Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa
File:                     3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa (raw, json)
Hash identifier:          hPnBHS/YBk2ft3BjsWcZxafoEG74pKfuxf2lCWncqNE=
Subject key identifier:   67:F2:1B:F4:1B:66:14:91:A7:EC:61:BA:70:78:B5:35:61:A7:08:7B
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       0F754EF75E5968CB4DF06F2AA52C0106DB5E5B56
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa
Signing time:             Fri 05 Apr 2024 00:35:26 +0000
ROA not before:           Fri 05 Apr 2024 00:30:26 +0000
ROA not after:            Fri 04 Apr 2025 00:35:26 +0000
asID:                     264926
IP address blocks:        168.228.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:75:4e:f7:5e:59:68:cb:4d:f0:6f:2a:a5:2c:01:06:db:5e:5b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Apr  5 00:30:26 2024 GMT
            Not After : Apr  4 00:35:26 2025 GMT
        Subject: CN=67F21BF41B661491A7EC61BA7078B53561A7087B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:3b:09:36:61:59:aa:49:64:80:b7:c1:ef:
                    e7:eb:ea:d7:e4:36:79:3f:e8:d7:bb:b0:db:ca:97:
                    2d:78:c1:4b:15:a8:dd:b2:1d:f8:79:29:a1:c5:9c:
                    69:c7:e0:71:67:be:6a:54:2f:94:4b:cc:68:bf:ff:
                    1e:1f:e7:b2:0f:7b:6f:01:47:20:92:f1:7d:2c:be:
                    3b:ba:06:73:f0:19:f7:cb:ba:62:f2:45:d1:e2:35:
                    35:07:61:55:66:da:f7:fe:81:23:7f:d1:a5:3f:56:
                    af:7c:70:33:00:91:40:c9:24:0e:0a:8d:d2:25:8b:
                    00:b4:8f:b0:72:56:09:5d:9b:a4:51:a6:e2:20:b6:
                    c4:a9:cf:1b:da:be:69:2c:5a:c4:eb:6d:6e:52:54:
                    d2:29:2b:60:29:38:b8:e6:04:17:fd:de:c7:74:6c:
                    9e:e5:f1:69:83:4a:02:22:6b:90:bf:09:90:21:06:
                    37:7e:eb:47:24:a4:40:51:ca:17:d8:59:11:16:90:
                    a0:3f:09:e3:fa:a6:dd:c6:b7:e0:28:46:b9:f2:47:
                    7a:02:dc:e9:40:9b:be:80:cd:48:58:66:12:6a:0d:
                    a8:02:6e:7e:51:18:bf:40:aa:ce:f6:2d:9d:16:d7:
                    36:70:45:cf:62:d4:4f:3d:90:3d:ee:89:e6:f7:9b:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F2:1B:F4:1B:66:14:91:A7:EC:61:BA:70:78:B5:35:61:A7:08:7B
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:ad:b9:48:74:c3:df:33:4c:ee:42:00:a5:1a:fd:53:08:
         b5:0a:4e:b0:5c:9d:d5:fe:d5:65:0d:a8:3b:87:8e:2c:8b:b3:
         09:fd:64:9b:54:fe:d2:6e:b8:90:10:9e:ab:9d:4f:7c:91:20:
         b5:5b:77:3b:d5:43:f1:11:ec:2e:25:0f:ba:61:2d:13:16:ae:
         dc:85:ec:38:9e:f8:7d:ee:41:0d:fe:e8:db:74:ad:91:8d:c0:
         67:96:c6:3d:6b:40:4c:1f:1d:94:6a:07:a9:99:cb:60:f4:39:
         a1:0b:6a:28:c1:23:78:8b:34:76:94:db:e2:cf:84:7a:c4:b5:
         e4:05:7c:81:97:5f:4c:ce:9c:fd:36:91:89:78:05:08:25:70:
         46:3f:d0:14:bc:05:28:ea:b7:97:4a:62:1f:a2:f0:6b:92:3c:
         e7:c7:9d:91:c2:fd:4a:3a:4e:16:3f:1a:0e:3b:c7:04:14:07:
         67:e3:fd:31:19:4a:d5:b4:52:7b:f8:09:22:b1:d2:b5:7d:36:
         02:f5:cf:f4:11:3d:6e:e4:d7:d9:72:68:f9:62:08:76:15:1c:
         cd:42:7b:11:77:cf:2b:6d:03:10:84:19:36:d3:92:f3:74:3f:
         03:22:4e:d1:41:dd:69:00:5e:fb:82:79:61:30:f9:a7:25:9a:
         d1:56:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org