Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa
File:                     3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          gLtsXnGcDYOWckBfzmiMv763huolchAmARhAk2aqgUc=
Subject key identifier:   12:A3:2A:24:6E:84:29:97:71:9C:20:54:D1:C6:28:EB:EF:BE:19:9C
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       6A54E17B0BD800D1E54397D177D675320E83451D
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:10 +0000
ROA not before:           Thu 04 Apr 2024 03:19:10 +0000
ROA not after:            Thu 03 Apr 2025 03:24:10 +0000
asID:                     262642
IP address blocks:        168.205.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:54:e1:7b:0b:d8:00:d1:e5:43:97:d1:77:d6:75:32:0e:83:45:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:10 2024 GMT
            Not After : Apr  3 03:24:10 2025 GMT
        Subject: CN=12A32A246E842997719C2054D1C628EBEFBE199C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:4e:32:26:cb:64:7a:45:11:6e:27:1f:5f:
                    66:f8:27:0d:ae:56:1e:40:3a:16:70:7f:cf:dd:9e:
                    8d:22:fa:df:a7:58:3f:8c:82:b1:99:1a:e7:6f:2e:
                    4e:ae:5a:0e:0a:56:17:98:17:46:60:9f:ef:8a:47:
                    2d:4a:fe:43:45:c9:7f:59:c6:55:72:4d:d7:62:5f:
                    74:97:8f:cf:93:b4:81:23:63:83:58:14:ed:3e:c3:
                    5c:74:3d:cc:a9:ea:1b:9e:3c:8f:c1:be:0d:5a:b4:
                    aa:30:fe:76:69:7e:85:0c:cb:4b:b0:5e:91:b0:99:
                    eb:13:bc:65:35:4d:7b:f8:8e:5e:4a:22:77:29:bc:
                    28:d7:41:de:f0:ed:a3:1e:74:3c:29:e1:44:a0:ed:
                    6c:a8:51:fe:74:48:90:04:d8:9f:8e:7b:65:b6:9c:
                    f1:40:58:12:6e:1a:28:25:90:20:b2:e5:8a:f0:03:
                    66:d0:2e:a6:42:06:76:fc:33:6c:b4:44:93:84:a1:
                    71:86:e3:a1:80:10:7d:44:8b:45:d5:32:d8:79:87:
                    4e:b1:28:43:63:1c:e3:86:02:a3:41:16:ee:c3:3c:
                    29:59:2d:e3:ea:f2:be:5e:6f:ce:ba:74:a0:fb:92:
                    20:13:fb:25:6a:37:e9:a3:b6:9e:a3:74:39:57:50:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A3:2A:24:6E:84:29:97:71:9C:20:54:D1:C6:28:EB:EF:BE:19:9C
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:86:82:29:23:05:11:1b:c8:31:b6:a1:81:e2:38:c5:a2:
         1d:ed:41:a8:84:c4:4a:5a:d6:a8:4a:a3:b8:87:8e:7a:ff:55:
         95:54:27:da:87:5d:fb:e0:df:df:8f:c5:08:47:6e:68:62:cf:
         be:67:fd:9f:fb:17:63:ce:4d:9b:e5:20:b0:b1:2d:4d:ff:e7:
         ae:55:3c:90:1a:a9:b1:60:34:f9:56:54:e8:40:1a:26:2a:5b:
         22:8d:d6:12:6f:44:e7:35:5b:5d:97:cc:46:19:8b:36:86:c5:
         52:fc:08:a3:c7:54:53:4b:c2:d5:aa:bc:a2:79:9d:61:9e:75:
         77:ef:a8:87:ea:4e:36:a8:bd:c7:70:b9:36:ad:cd:92:1b:f1:
         c0:ce:5a:21:2a:52:8e:4c:b9:cb:89:6c:31:13:70:7e:6a:a9:
         b5:b6:1e:99:eb:23:26:8b:a5:7b:62:87:f7:16:7d:aa:47:e8:
         da:56:1b:8c:42:2d:aa:11:c0:8f:d7:8a:74:58:53:fd:be:eb:
         e8:0a:3b:3f:cf:02:43:9f:14:a3:4d:ce:0a:8f:69:b9:fc:df:
         67:98:da:57:f5:76:aa:2d:91:61:0e:aa:3e:88:7b:eb:fb:97:
         90:da:cf:4c:2f:2c:4e:8b:fa:c1:f9:64:d1:f4:0c:5b:b8:98:
         62:b5:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org