4a:0d:b9:
                    8b:3f:2a:ea:48:ad:3d:77:34:6a:68:d3:64:92:ae:
                    ea:9f:e3:cf:ec:c5:cf:5d:35:4c:1d:d3:66:4d:be:
                    7d:44:e7:c5:be:61:93:f1:ad:07:b1:04:ee:a9:a5:
                    57:91:60:2c:55:00:5a:d8:52:fc:2f:e7:14:16:1e:
                    4f:7c:96:a6:fb:69:64:72:87:83:ce:8b:e8:2e:e9:
                    5f:cf:ca:7b:06:52:72:ad:8d:0e:ed:86:12:0d:04:
                    88:29:2d:41:0d:23:98:ce:88:54:d1:df:3c:ab:46:
                    c1:d0:62:bd:a9:3b:46:06:6f:5d:ed:0d:82:fe:b9:
                    b9:55:cb:50:65:3a:1b:42:47:d0:22:90:40:c1:68:
                    70:c9:29:90:fd:4b:6c:7c:78:03:1f:70:b0:a5:33:
                    37:43:52:c7:e5:1a:e2:24:f6:09:ad:46:f9:20:6e:
                    72:8e:f8:7e:6f:ac:8e:64:21:39:a7:bd:7f:9a:61:
                    e0:b5:a5:83:18:df:13:8c:60:57:47:cd:56:22:f2:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:4E:6C:7E:F4:FE:F1:60:B8:1D:AB:FE:E0:63:CC:1C:33:BB:9C
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:94:65:4c:49:ca:04:72:a4:c2:9a:06:d5:12:04:14:61:
         f5:92:3c:a0:99:53:7d:bf:43:2b:10:95:5f:66:a0:b9:2d:35:
         56:c6:5d:dc:12:b9:54:73:83:d2:a4:8d:4e:fd:63:96:97:50:
         18:32:27:99:a5:bd:8d:86:4c:62:01:b5:8e:49:d0:30:7d:73:
         25:3c:6e:35:3c:c8:e9:b4:d4:03:44:2a:a0:11:84:25:ae:2c:
         7f:94:93:e2:67:12:50:9f:97:7f:de:b8:2a:92:1b:38:ff:2f:
         b0:95:b1:7a:c0:60:99:f1:6b:2b:14:ba:e2:f6:7d:51:9c:56:
         ab:99:22:af:f2:f8:d5:e7:90:74:f9:14:ef:4a:8b:dd:15:d9:
         d8:11:6b:89:f9:51:64:ca:20:fc:39:a9:98:73:28:e2:a0:ed:
         75:d4:cd:71:44:d4:3a:86:fd:19:f1:7e:a9:43:06:80:ff:5a:
         d6:e3:80:0b:6b:5f:7d:95:15:54:b0:d3:d6:40:55:79:d3:03:
         7d:9f:d7:65:77:bd:ec:e1:76:ab:78:ea:41:f7:05:ab:23:47:
         90:d4:ec:15:79:df:d7:79:20:eb:b5:18:1b:c9:79:40:3c:f1:
         55:ad:3d:54:cb:4c:6e:11:c3:ee:07:6d:ba:d4:70:ca:8c:73:
         0b:c0:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org