Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32342d3234203d3e20323634393236.roa
File:                     3136382e3232382e3137362e302f32342d3234203d3e20323634393236.roa (raw, json)
Hash identifier:          KX3q/k2tz3UwiwSE2Hw4USmlUjwwlKsvDXBqJFS/LrY=
Subject key identifier:   E4:E2:A0:62:85:33:81:D1:3B:B3:3A:2C:5D:43:29:A3:C2:03:32:FB
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       7539C4BFAC4CAC54E990BA965D2303831934662E
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32342d3234203d3e20323634393236.roa
Signing time:             Fri 05 Apr 2024 00:35:24 +0000
ROA not before:           Fri 05 Apr 2024 00:30:24 +0000
ROA not after:            Fri 04 Apr 2025 00:35:24 +0000
asID:                     264926
IP address blocks:        168.228.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:c4:bf:ac:4c:ac:54:e9:90:ba:96:5d:23:03:83:19:34:66:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Apr  5 00:30:24 2024 GMT
            Not After : Apr  4 00:35:24 2025 GMT
        Subject: CN=E4E2A062853381D13BB33A2C5D4329A3C20332FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:f6:20:e1:f0:21:08:ee:86:3b:71:f8:0f:
                    9f:c3:35:9e:83:9a:29:8b:96:5d:30:3e:2b:74:52:
                    26:52:c6:fa:30:dd:0a:fa:cb:4b:38:e1:b2:5b:86:
                    e6:82:75:61:bd:d2:7b:82:b6:c7:72:ef:e7:e6:c3:
                    d4:48:fa:98:e6:28:34:44:63:0b:a9:a5:ec:38:af:
                    b7:84:39:6b:53:a3:72:e0:10:dc:ed:b6:10:74:e1:
                    18:c8:38:77:41:60:f6:7a:08:b7:9d:0d:af:83:fe:
                    ae:b4:09:c7:8b:0a:5c:31:aa:84:6e:fe:78:76:58:
                    44:5b:63:fc:22:e3:67:34:91:80:cf:aa:76:ed:41:
                    6e:cb:39:db:2f:a5:b0:bc:b2:a2:5f:bc:c7:ad:0b:
                    7c:6b:7f:43:2a:fa:04:ee:f5:04:f5:bf:3c:fa:a3:
                    3b:3f:64:23:be:29:91:a2:3f:bd:ca:91:b5:a0:75:
                    c7:82:a1:54:45:e0:4e:fb:42:23:0c:c0:78:e9:6c:
                    79:52:9c:6c:55:ac:5d:8f:d1:da:52:fb:ea:6f:c1:
                    85:c9:cd:fa:ce:dd:f9:c6:d2:6a:b6:0c:8a:87:64:
                    2d:a3:1a:30:be:41:c5:06:d3:60:14:ca:ad:08:50:
                    60:85:7b:96:c9:e6:b0:66:38:f2:fc:35:48:84:4e:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:A0:62:85:33:81:D1:3B:B3:3A:2C:5D:43:29:A3:C2:03:32:FB
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32342d3234203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:22:9c:8e:73:73:70:10:79:28:9f:26:bb:2b:5e:d3:5e:ac:
         cf:05:64:27:9f:d8:dc:34:4a:5f:dd:55:05:e2:77:b0:e6:35:
         e0:e3:ed:6e:fd:ae:c8:51:1e:1b:3f:90:42:66:68:67:3e:b6:
         32:43:14:13:a0:55:d5:78:23:86:bc:b2:83:ea:6e:48:47:ab:
         25:6f:3b:2d:cf:8a:fc:2e:b1:09:bc:f1:72:dd:17:fc:ef:15:
         5d:30:17:30:d7:29:f9:07:4a:06:97:4e:ce:1a:a9:b5:b2:c7:
         74:41:2d:84:bf:c7:6c:58:a4:07:1a:20:99:ae:1b:b9:43:bc:
         e3:2d:c1:7c:ea:53:b7:c6:c8:86:e0:67:1c:1b:e1:0c:d5:90:
         11:44:18:98:5e:b1:e4:88:dd:74:be:e7:ee:0f:cd:85:35:a7:
         9c:ed:84:f4:e9:ae:46:c7:ef:47:2b:f3:de:36:e2:8d:36:46:
         04:98:87:f6:ed:13:9e:3f:45:02:eb:58:d1:58:10:c0:11:8d:
         29:d9:72:fa:51:8d:3c:ec:8c:e8:9a:0d:66:b7:c4:b0:9b:8f:
         3a:bd:57:f4:b0:51:11:67:7a:43:af:b8:ad:1f:51:87:05:35:
         a8:05:a0:0a:f5:bb:52:7a:da:0a:48:23:7c:f8:3f:22:6f:54:
         6e:f1:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org