Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa
File:                     3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa (raw, json)
Hash identifier:          0Fkt2IJuzSNIois7Wo2XL7tIEfbNMrS6kpOM1b0NN/w=
Subject key identifier:   50:74:78:5B:4F:B0:4B:51:58:9D:EF:7C:8B:08:84:B0:BE:42:5D:43
Certificate issuer:       /CN=71E169D36940CB71A5ADBB76D2764F1539336D84
Certificate serial:       50270A344E165F0D27070E2ADF23B3D917A300AD
Authority key identifier: 71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa
Signing time:             Thu 04 Apr 2024 20:41:42 +0000
ROA not before:           Thu 04 Apr 2024 20:36:42 +0000
ROA not after:            Thu 03 Apr 2025 20:41:42 +0000
asID:                     265344
IP address blocks:        168.181.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl
                          rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:0a:34:4e:16:5f:0d:27:07:0e:2a:df:23:b3:d9:17:a3:00:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E169D36940CB71A5ADBB76D2764F1539336D84
        Validity
            Not Before: Apr  4 20:36:42 2024 GMT
            Not After : Apr  3 20:41:42 2025 GMT
        Subject: CN=5074785B4FB04B51589DEF7C8B0884B0BE425D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:23:6f:a0:8b:33:1a:e6:bc:ed:fa:8b:02:
                    72:fa:53:4e:fc:5d:6c:2b:eb:49:e7:16:f3:a3:d4:
                    e1:21:34:cb:72:b9:9a:17:f2:3e:cb:67:7e:4e:61:
                    94:90:a3:4d:92:c6:5f:95:74:74:50:11:38:13:58:
                    35:0d:3e:26:73:c4:58:09:bd:27:e4:6a:f4:17:12:
                    8d:b4:32:1f:a8:9b:27:7d:35:f1:2d:8a:05:e8:96:
                    95:8d:1a:61:71:af:fd:99:2f:4b:88:81:3d:08:fe:
                    19:77:15:d2:70:b7:65:78:47:c2:22:5b:a5:0b:e0:
                    5b:24:31:3b:91:40:53:90:f0:d2:0f:d2:13:ea:1b:
                    30:c4:b4:93:11:37:69:cc:25:98:b6:61:b8:0c:e7:
                    23:9a:44:d5:d4:68:8a:b4:86:91:05:94:8e:b2:fc:
                    32:af:c4:f4:33:22:73:84:9f:c0:d3:39:c6:e7:1f:
                    32:70:48:46:80:d3:ae:bf:9c:45:c9:8f:b2:34:ab:
                    7c:3f:7d:59:09:d4:22:0c:76:fc:dc:76:f5:26:9e:
                    74:ae:4a:86:88:f8:f3:89:e7:fb:c8:27:d9:79:50:
                    00:b0:b3:fc:13:5a:04:73:ea:c5:b6:56:2a:92:1f:
                    ad:fe:48:5c:09:40:3b:0c:ad:c8:a6:6f:0d:85:71:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:78:5B:4F:B0:4B:51:58:9D:EF:7C:8B:08:84:B0:BE:42:5D:43
            X509v3 Authority Key Identifier:
                keyid:71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ad:42:e1:23:f3:b8:48:3f:90:ad:7a:ad:a1:ee:e7:4f:a6:
         68:6c:99:57:e6:db:3e:3c:b5:0b:b6:c8:0c:50:a7:9d:39:f4:
         8b:4a:85:04:6a:db:88:c6:bf:ff:e1:4f:78:b6:b7:e1:c2:2a:
         5a:45:c5:b2:b3:ac:9f:df:57:94:e5:36:8a:98:f4:32:9d:a9:
         03:d6:b7:a3:ad:f4:18:7d:91:21:39:a7:93:14:41:a2:f2:32:
         5f:1d:26:46:c5:3f:38:4f:8e:e1:f7:5a:37:c0:0a:0c:ea:de:
         d4:d5:cf:bf:ba:15:6c:da:49:4c:91:c5:ef:e8:66:c5:ae:42:
         c1:05:64:04:bd:cf:df:ed:9a:5d:84:d6:92:55:92:78:f5:4f:
         be:c2:2f:ad:79:1d:af:db:37:23:62:9c:55:63:c0:08:2e:01:
         26:be:a6:ba:29:96:97:f6:33:80:23:41:a0:d1:d9:30:ae:1e:
         4a:61:c1:f9:4f:c6:7e:4b:1c:61:ef:c7:c9:75:8e:bf:4c:22:
         12:74:1d:55:a1:ec:91:90:b1:0a:d7:f7:be:67:bb:4f:d3:23:
         e6:c3:62:1c:ff:6c:bd:5d:bf:c4:f0:b6:d0:e0:c4:a2:79:a6:
         c8:be:86:52:32:8d:7c:f4:92:8a:4d:d7:fd:1d:ec:ad:6c:0d:
         98:23:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:56 2024 by rpki-client on console-fra.rpki-client.org