Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa
File:                     3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          cSfypcmFzzHCZf5ztz7woEBnKTTNTejOpc8SK4427bk=
Subject key identifier:   DB:AF:03:18:C8:15:E9:4E:D0:B8:40:17:BA:B7:6D:6D:16:6E:F4:91
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       4B8AC742381B78714F140CD746A495EC3DC509AC
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 04 Apr 2024 07:08:03 +0000
ROA not before:           Thu 04 Apr 2024 07:03:03 +0000
ROA not after:            Thu 03 Apr 2025 07:08:03 +0000
asID:                     52968
IP address blocks:        168.194.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8a:c7:42:38:1b:78:71:4f:14:0c:d7:46:a4:95:ec:3d:c5:09:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Apr  4 07:03:03 2024 GMT
            Not After : Apr  3 07:08:03 2025 GMT
        Subject: CN=DBAF0318C815E94ED0B84017BAB76D6D166EF491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:3b:7c:bb:73:c2:91:92:2f:2a:37:c7:b2:
                    38:32:0b:1e:c2:35:8e:ec:54:4f:80:6a:64:34:2e:
                    21:db:a5:ed:e6:a0:69:e4:e4:cd:96:60:9c:2a:90:
                    df:9c:93:f5:f8:2e:e2:21:0d:81:13:57:e0:52:94:
                    dd:c7:bc:31:83:90:d3:04:2e:98:ed:e5:76:0b:23:
                    ad:f2:95:1f:51:4e:bf:8a:05:e9:a7:69:71:02:9e:
                    eb:e9:32:a2:4e:95:64:67:6b:15:a5:b9:d4:10:0e:
                    ae:cb:c9:8b:69:72:97:94:09:a6:9a:75:b0:19:91:
                    f8:83:15:47:1f:c0:77:38:9b:0b:9f:0f:9b:ec:68:
                    05:a4:2d:b9:ca:9c:c1:e1:65:d8:c3:4c:0f:4e:47:
                    d7:2a:c1:11:db:34:d5:f6:31:7d:2f:b3:ff:37:48:
                    12:01:9a:c3:20:4f:1a:8f:39:16:97:a1:4f:90:7f:
                    0c:35:26:13:39:13:8b:f0:6b:dd:fa:69:3b:eb:ef:
                    36:5a:3c:1b:f4:ff:6a:1f:29:f7:4a:b6:20:06:ec:
                    69:56:26:db:9b:1f:eb:13:e5:c9:4a:2c:bf:de:e1:
                    44:a2:52:97:9b:bb:4c:34:c8:d1:a7:03:e8:d0:ff:
                    ba:96:32:91:be:64:6f:b4:77:78:2b:64:66:31:fd:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AF:03:18:C8:15:E9:4E:D0:B8:40:17:BA:B7:6D:6D:16:6E:F4:91
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:20:9a:16:ed:a3:10:27:bf:b3:b1:e0:0e:48:95:41:ff:
         fc:a7:eb:43:38:c2:c4:3a:22:44:11:4b:f3:c0:ea:a8:90:e2:
         17:4c:23:6f:34:db:ca:9d:68:e7:ad:9f:d4:95:3b:ec:d9:75:
         16:e8:93:10:33:49:60:84:12:d3:73:c7:22:74:db:55:cd:d9:
         ee:74:80:54:f4:a0:02:1f:ae:9d:b4:59:a4:cf:76:ce:df:0b:
         84:01:44:81:29:97:ec:41:43:da:9d:76:94:f9:14:ae:05:1e:
         64:fd:c4:01:d0:47:d3:30:85:3d:a0:2a:1a:3c:45:a6:0a:fc:
         d1:d1:41:16:86:58:ee:ae:20:89:d0:55:10:b7:02:96:27:91:
         26:7c:9d:6b:22:37:ac:08:e7:e1:92:d2:7c:e0:26:5d:91:6c:
         75:89:23:91:8c:54:2b:28:49:de:41:e2:9b:bd:ba:b6:57:30:
         9b:fb:06:94:c7:42:da:8b:46:ea:4b:bf:4f:23:a1:b0:65:a8:
         6b:9e:e9:1e:49:f5:6a:bb:f1:b3:f5:fb:03:66:0f:7d:03:96:
         b7:af:d0:fc:4d:5b:99:94:b9:30:17:8d:38:d3:c7:96:9b:43:
         53:ee:c6:ba:45:1d:51:c9:07:7b:cb:3a:33:5b:21:3e:fa:62:
         34:cb:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org