Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa
File:                     3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa (raw, json)
Hash identifier:          yMto7WEoOuzMvgEVqkbOtRSvBTQi1VJn7C6Qzzhlwis=
Subject key identifier:   EE:AE:D1:B5:7C:A4:AB:CF:A1:72:DD:F1:CC:13:CE:C0:8C:91:FD:E8
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       487D6B793239938A3B9993F7078E4E4C1E12441B
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa
Signing time:             Fri 05 Apr 2024 00:35:26 +0000
ROA not before:           Fri 05 Apr 2024 00:30:26 +0000
ROA not after:            Fri 04 Apr 2025 00:35:26 +0000
asID:                     264926
IP address blocks:        168.228.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7d:6b:79:32:39:93:8a:3b:99:93:f7:07:8e:4e:4c:1e:12:44:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Apr  5 00:30:26 2024 GMT
            Not After : Apr  4 00:35:26 2025 GMT
        Subject: CN=EEAED1B57CA4ABCFA172DDF1CC13CEC08C91FDE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:ee:64:d6:3d:39:29:57:42:27:0b:b6:24:
                    70:81:d1:43:2f:0f:82:b8:ac:37:b9:c7:a3:54:90:
                    29:61:16:e9:80:b9:4c:1b:f1:51:a4:bd:48:99:1c:
                    19:9c:68:b4:d5:c4:a3:f2:ab:70:fd:1b:5e:e5:53:
                    df:c6:fc:32:9a:da:cc:ad:47:43:4d:82:8e:b3:8c:
                    24:9b:9d:17:f1:36:1d:d2:77:e0:3e:95:74:17:29:
                    be:12:b3:76:6e:57:0f:48:6d:b8:52:ac:cf:3a:df:
                    59:c8:d4:f9:71:1e:ba:32:e9:45:09:ac:df:f7:12:
                    50:93:aa:51:cb:6e:f1:00:18:06:cb:61:04:d2:c8:
                    10:f1:16:6f:83:47:4c:a6:b9:86:67:68:93:eb:36:
                    92:32:2f:5b:b3:1b:91:05:96:63:e6:36:d8:fb:89:
                    32:ab:b4:3a:29:2e:57:5f:a4:64:80:cf:82:df:9e:
                    3b:a5:37:7c:6e:3a:e0:4b:5b:c9:e2:44:57:98:d7:
                    3b:51:45:fd:7a:1b:67:6b:84:94:78:cb:4a:16:e7:
                    76:5f:5f:0d:2d:f5:ba:48:86:ab:92:63:1c:9e:8b:
                    46:15:84:87:32:26:24:bd:c4:3f:77:c3:c8:0f:d0:
                    40:10:e3:22:f8:90:68:ae:c1:47:bd:88:4a:41:95:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:D1:B5:7C:A4:AB:CF:A1:72:DD:F1:CC:13:CE:C0:8C:91:FD:E8
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32322d3232203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:f4:fd:ba:82:58:6a:69:e0:99:51:6b:ef:0e:57:8d:0e:cb:
         6f:19:8f:4e:48:c3:3d:25:a8:df:fd:3a:eb:77:4f:52:b3:b5:
         ce:34:9a:26:3c:d3:28:78:87:b6:af:f7:f1:e6:bd:5c:26:f8:
         ac:f6:4c:0d:21:56:28:75:f6:f8:71:a8:a9:86:ee:f0:89:8d:
         01:a8:0a:b2:7d:47:3f:64:4c:20:ed:c5:28:38:4e:7d:60:00:
         d6:df:ab:7c:8c:99:63:2e:11:00:0d:b5:4c:35:65:59:89:57:
         7c:60:90:cd:1f:9b:44:cd:34:4c:63:00:b3:89:80:74:03:ce:
         83:6f:2c:d9:c8:d9:6b:66:a2:b3:f2:a7:5b:85:8d:01:00:63:
         4a:72:c6:99:7c:ba:07:ad:a4:ef:c6:1f:1c:36:fc:9b:46:38:
         14:d0:ce:54:ba:63:76:59:07:16:73:a5:f7:8f:e9:41:15:14:
         aa:bd:21:e8:7c:48:d9:64:55:4e:c0:2b:23:ea:c3:b3:00:92:
         f1:9d:d3:8b:ec:16:c7:bc:75:bb:3c:17:fe:63:57:c3:7c:e3:
         2c:fe:32:80:85:27:30:50:39:f9:ad:ac:6a:cc:dd:79:f8:03:
         6c:5d:c0:36:34:40:a5:d7:bc:26:16:cf:2a:71:83:0b:0f:15:
         c7:4f:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:02 2024 by rpki-client on console-ams.rpki-client.org