Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa (raw, json)
Hash identifier:          WUzHxiXCgvyc6hYMXAlT1G5OE3qOIyB7S+zKp07luAs=
Subject key identifier:   4C:4B:67:D3:65:08:9C:4F:22:FE:64:69:12:87:EC:44:30:EA:B4:68
Certificate issuer:       /CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
Certificate serial:       0269FC7551C4A7EA7C939F22ADCC15E7B326E334
Authority key identifier: E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa
Signing time:             Wed 09 Oct 2024 13:13:36 +0000
ROA not before:           Wed 09 Oct 2024 13:08:36 +0000
ROA not after:            Wed 08 Oct 2025 13:13:36 +0000
asID:                     264949
IP address blocks:        168.232.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:69:fc:75:51:c4:a7:ea:7c:93:9f:22:ad:cc:15:e7:b3:26:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
        Validity
            Not Before: Oct  9 13:08:36 2024 GMT
            Not After : Oct  8 13:13:36 2025 GMT
        Subject: CN=4C4B67D365089C4F22FE64691287EC4430EAB468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:72:73:4a:35:7f:1b:87:52:8e:32:06:09:
                    e0:45:7f:58:d7:30:98:cf:8a:3f:80:cb:1c:20:31:
                    8d:26:c7:87:07:5b:ed:09:36:9d:e5:0b:f3:57:8f:
                    ae:d9:28:92:3c:2e:af:f2:f0:69:db:18:23:83:10:
                    3e:09:1b:34:f6:e1:65:52:d7:94:62:e9:76:1a:30:
                    07:0a:f8:a2:62:c7:0f:0f:fc:69:80:ac:59:a6:24:
                    f4:43:d4:ce:6b:4e:c5:21:50:72:1e:91:9f:7a:a0:
                    7c:80:d4:20:59:6e:03:49:5c:c0:6d:03:19:cb:ca:
                    11:a5:48:c0:06:f7:e2:8a:44:0c:bc:88:0a:7c:f7:
                    16:ab:81:15:e6:b4:36:36:3a:32:75:25:50:3f:6b:
                    75:10:fd:51:eb:f0:6b:f5:ea:8b:77:09:1c:73:e5:
                    2f:d8:99:66:ce:3f:00:d8:e3:ed:24:cc:dd:21:5f:
                    cc:d8:5c:77:03:70:75:0b:fb:19:d0:9e:b2:64:12:
                    10:db:05:5c:97:e7:0f:50:75:1c:74:94:cd:54:43:
                    1d:0c:b6:ec:56:2a:c7:a4:46:0a:8d:36:7b:38:7c:
                    3a:5e:a5:45:31:d3:25:d2:64:55:76:0e:71:7d:2d:
                    75:76:fa:95:05:f5:cd:81:3a:cd:1c:38:ec:39:a1:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:67:D3:65:08:9C:4F:22:FE:64:69:12:87:EC:44:30:EA:B4:68
            X509v3 Authority Key Identifier:
                keyid:E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:ef:0d:5b:05:69:51:22:60:df:71:60:12:86:69:b2:ab:
         ca:f3:b3:47:77:61:01:a9:ea:99:0c:35:18:63:e5:47:22:cd:
         81:43:de:cc:95:7e:a8:ca:03:bf:df:97:d4:40:a0:dc:c2:41:
         52:35:16:81:8f:52:8a:cc:05:fd:b7:d7:70:41:49:b2:60:70:
         86:7c:e7:53:69:77:c3:30:89:6e:89:15:ec:e7:a4:31:0b:7d:
         9c:09:ac:94:32:17:78:6c:da:b0:fb:96:fb:ab:04:29:b7:fb:
         c5:f4:fb:29:30:3f:93:37:a3:14:94:f6:10:c0:52:aa:1e:2a:
         7f:bc:4d:6e:08:56:d5:33:f4:e5:f9:66:49:be:61:de:76:98:
         cf:38:b4:d4:bb:95:88:02:9c:72:e8:5f:6c:4c:fd:af:30:3d:
         14:8a:1d:9c:8e:89:c1:c8:ec:94:94:c4:c2:e1:f6:a7:9b:5b:
         22:8c:55:ae:e5:50:44:eb:e9:7a:6d:80:e5:27:2e:e6:f6:4a:
         c8:6b:fd:d2:6f:03:73:70:b9:99:69:10:14:6f:d1:41:67:ae:
         ce:ec:ef:b1:25:59:74:e2:33:1a:b7:c1:cf:ab:28:a4:6e:0a:
         ca:e8:77:0b:70:33:07:df:8e:6f:36:80:90:2a:ea:f9:03:0c:
         36:45:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org