Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137392e302f32342d3234203d3e20323634393236.roa
File:                     3136382e3232382e3137392e302f32342d3234203d3e20323634393236.roa (raw, json)
Hash identifier:          vsDPCEkPWxpSnBTq7YQS5sJBnebQn7uqILfFKtJbbYs=
Subject key identifier:   FA:2F:B3:3D:CF:4C:B0:D5:02:11:9A:D7:90:AE:55:2B:D3:60:02:DC
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       2A2D3AAC0A56B21E3D1407FAD24A7D3E889E2C6E
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137392e302f32342d3234203d3e20323634393236.roa
Signing time:             Fri 05 Apr 2024 00:35:26 +0000
ROA not before:           Fri 05 Apr 2024 00:30:26 +0000
ROA not after:            Fri 04 Apr 2025 00:35:26 +0000
asID:                     264926
IP address blocks:        168.228.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2d:3a:ac:0a:56:b2:1e:3d:14:07:fa:d2:4a:7d:3e:88:9e:2c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Apr  5 00:30:26 2024 GMT
            Not After : Apr  4 00:35:26 2025 GMT
        Subject: CN=FA2FB33DCF4CB0D502119AD790AE552BD36002DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:08:13:9f:66:7b:38:c8:87:c7:a2:a3:dc:
                    64:6d:c0:de:b7:d3:0f:32:cf:65:1c:29:87:fc:5a:
                    c0:9f:89:70:4e:db:c7:72:19:e2:3f:64:06:6a:8d:
                    a4:2b:1e:54:8c:95:7c:b3:45:2d:a2:fb:9b:96:89:
                    8c:f5:c6:7d:59:2d:f9:a9:27:a2:43:b8:b5:d8:11:
                    5c:cc:17:cb:9e:d5:d4:ed:3e:5b:0f:06:cf:c7:59:
                    0c:14:07:64:7b:00:df:d1:44:5e:b6:13:96:b0:a5:
                    6e:6b:10:4b:4e:33:28:74:86:b2:ce:b1:4c:4b:c7:
                    f2:a8:44:ad:d0:56:67:f4:4e:09:51:fb:9a:49:3b:
                    89:03:de:08:a9:4f:76:c6:00:e0:3a:d4:9d:70:1f:
                    32:4c:17:eb:00:6d:0c:4a:5c:5a:08:f3:0a:af:b5:
                    6f:4a:f3:76:ad:4a:ce:74:24:84:f3:1a:e7:ad:6e:
                    72:e9:b2:21:a3:9e:13:74:97:20:ff:53:60:6a:1e:
                    62:7b:d7:c8:12:0a:a2:6a:92:2f:10:07:63:06:95:
                    f5:e5:bc:e4:4c:84:51:9d:5e:95:ee:56:d4:b7:1f:
                    2b:8d:be:9f:13:80:2b:c7:55:9e:3a:e1:4a:97:55:
                    15:e2:8e:78:d2:72:86:18:c0:9c:af:77:4e:a7:9d:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:B3:3D:CF:4C:B0:D5:02:11:9A:D7:90:AE:55:2B:D3:60:02:DC
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137392e302f32342d3234203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:15:7b:28:fc:0b:1d:59:23:b4:38:2b:f0:99:1f:44:18:19:
         cf:67:e9:c8:49:e1:ad:e4:bd:ea:df:5d:eb:68:ae:92:17:7e:
         50:2c:00:89:78:09:1e:38:ee:ca:4d:61:0b:78:3f:f5:54:1d:
         06:8f:91:7e:5e:c8:bd:ab:54:30:18:af:c2:80:af:ae:13:8f:
         b5:75:2a:13:57:b0:56:f7:8d:f8:3c:03:16:76:06:8c:cc:a1:
         0c:7c:74:99:bc:f8:8b:3c:8c:4d:25:80:d4:cb:8a:15:e7:14:
         18:5e:b9:a4:ef:94:e6:25:dd:5b:8a:0d:43:dc:f6:29:ba:5b:
         87:55:de:af:e4:17:59:58:55:bb:b0:da:08:1c:46:0e:ab:c8:
         91:ed:3c:14:69:6a:63:97:2c:37:5a:ce:ce:54:47:aa:28:72:
         56:2a:50:57:c6:8e:5d:ad:73:e7:b2:e5:14:b9:ec:5c:6f:41:
         64:ce:71:5e:c6:d7:e9:25:b3:69:50:11:e2:b4:69:5b:6f:f6:
         53:51:8a:63:46:bd:38:ef:66:9c:85:34:2f:b0:2b:e0:39:95:
         cb:1c:e7:9c:1e:1e:ae:c1:96:fa:be:57:6f:2e:b0:b9:4b:0a:
         bf:5f:8a:10:ce:7e:53:3f:47:d7:da:63:19:e3:18:b4:f8:17:
         b6:f9:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:35 2024 by rpki-client on console-fra.rpki-client.org