Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e322e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          iLgb2WdJXFvMAjtziH5bBncXLR+Y1tIcvIOTUrobYLk=
Subject key identifier:   90:49:D8:9D:66:E7:99:CA:62:1C:92:3D:B3:5C:1A:0E:66:DB:15:A4
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       40DA7C5281A5C909EEB06C86ABD489F932BFFC2F
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa
Signing time:             Fri 05 Apr 2024 01:03:44 +0000
ROA not before:           Fri 05 Apr 2024 00:58:44 +0000
ROA not after:            Fri 04 Apr 2025 01:03:44 +0000
asID:                     264894
IP address blocks:        168.228.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:da:7c:52:81:a5:c9:09:ee:b0:6c:86:ab:d4:89:f9:32:bf:fc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Apr  5 00:58:44 2024 GMT
            Not After : Apr  4 01:03:44 2025 GMT
        Subject: CN=9049D89D66E799CA621C923DB35C1A0E66DB15A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:ab:47:05:c2:8d:a1:60:4a:82:05:d9:f3:
                    e9:91:6a:a0:78:5b:52:c1:0b:32:7b:fe:28:24:78:
                    74:37:4e:ba:1d:04:71:e7:ed:91:b5:66:ca:de:40:
                    33:d6:e5:60:e9:3d:39:a0:bc:75:e1:ab:9f:10:54:
                    8f:02:8c:a4:40:85:5d:9a:76:ab:8c:b5:7b:e3:2f:
                    70:0d:80:da:b1:34:7a:72:b4:b4:d0:59:48:1c:f3:
                    ff:3b:7a:83:08:04:94:d8:4f:1c:96:18:a7:71:a8:
                    3a:73:43:57:53:8d:35:89:69:19:91:5f:12:f0:17:
                    d0:28:fb:55:ac:9b:aa:c3:6a:8a:63:92:3b:4c:8c:
                    6a:12:de:b3:d6:c2:3d:70:be:67:c2:52:7a:78:59:
                    0f:80:77:03:20:16:d7:7a:5f:9f:12:fd:1d:ce:b1:
                    e7:97:29:2a:f5:61:6a:e8:df:d2:29:7b:eb:80:8b:
                    c1:77:0f:09:6f:1d:d6:61:d6:d3:3a:f9:33:d2:87:
                    21:fe:32:3f:55:83:22:7b:82:1d:c7:2a:f1:ce:ab:
                    c5:e1:e8:ef:f6:93:8c:73:77:1a:88:28:1f:a8:45:
                    bf:63:b3:e2:f3:fd:f1:97:aa:d3:b1:b6:d5:df:09:
                    b0:83:88:cc:5e:71:fd:08:b3:fc:ba:2d:23:71:94:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:D8:9D:66:E7:99:CA:62:1C:92:3D:B3:5C:1A:0E:66:DB:15:A4
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:5e:bc:ba:1f:5e:58:b8:c5:17:d5:d4:2d:64:61:f2:a5:
         e8:fd:82:0d:2f:6a:7c:8f:16:d1:33:06:29:de:96:f3:d4:14:
         ca:c7:c8:2a:e8:b7:30:d4:59:04:fb:18:b4:48:9c:58:ca:75:
         d1:b6:19:bc:bc:1d:08:a6:72:21:56:e5:20:39:9a:45:77:15:
         4f:f9:b8:8a:af:7d:50:05:89:cc:df:26:26:43:40:37:06:f8:
         29:0c:94:31:a0:90:d7:0a:4c:f2:e6:24:56:d8:9c:36:e6:a7:
         a3:f5:f3:cf:a8:68:eb:05:52:71:2e:74:55:ba:19:3e:98:d5:
         4f:0b:33:f4:7a:3c:a1:e9:94:b8:1b:0e:1c:98:f1:7f:96:a1:
         00:ca:e6:b0:6c:3e:da:94:64:f5:10:4f:4d:c8:17:72:0d:92:
         a1:38:7f:cd:80:e4:27:18:f2:f8:02:54:a9:99:cf:11:0f:d3:
         c5:fb:2e:17:6e:ea:40:94:f9:54:47:12:a0:1f:a5:a3:12:f0:
         24:f4:6f:6f:02:2e:16:f3:e9:c0:ff:a9:4e:62:2f:7d:ec:b1:
         27:61:0b:74:83:a5:d9:5a:ec:fb:a2:0f:54:ab:4c:59:fa:42:
         7f:a4:4b:46:05:34:e4:9f:f6:47:b8:09:6e:d3:e7:c0:91:bb:
         ba:12:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:32 2024 by rpki-client on console-fra.rpki-client.org