Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa
File:                     3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa (raw, json)
Hash identifier:          3qk1AH8MBJ0o1F9i1a9LqNwaKYwWP77UXjMr6v0LiJo=
Subject key identifier:   F7:7C:44:62:17:31:45:87:F1:D0:75:AF:FA:09:7D:30:D5:50:8B:95
Certificate issuer:       /CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
Certificate serial:       32E3F6D323B8B729A193836C34A5B203E11F767C
Authority key identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa
Signing time:             Thu 04 Apr 2024 06:40:44 +0000
ROA not before:           Thu 04 Apr 2024 06:35:44 +0000
ROA not after:            Thu 03 Apr 2025 06:40:44 +0000
asID:                     265356
IP address blocks:        168.181.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e3:f6:d3:23:b8:b7:29:a1:93:83:6c:34:a5:b2:03:e1:1f:76:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
        Validity
            Not Before: Apr  4 06:35:44 2024 GMT
            Not After : Apr  3 06:40:44 2025 GMT
        Subject: CN=F77C446217314587F1D075AFFA097D30D5508B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:1b:3f:54:8f:88:74:b2:35:b6:80:99:35:
                    d1:fd:b8:aa:c4:10:05:b6:70:5d:9a:a6:56:fa:17:
                    81:0e:8e:c8:41:75:ab:84:02:0d:fb:af:a0:4d:20:
                    a0:44:8f:f4:61:bc:b7:9a:b0:fa:53:83:0d:34:02:
                    ce:10:63:49:da:a7:8a:20:6d:04:be:0e:bd:e6:be:
                    17:87:af:16:43:a6:54:a2:d7:38:95:66:b5:2e:97:
                    87:7b:98:ee:25:fc:0f:50:a5:27:f7:07:f0:b5:f5:
                    ab:57:75:3f:bd:e1:76:21:89:a2:94:30:20:87:3b:
                    fa:a1:83:ce:4b:50:3a:1d:a5:0e:d3:b3:6e:7c:bb:
                    4e:66:a0:37:7a:35:db:fb:9c:f8:2f:99:da:ef:17:
                    dd:bb:7c:7e:07:cf:3e:77:1f:1f:46:6d:1d:8a:37:
                    3f:24:3c:44:41:54:f1:2e:01:7f:8f:ca:36:61:61:
                    f4:6f:3e:14:af:8d:63:22:ce:0a:ba:fc:d1:ff:64:
                    73:38:f7:5f:08:57:36:47:0b:e8:ed:0b:4a:e8:87:
                    df:02:37:68:58:d3:d9:69:e9:7e:47:15:3a:5a:d8:
                    e3:67:ad:39:7f:92:f2:5a:f8:ac:c9:f1:4d:96:11:
                    fe:04:7d:25:23:cd:dc:4d:1f:b7:b6:88:79:5d:83:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7C:44:62:17:31:45:87:F1:D0:75:AF:FA:09:7D:30:D5:50:8B:95
            X509v3 Authority Key Identifier:
                keyid:E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:15:bf:d6:1e:7b:89:2f:64:e5:60:2f:c7:ae:5d:0e:55:1b:
         46:86:3b:dc:a4:78:64:12:76:5c:4a:c3:3c:98:1d:2f:85:ab:
         6c:6e:34:82:4e:66:ff:ac:77:34:4d:f5:74:02:7c:9c:bc:04:
         61:10:4f:3b:84:bf:f9:18:7e:94:c4:80:76:84:87:ec:a7:1f:
         4a:a1:a9:66:fa:6a:1b:2e:c7:19:b3:3c:f6:57:2f:ad:65:72:
         59:81:55:44:18:2d:a9:cb:ee:e3:bf:ab:58:ae:0d:38:eb:f8:
         ef:b9:a7:f9:7a:c3:a5:a3:c4:9b:32:ed:99:92:0c:b3:a4:19:
         24:28:b6:cd:7d:f9:f5:37:99:e9:48:38:b8:96:a8:cb:63:ba:
         68:cb:95:ea:82:30:5e:ce:f4:03:44:0a:24:6e:6a:55:10:7c:
         96:e3:1e:dc:3a:4d:13:14:96:14:66:3a:39:4a:62:1a:33:0a:
         93:8f:be:38:69:5f:49:27:39:16:05:34:b2:78:a2:b4:49:f0:
         fd:d9:d8:43:17:76:59:b2:ec:b8:91:d1:cf:90:c6:b5:7c:80:
         98:40:3b:5b:46:7b:a8:fe:92:95:28:54:e3:a9:6a:53:d3:ce:
         b3:15:28:84:2a:ba:b1:d9:77:2f:6f:6d:a2:13:e8:51:bb:aa:
         f1:4d:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org