Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa (raw, json)
Hash identifier:          Iuh5gG4fZGH/cfucY705XFF9HJuyBO8e6WA292Q/tcs=
Subject key identifier:   4A:5F:1D:2A:B5:7F:B3:A6:D4:11:BD:62:2E:3A:F1:31:DA:B5:C0:76
Certificate issuer:       /CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
Certificate serial:       71C0044A77CC4E565D2B1A0823367012BF06FF91
Authority key identifier: E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa
Signing time:             Thu 04 Apr 2024 04:32:21 +0000
ROA not before:           Thu 04 Apr 2024 04:27:21 +0000
ROA not after:            Thu 03 Apr 2025 04:32:21 +0000
asID:                     264949
IP address blocks:        168.232.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:04:4a:77:cc:4e:56:5d:2b:1a:08:23:36:70:12:bf:06:ff:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
        Validity
            Not Before: Apr  4 04:27:21 2024 GMT
            Not After : Apr  3 04:32:21 2025 GMT
        Subject: CN=4A5F1D2AB57FB3A6D411BD622E3AF131DAB5C076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:eb:cf:94:78:5e:a1:31:31:6e:49:1f:5e:
                    24:e0:52:c2:05:a3:ab:da:fc:f0:23:c4:09:e3:ae:
                    ab:9b:83:71:bd:7c:10:41:19:62:d7:91:52:0d:94:
                    7f:ea:97:52:6e:48:61:bc:2f:19:67:71:f0:c7:1a:
                    f2:fb:83:30:3d:af:3b:35:95:25:44:a3:97:39:dd:
                    02:ec:5c:3f:5d:02:31:2e:e4:94:a7:76:f4:4c:05:
                    be:ec:75:8f:a1:ad:28:b4:38:bf:e0:16:60:e2:69:
                    58:34:78:ea:b1:24:a7:42:0c:2a:17:a5:a9:dc:a7:
                    b0:ed:a3:23:1a:54:3b:44:d4:37:fb:af:27:f6:bb:
                    72:c9:ca:46:39:07:6f:16:3e:75:a1:d1:e9:f8:aa:
                    1f:32:20:07:72:29:17:80:2d:e3:b1:ab:c3:df:51:
                    0c:58:01:4a:74:94:a9:29:05:cc:29:b3:2e:76:4b:
                    8c:d0:67:f5:b4:98:5c:bc:38:0e:f5:6a:bc:b4:7b:
                    1f:9e:4c:b7:e4:f8:72:5c:95:e6:7e:49:dd:45:62:
                    1c:e0:c0:5f:bd:09:0a:bb:37:cf:67:dd:29:59:56:
                    60:04:37:5d:5a:fe:ce:72:93:24:1f:fb:b2:9b:f6:
                    a8:10:ff:21:3d:ee:29:c3:9e:31:d3:57:31:f4:53:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:1D:2A:B5:7F:B3:A6:D4:11:BD:62:2E:3A:F1:31:DA:B5:C0:76
            X509v3 Authority Key Identifier:
                keyid:E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32332d3233203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:32:a3:ab:36:58:8f:1c:db:7c:87:db:86:7a:23:ce:fd:5b:
         57:60:39:73:c8:68:43:e6:06:b9:05:23:35:21:cf:ed:44:53:
         cb:9d:4e:4d:89:b6:f6:74:98:ad:5a:90:b6:da:7d:8e:55:b8:
         d6:74:2b:a1:7b:15:d2:30:af:51:29:fd:44:83:4f:70:25:95:
         f5:16:cb:dc:79:c4:21:e5:cf:b6:47:a6:e7:3d:df:34:5e:23:
         c7:c4:18:dd:be:16:e6:00:3c:93:7e:55:3e:86:d5:33:f5:46:
         2f:5b:50:ec:98:43:b0:c8:fa:4d:41:28:1b:93:c5:57:21:8c:
         00:9e:21:f8:fa:f7:9a:aa:5a:cf:d8:7d:a5:08:90:be:06:5d:
         d0:b3:04:99:ee:bb:77:d3:d1:04:68:e6:9e:2e:55:80:b1:ce:
         51:93:b7:65:e1:af:36:e3:4a:d3:97:ae:fe:a9:0b:41:23:dd:
         79:8c:2f:74:18:a7:f2:0e:76:e7:11:36:0a:ca:c0:07:ef:6f:
         b2:13:15:ff:b8:da:10:bc:d2:e5:56:28:eb:75:f1:59:a7:34:
         85:eb:76:49:a2:ae:c5:50:da:63:1d:b1:ae:1b:28:30:5b:1b:
         0b:3c:7b:95:48:54:d7:63:6d:b9:ea:81:0c:ac:16:7d:f1:ab:
         39:fe:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org