Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa
File:                     3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa (raw, json)
Hash identifier:          Q0dAk4he2a8KnkOwtL0i8gjYwZsaCiG2XLM6/thMlwY=
Subject key identifier:   C9:27:86:CD:32:A5:9A:7A:19:45:AB:AE:BD:A3:FB:19:DA:8D:18:53
Certificate issuer:       /CN=449A71EF24E1569DDA85DBFAA5781F7EE38F04A4
Certificate serial:       16E6E47591DAE750C9AAEE263529D67CF808323A
Authority key identifier: 44:9A:71:EF:24:E1:56:9D:DA:85:DB:FA:A5:78:1F:7E:E3:8F:04:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa
Signing time:             Thu 04 Apr 2024 22:29:35 +0000
ROA not before:           Thu 04 Apr 2024 22:24:35 +0000
ROA not after:            Thu 03 Apr 2025 22:29:35 +0000
asID:                     265224
IP address blocks:        167.250.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.crl
                          rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 04:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e6:e4:75:91:da:e7:50:c9:aa:ee:26:35:29:d6:7c:f8:08:32:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449A71EF24E1569DDA85DBFAA5781F7EE38F04A4
        Validity
            Not Before: Apr  4 22:24:35 2024 GMT
            Not After : Apr  3 22:29:35 2025 GMT
        Subject: CN=C92786CD32A59A7A1945ABAEBDA3FB19DA8D1853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:05:e7:e4:15:e7:23:0b:db:38:f4:05:e4:
                    b5:88:4b:69:1c:17:1e:91:16:6f:f5:05:a9:77:df:
                    5b:2e:52:48:49:72:0e:3e:6c:81:69:08:fc:ed:b2:
                    37:c1:12:67:fd:cc:2f:2f:86:a9:c6:bb:5a:65:0b:
                    e9:8e:33:80:51:88:90:42:a5:c0:b7:49:a6:2d:75:
                    9b:f7:e1:a0:35:a5:02:91:b3:f0:5f:b9:4e:b8:7a:
                    d6:9a:ae:5c:c0:1d:09:27:90:e8:b3:a1:ca:4b:7e:
                    15:23:11:12:64:e5:89:4a:e4:4f:78:73:5b:8e:ed:
                    ec:5b:e9:ee:50:89:dc:d6:a6:c8:82:21:7c:59:af:
                    ab:ed:ee:3f:df:b5:81:1e:f4:b1:17:90:09:73:5f:
                    49:e4:b4:8b:4e:21:e0:ed:d1:45:dc:66:e3:28:82:
                    f4:cb:4d:19:a2:f1:2d:d2:79:bc:72:8c:65:9b:46:
                    bc:f0:01:2d:39:74:32:e2:74:e7:e7:7c:f5:96:55:
                    cb:41:43:9e:e1:6b:ef:24:d1:ee:5d:05:22:48:b5:
                    8a:8c:d2:85:d6:51:ca:65:89:f7:65:dd:ee:1b:4f:
                    da:35:6e:e5:bd:fa:fe:bb:d2:d2:97:b4:c4:aa:55:
                    1c:09:3a:9b:38:e4:de:d6:20:16:6b:b0:11:08:36:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:86:CD:32:A5:9A:7A:19:45:AB:AE:BD:A3:FB:19:DA:8D:18:53
            X509v3 Authority Key Identifier:
                keyid:44:9A:71:EF:24:E1:56:9D:DA:85:DB:FA:A5:78:1F:7E:E3:8F:04:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:90:9e:5b:6c:f4:fa:83:a2:db:38:ad:30:c7:34:e9:b8:03:
         1e:97:f5:78:cc:b6:e9:ab:2a:d7:81:27:be:ce:64:f8:96:bb:
         cd:99:27:fd:08:45:69:94:19:62:d6:33:ca:4b:10:66:9b:0f:
         64:5f:9d:3d:fb:eb:f1:86:59:95:4e:51:99:f4:b0:b6:c3:68:
         1d:b3:57:7a:e9:a5:d1:46:26:5e:8b:81:f7:2f:09:65:41:c3:
         d0:00:f8:65:e9:45:64:c2:23:71:2f:7b:35:4e:06:ca:1f:a4:
         a4:12:8c:72:37:62:be:9f:50:41:f5:57:57:e9:12:ab:80:b8:
         1d:30:9c:4b:37:b5:d4:a7:4d:a8:d3:de:c5:bc:48:d8:f7:59:
         c8:b6:43:39:9f:29:f9:91:b5:20:51:a2:f7:06:10:f5:08:db:
         47:14:5c:a4:d8:34:83:db:a0:1c:7d:44:3e:1c:4d:86:bc:47:
         3e:aa:12:31:ee:27:39:d0:14:68:9c:cf:5f:b7:f3:59:88:13:
         0b:f2:77:59:b4:ad:a0:51:ab:0d:c1:d6:75:61:0c:9f:c6:42:
         2c:ca:7a:3d:0d:92:94:08:f5:5f:98:bc:71:ad:51:5e:94:17:
         f0:9a:0b:d8:9a:e6:5c:f3:37:f4:2f:5f:a5:e5:59:e4:92:75:
         71:03:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:37 2024 by rpki-client on console-fra.rpki-client.org