Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32322d3232203d3e20323634383934.roa
File:                     3136382e3232382e302e302f32322d3232203d3e20323634383934.roa (raw, json)
Hash identifier:          /ZSQ+QE7fjSD+xDhcZ6fOUNnmm7WdC7BvU4O/7PQync=
Subject key identifier:   88:78:DC:86:07:00:37:7C:E1:09:69:12:2A:58:64:CC:A1:FD:30:E5
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       6FBF0D3C7EE86C5779C76A4EB52BDF1A18643D84
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32322d3232203d3e20323634383934.roa
Signing time:             Fri 05 Apr 2024 01:03:45 +0000
ROA not before:           Fri 05 Apr 2024 00:58:45 +0000
ROA not after:            Fri 04 Apr 2025 01:03:45 +0000
asID:                     264894
IP address blocks:        168.228.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bf:0d:3c:7e:e8:6c:57:79:c7:6a:4e:b5:2b:df:1a:18:64:3d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Apr  5 00:58:45 2024 GMT
            Not After : Apr  4 01:03:45 2025 GMT
        Subject: CN=8878DC860700377CE10969122A5864CCA1FD30E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e1:c5:72:0a:45:06:10:50:34:94:20:89:
                    00:99:28:13:5f:8b:b1:69:8c:2d:ea:66:f1:7e:49:
                    b7:ae:48:87:b1:db:03:96:dc:35:b4:e9:94:76:d4:
                    49:30:48:37:f7:4b:0c:30:5d:c2:98:af:47:75:02:
                    77:55:88:06:3c:44:44:59:1e:36:03:53:1a:0d:89:
                    ea:b5:58:b5:ab:30:77:bd:0a:14:31:07:3f:50:35:
                    15:68:9c:fc:a6:8e:33:09:34:5a:fd:19:15:67:e7:
                    73:4b:79:00:bd:f7:b4:15:d1:ca:fd:ab:80:c7:d1:
                    cb:35:af:8f:88:9a:d8:48:eb:ed:e9:af:5c:da:87:
                    2a:2a:c6:61:44:e8:6a:e3:8d:b3:1a:ee:84:93:19:
                    c6:2c:04:de:75:dc:1f:01:1b:fa:89:d4:07:7e:f1:
                    b8:27:52:97:14:a5:71:d2:76:14:06:a0:b1:9c:6e:
                    6e:0c:11:5f:48:2a:8c:02:a4:c4:8c:de:6e:01:de:
                    27:50:f9:81:26:05:6f:8d:3c:55:cb:2a:e1:23:99:
                    88:ca:15:fa:57:06:f0:4c:ca:50:b7:78:bb:cf:8d:
                    25:8f:cf:87:ce:f6:34:5d:45:91:0c:0f:28:2e:be:
                    e9:01:c7:7c:16:5c:80:7e:00:e5:65:62:1f:cd:da:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:DC:86:07:00:37:7C:E1:09:69:12:2A:58:64:CC:A1:FD:30:E5
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32322d3232203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:9f:c2:9c:5e:f4:86:82:8e:25:2d:cf:bc:04:db:05:10:8d:
         b3:a8:16:77:23:40:e1:73:21:38:87:e7:a2:56:8c:61:85:20:
         86:79:b9:e3:02:76:f5:57:a8:ca:0a:3a:b6:d1:d8:c4:2d:bc:
         be:48:7d:64:0f:80:0e:21:05:8a:17:3d:f6:ff:07:8a:78:30:
         ca:9a:49:f7:ab:eb:0b:ab:22:09:3b:c4:ee:bd:16:02:0b:54:
         7a:e7:ad:0d:92:a0:12:10:5f:cb:d9:f3:5d:61:bf:70:13:e8:
         77:5b:dc:89:3e:94:9c:f3:48:de:5b:1a:f1:ba:1a:57:7b:3a:
         5d:cc:03:a7:21:b8:35:b1:4d:37:65:4d:47:be:1b:0e:42:1c:
         42:a7:cf:6f:7c:b4:1a:d3:be:f9:17:ae:78:2e:a7:a4:02:8d:
         c3:55:51:ef:cd:4d:52:3e:61:3d:52:47:7c:a5:13:a6:99:12:
         97:ec:2c:79:36:68:ba:19:f6:48:f6:63:7f:91:53:1f:01:bb:
         b6:d3:a5:97:f5:20:0e:8e:2f:cd:b4:a3:95:01:ab:4d:48:3d:
         25:2c:8d:11:75:53:7e:d9:c5:27:80:a1:ce:0d:0e:a5:29:a9:
         14:c3:e1:ed:11:0a:b3:8e:db:5e:71:26:f8:7c:73:7a:f8:1b:
         ad:9b:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:46 2024 by rpki-client on console-ams.rpki-client.org