Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa
File:                     3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa (raw, json)
Hash identifier:          Fz70+R9zWRg3sC69nMiCQppIpgcSDxQzFgkiaj4qEjc=
Subject key identifier:   42:89:35:13:03:0D:BC:E6:58:D5:D1:24:A0:0B:83:32:A9:90:A2:1E
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       7F1D0FEDCD9A5E29989064DBA31E3F3EDED9176B
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa
Signing time:             Thu 04 Apr 2024 11:23:19 +0000
ROA not before:           Thu 04 Apr 2024 11:18:19 +0000
ROA not after:            Thu 03 Apr 2025 11:23:19 +0000
asID:                     264879
IP address blocks:        168.227.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1d:0f:ed:cd:9a:5e:29:98:90:64:db:a3:1e:3f:3e:de:d9:17:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Apr  4 11:18:19 2024 GMT
            Not After : Apr  3 11:23:19 2025 GMT
        Subject: CN=42893513030DBCE658D5D124A00B8332A990A21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:ab:06:fd:d8:39:c5:13:2c:23:e1:45:27:
                    4a:d6:67:77:32:e2:23:48:d4:8e:4e:04:9a:63:4c:
                    09:fa:0d:72:c4:27:f9:8f:77:20:b0:28:22:6e:a6:
                    1d:4f:cb:c0:12:22:06:d9:88:d0:e2:64:d4:f0:ed:
                    2a:16:2d:20:e9:b1:7d:1e:5e:67:6d:f9:ac:c6:08:
                    4d:61:4f:a4:97:36:ba:75:44:3c:a6:6a:0a:80:9a:
                    fd:18:7d:9a:99:70:e9:17:d0:fd:97:cc:f2:66:a0:
                    6c:2e:a9:24:f9:6a:c7:c1:fd:44:22:4f:75:fb:16:
                    ce:b7:74:c5:37:8b:91:09:51:b4:28:e0:01:90:6b:
                    ef:e2:1d:3a:18:cd:96:f2:1d:ac:89:a3:e5:09:1d:
                    6a:4f:15:3b:e3:c1:80:d0:17:43:e5:28:e8:3f:09:
                    1c:fa:35:3a:4b:ab:32:fa:c4:d9:56:6d:b1:5e:cd:
                    66:11:38:f1:ae:44:5c:cf:80:86:6d:39:7f:d0:aa:
                    e9:f6:df:07:73:31:40:71:88:d6:00:f5:8f:62:0f:
                    7b:e0:94:47:6b:1d:15:6d:85:c8:17:a8:ba:73:c0:
                    27:9c:22:7f:ec:2f:5b:45:ee:62:11:43:f7:52:aa:
                    1f:36:27:9e:fe:1b:f6:3d:5c:d0:23:20:b5:9a:50:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:89:35:13:03:0D:BC:E6:58:D5:D1:24:A0:0B:83:32:A9:90:A2:1E
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:70:fc:31:79:86:36:80:e9:af:d2:e3:84:6b:80:55:42:
         be:50:84:0a:3f:5d:fd:6c:4c:78:67:8d:35:ef:c5:86:2d:d8:
         b7:72:e1:54:a5:00:a7:c1:c3:f3:43:8f:b2:2e:24:04:78:c4:
         b0:06:84:ab:a0:0f:f6:09:7b:e1:7a:2c:2d:8d:14:26:ba:b4:
         0f:a9:62:28:7a:ea:2b:77:66:df:e9:c2:0a:1f:00:4a:1b:9a:
         1b:fb:f6:f1:6f:eb:75:d5:67:fc:4e:29:4f:df:a0:f5:cb:4f:
         69:c2:81:12:02:ec:dc:85:73:74:da:18:6e:ce:64:ff:61:78:
         f3:82:dc:30:62:29:e2:ad:52:53:2b:a4:80:13:14:a2:88:c1:
         19:b8:f7:ab:85:c0:5d:52:47:6b:b9:64:95:e7:fa:37:1e:db:
         b9:84:1e:f2:0e:6a:b4:a1:3f:9d:99:09:24:3f:d0:72:62:8f:
         6f:9e:2f:ce:f8:33:5d:3e:7e:4d:08:76:58:4b:7e:b6:14:51:
         67:23:b4:54:f4:37:16:2b:3c:c2:8f:d4:3f:a3:e1:45:59:b5:
         b4:79:de:5f:ce:ad:19:99:22:58:4e:f6:93:d7:f7:38:4f:78:
         b2:43:72:0b:ba:03:98:c4:86:3f:25:06:1f:9d:05:73:85:2a:
         ec:15:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org