Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e332e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          INS+RbY86AcbdQETUsaWL/9Uo/aEk+Wm8qu6Z7aK4iE=
Subject key identifier:   92:64:CE:0E:72:FA:B4:45:07:DF:8C:DE:9B:6B:19:6B:61:22:DE:A1
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       3E9BC1A2BDFA0421A18389345D1AFCD84BB5FBC0
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa
Signing time:             Fri 05 Apr 2024 01:03:44 +0000
ROA not before:           Fri 05 Apr 2024 00:58:44 +0000
ROA not after:            Fri 04 Apr 2025 01:03:44 +0000
asID:                     264894
IP address blocks:        168.228.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9b:c1:a2:bd:fa:04:21:a1:83:89:34:5d:1a:fc:d8:4b:b5:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Apr  5 00:58:44 2024 GMT
            Not After : Apr  4 01:03:44 2025 GMT
        Subject: CN=9264CE0E72FAB44507DF8CDE9B6B196B6122DEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:7a:ff:5d:6f:25:3b:c1:32:67:41:52:cd:
                    30:27:6d:a0:53:2b:79:a4:cb:ed:d5:9f:d2:91:05:
                    3b:48:3f:a6:a3:57:bd:54:7d:10:a5:21:8c:c0:bd:
                    39:a3:5c:48:be:f6:a4:4e:90:9b:86:ed:34:f6:99:
                    37:20:c3:a9:ec:4f:06:da:e9:d1:c0:c0:83:20:91:
                    83:c3:c9:97:3c:21:91:5a:f5:91:15:09:02:ee:bc:
                    54:8d:8f:fb:b4:09:b1:ab:42:68:03:c7:08:96:c8:
                    8b:97:6e:15:c7:0a:f2:96:25:46:22:38:51:32:02:
                    f0:87:ea:bb:cf:3e:06:99:3b:08:3d:91:aa:c7:ea:
                    5e:c3:c4:eb:cf:2e:b3:5f:ae:b1:03:d3:d2:15:cc:
                    88:c8:3e:e8:60:31:92:3d:52:ec:0c:20:1b:f2:5b:
                    a7:ac:c2:13:9e:dd:47:65:5b:cf:6f:a0:4b:7a:93:
                    ef:f6:fe:a2:7d:43:96:97:f3:eb:96:b5:10:7c:a3:
                    9e:b0:10:ca:b7:7b:7f:e2:6b:87:84:01:32:80:ae:
                    47:5f:09:ec:dd:31:22:a9:4d:96:77:86:80:9c:07:
                    12:5a:92:3c:13:10:00:43:15:94:30:c4:e1:30:fa:
                    b4:07:5f:ff:ef:98:e2:42:ad:98:b2:ec:03:67:2f:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:CE:0E:72:FA:B4:45:07:DF:8C:DE:9B:6B:19:6B:61:22:DE:A1
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:90:d8:2c:6b:ef:cc:52:e7:4b:02:bd:8d:85:d6:2f:aa:
         7a:f9:fc:74:5d:b4:99:8e:17:6e:92:21:5b:f1:e0:c6:e4:8c:
         89:a8:c5:fa:2c:e0:84:7e:08:e7:9c:f4:43:6f:b5:83:f7:8a:
         a9:82:8a:3c:5a:44:b7:78:f1:c3:4f:b2:16:26:d1:82:74:fe:
         af:7a:af:59:5f:92:e8:ad:a1:eb:14:2f:f9:4e:a3:04:58:1b:
         c3:c2:4b:8c:cf:f1:99:24:fd:31:13:47:69:8f:d0:fb:7d:fc:
         61:f6:19:57:22:15:05:d7:b4:b4:3b:5f:10:d2:e0:30:ec:d7:
         4f:ca:0c:51:66:6f:d7:0f:b6:99:f8:7f:99:14:e2:6b:2d:d9:
         5d:5c:77:6f:f9:07:ca:86:67:b8:5f:d9:ce:4b:cb:3e:99:e6:
         a4:5e:df:1e:c0:ee:52:2f:58:51:b8:ad:bb:77:f9:aa:5b:12:
         54:4a:a0:92:ea:ef:8a:1e:a6:b0:7d:b0:c6:d1:df:5e:19:0b:
         2a:26:52:98:6f:b6:45:67:a6:4c:00:50:eb:1e:20:26:fc:f5:
         91:e8:96:d0:d9:ab:13:df:0b:1b:f2:d6:04:10:f1:8a:50:af:
         24:25:3c:c1:3c:39:9d:e0:35:70:c1:f6:a6:9d:7a:69:ab:b8:
         38:89:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:45 2024 by rpki-client on console-fra.rpki-client.org