Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
File:                     3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa (raw, json)
Hash identifier:          i4JxYoA8G9O3afZkpam37ANijCaopD6UXKghGLlNy8c=
Subject key identifier:   BB:BA:24:31:40:A0:F8:35:1D:BA:FB:6F:C4:53:29:B5:9E:AB:5C:E5
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       48F00EF77DA5B9A9F9F4061A1A5B62A2F29D664C
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
Signing time:             Fri 05 Apr 2024 03:32:21 +0000
ROA not before:           Fri 05 Apr 2024 03:27:21 +0000
ROA not after:            Fri 04 Apr 2025 03:32:21 +0000
asID:                     265485
IP address blocks:        168.197.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f0:0e:f7:7d:a5:b9:a9:f9:f4:06:1a:1a:5b:62:a2:f2:9d:66:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Apr  5 03:27:21 2024 GMT
            Not After : Apr  4 03:32:21 2025 GMT
        Subject: CN=BBBA243140A0F8351DBAFB6FC45329B59EAB5CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:d7:6f:8c:bb:2e:9d:55:e0:b4:b5:c0:ff:
                    42:f7:b3:db:d4:86:8a:b3:dd:46:23:aa:9e:ea:c7:
                    af:8d:46:e3:e3:1d:88:03:53:d0:00:b1:15:6d:af:
                    23:ae:e5:01:05:6e:df:39:16:53:7e:79:d6:69:a0:
                    28:90:41:87:b6:5c:dc:b5:0d:54:15:d1:d2:63:5c:
                    d7:d8:2e:8d:fa:dd:8c:b0:79:34:50:6e:e9:ef:4e:
                    00:1f:b4:6a:0c:d6:ec:e3:ec:71:05:66:8a:1c:28:
                    e8:e6:d0:32:b5:f3:b5:af:86:da:7b:91:ab:7d:94:
                    ff:2e:52:ee:63:ec:7e:7c:ee:50:bb:fb:b4:37:d8:
                    84:30:6c:4d:2a:af:38:f3:cb:6f:50:bb:01:cf:e3:
                    99:0d:bd:87:d2:18:a6:52:4d:7a:13:bb:c4:5a:58:
                    6c:61:4e:14:b2:05:20:8b:e2:0e:fe:81:02:44:7b:
                    59:00:0a:94:0f:f7:42:23:e5:ea:54:91:17:52:44:
                    9c:3e:93:08:36:6c:98:78:d1:05:08:0a:0d:9c:b2:
                    4b:f3:5f:b0:74:7f:f0:a6:16:eb:bc:0b:d0:91:4a:
                    87:16:13:df:43:b5:57:39:80:bc:d8:37:29:4a:99:
                    8e:e0:73:b5:42:4d:35:56:0a:14:e5:aa:6f:78:d0:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BA:24:31:40:A0:F8:35:1D:BA:FB:6F:C4:53:29:B5:9E:AB:5C:E5
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:e2:bc:61:21:af:9a:e7:4a:4f:f6:5b:28:58:7f:31:47:
         1a:46:27:96:65:99:12:cf:9f:44:63:27:e4:07:c3:82:90:6a:
         fd:7b:ef:11:81:b7:84:51:5e:5b:45:ac:1d:5f:bc:f9:da:a6:
         0f:9c:4b:eb:f6:f4:a8:0d:6d:d3:f8:8a:c4:62:05:74:ad:ef:
         90:b6:8d:08:75:f2:ba:0d:ce:0b:a8:31:4b:57:fc:07:f5:3c:
         a8:e9:c9:03:ce:bf:f3:5c:71:b8:48:be:b5:81:66:f4:79:a0:
         d6:7b:9c:50:36:34:cd:3b:60:0c:42:7e:c1:f3:1c:dd:ae:40:
         4f:7f:77:1c:e4:fe:01:4d:90:15:e0:bb:fe:54:00:cb:e5:cb:
         b9:f4:de:5c:1e:d6:a1:e7:59:96:fb:4c:a3:e2:b4:ec:96:79:
         c2:bb:9d:09:15:51:4b:db:ab:2d:15:1f:81:6d:65:4f:31:56:
         c9:7e:71:88:a0:f5:42:de:a4:29:30:32:20:00:3b:b2:ff:91:
         ec:49:cc:ed:09:c1:76:4d:6f:d3:27:50:01:a5:00:eb:6f:bc:
         92:2b:8f:c3:ad:3d:19:3e:3c:0d:de:12:3a:7d:29:e7:0f:f0:
         24:70:ef:64:3e:93:bd:f8:4d:a6:d6:54:f2:e9:3b:19:88:79:
         d2:35:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org