Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa
File:                     3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          XZFyHxZ+I38AufSVNiyewYIwYCcOxTARs8536PGhmPg=
Subject key identifier:   F6:BA:9D:4D:7F:E8:84:42:6E:6A:81:6E:D4:BC:4D:81:A0:B7:FF:5D
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       3D432768E3775549E094FC8FE84D50A55AB2001F
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:34 +0000
ROA not before:           Thu 04 Apr 2024 07:43:34 +0000
ROA not after:            Thu 03 Apr 2025 07:48:34 +0000
asID:                     262354
IP address blocks:        168.232.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:27:68:e3:77:55:49:e0:94:fc:8f:e8:4d:50:a5:5a:b2:00:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:34 2024 GMT
            Not After : Apr  3 07:48:34 2025 GMT
        Subject: CN=F6BA9D4D7FE884426E6A816ED4BC4D81A0B7FF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:db:7a:44:13:ca:62:ab:55:4d:82:bd:35:
                    f1:e5:97:4a:e9:61:99:d7:ee:65:cb:27:85:89:be:
                    30:5b:63:56:65:ed:1d:83:d9:c9:f3:e9:7a:50:21:
                    a1:d7:35:07:24:1d:61:80:89:5c:65:69:b1:ef:fa:
                    8b:ba:f0:b8:12:f6:29:2a:db:c5:b4:fc:06:30:ed:
                    1e:b5:56:3d:7c:90:a6:44:63:55:bf:31:41:51:54:
                    a7:3c:b5:10:98:ef:62:71:a1:e5:62:2a:c5:52:39:
                    ef:73:bf:50:fa:33:35:58:64:f9:d5:5c:3e:0c:f4:
                    c5:28:ab:d5:de:a2:f3:2a:b7:1d:db:4c:6e:73:0b:
                    3d:f0:e6:88:fb:4b:cb:39:46:81:b2:e9:b3:87:51:
                    f9:88:16:a2:ca:d0:40:f7:48:cd:63:94:24:3b:f4:
                    9d:49:f1:da:de:16:ca:bb:7e:ba:db:49:77:64:1a:
                    62:e0:28:17:5d:2c:83:52:1f:dd:ca:4b:c3:bf:be:
                    44:ab:7c:fd:49:c9:d8:56:8e:89:c3:e0:d5:c1:04:
                    f1:e9:f3:5c:20:d7:97:50:08:bb:1e:6f:5a:15:fe:
                    dd:28:3d:6b:9e:86:c7:23:ad:f6:58:93:36:b8:26:
                    11:6f:ca:f7:80:d4:67:ad:cc:c8:bb:19:cb:de:cd:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:9D:4D:7F:E8:84:42:6E:6A:81:6E:D4:BC:4D:81:A0:B7:FF:5D
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3136382e3233322e36382e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:99:b0:cf:10:f9:ab:b5:dc:7e:55:75:a7:81:59:12:2c:
         9b:4f:87:fc:7a:24:75:cb:2f:45:c9:7f:b3:89:6b:9f:ec:eb:
         46:90:64:f0:55:e3:b3:aa:40:66:6e:3b:3d:92:bb:88:33:e6:
         b4:2b:dc:a8:bd:8a:bf:dc:8d:be:5a:ac:3d:93:c6:ad:ad:03:
         e4:05:99:4e:52:96:b4:ec:c6:34:93:79:59:bf:fc:1c:8a:b0:
         0a:4d:60:7e:9b:2a:35:50:dc:8d:21:d9:94:31:da:67:d8:26:
         8f:2a:1d:35:7c:91:f9:1c:47:64:c6:29:00:8c:c0:b0:c3:0e:
         b8:3f:79:15:30:72:89:6e:4e:51:20:5d:6a:9f:fe:a7:6f:9d:
         dd:4f:7f:47:40:63:b4:c9:c2:a1:be:d6:96:40:2f:3f:e9:d7:
         4a:6a:e8:72:0d:fc:53:83:41:2b:69:72:03:b1:e6:6b:78:1b:
         d8:6c:9b:17:2b:26:64:b8:94:18:8d:18:20:4e:5f:ff:f4:c2:
         27:2c:ab:ad:bf:60:0e:3b:97:a1:bd:97:83:00:0f:15:1e:57:
         0b:2c:ec:c4:a7:b2:16:14:f6:ab:fa:08:6b:bd:b1:1f:6f:f0:
         5c:16:4d:5a:c9:5b:d5:ed:73:81:6b:5c:11:27:66:3d:f9:33:
         d7:46:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org