Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3332203d3e20323632333136.roa
File:                     3136372e3235302e3135322e302f32322d3332203d3e20323632333136.roa (raw, json)
Hash identifier:          9iE07CnbXs4q2YIX1Oukxr4DvwLGkFw8w81GdjQMFY0=
Subject key identifier:   C3:15:FD:0E:9F:7D:99:1F:2D:AF:27:94:18:76:A8:E5:1F:F4:3B:33
Certificate issuer:       /CN=DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5
Certificate serial:       35F8B68207A79D68EBDFC84A828F41FD07E9B865
Authority key identifier: DB:AF:D5:BA:C3:0F:1A:9C:BD:58:3F:D0:90:9C:A4:ED:07:5F:04:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3332203d3e20323632333136.roa
Signing time:             Sat 08 Jun 2024 12:37:36 +0000
ROA not before:           Sat 08 Jun 2024 12:32:36 +0000
ROA not after:            Sat 07 Jun 2025 12:37:36 +0000
asID:                     262316
IP address blocks:        167.250.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f8:b6:82:07:a7:9d:68:eb:df:c8:4a:82:8f:41:fd:07:e9:b8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5
        Validity
            Not Before: Jun  8 12:32:36 2024 GMT
            Not After : Jun  7 12:37:36 2025 GMT
        Subject: CN=C315FD0E9F7D991F2DAF27941876A8E51FF43B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:bf:48:9a:78:bf:4d:c0:a8:cf:28:95:5f:
                    67:54:15:97:42:cf:e5:00:83:03:a5:eb:c6:31:ed:
                    94:6f:6e:90:60:07:30:37:f3:6c:9d:d6:4f:e3:b6:
                    51:72:c8:e9:ca:e2:d1:b0:71:68:fc:4b:70:36:a7:
                    24:b2:22:52:9f:58:99:83:60:50:16:d1:a6:aa:f2:
                    3d:d9:04:54:bb:e4:40:0b:7d:d0:bb:20:85:43:98:
                    41:14:32:16:b1:91:fd:6e:8d:75:a5:d2:a5:89:b3:
                    03:d2:f9:3e:38:e9:a4:ed:6d:a4:1c:e9:c0:d3:f1:
                    ce:f2:1c:51:80:7b:40:89:e5:3a:bb:56:08:4d:c0:
                    ba:71:72:1e:bc:dd:25:e9:96:ae:12:c3:00:4f:65:
                    25:39:e8:a8:23:98:df:98:f3:44:16:31:67:04:5f:
                    0e:03:cd:a6:ec:14:54:67:83:bc:72:5f:01:38:4d:
                    1b:ae:e2:39:a7:73:2d:b7:46:ce:9e:f5:4b:e2:26:
                    1b:46:bb:a2:8a:a1:be:bc:dc:ba:11:47:23:4e:06:
                    c6:e6:d2:f7:e7:3a:e3:6d:71:61:a2:e6:69:17:ca:
                    69:55:6a:18:8f:2b:27:ce:21:21:46:d6:ec:ce:5d:
                    de:04:92:13:0e:bc:49:fe:1c:02:88:1c:5e:e0:ec:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:FD:0E:9F:7D:99:1F:2D:AF:27:94:18:76:A8:E5:1F:F4:3B:33
            X509v3 Authority Key Identifier:
                keyid:DB:AF:D5:BA:C3:0F:1A:9C:BD:58:3F:D0:90:9C:A4:ED:07:5F:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3332203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:f1:0b:07:b4:a6:ec:62:fd:ad:ed:65:b7:7a:31:6c:12:1c:
         41:70:ba:a9:24:16:32:dc:9e:6c:08:86:df:be:27:10:9b:c1:
         30:f6:10:f9:10:a6:21:be:16:e9:1e:45:86:88:e1:de:ed:dc:
         49:1e:20:23:f9:56:9e:c5:3b:7c:ed:c5:ae:66:ce:ed:93:0c:
         19:69:96:bd:af:e3:88:9b:2c:65:ec:ff:de:9a:a7:97:79:65:
         47:51:64:52:e3:c5:78:8c:21:b0:6b:5a:e6:b2:16:c0:01:1d:
         4b:d3:e3:34:e8:91:e5:70:6a:d1:68:a4:4c:bd:02:9e:34:20:
         f7:5b:96:ec:18:bc:ad:a0:b0:9f:4c:8a:a3:c1:e7:1d:91:d5:
         4c:b3:53:b4:21:c4:bf:fc:7e:5c:90:77:15:24:b5:ec:e6:66:
         76:04:b3:c7:34:24:ca:32:2b:03:37:94:dd:8e:83:e2:2e:5a:
         bf:91:a8:f7:a6:1d:9c:a8:ac:05:fa:0c:22:63:d6:4e:49:75:
         0d:3a:d6:a0:bb:12:9c:7b:8f:09:2c:cb:e1:8d:d8:59:72:69:
         be:8a:14:32:e5:f2:02:8a:aa:e2:b5:fa:e2:80:2c:ef:4e:01:
         6e:40:f1:7e:a6:18:1e:2d:d1:d3:aa:e9:90:b7:2a:f9:f0:db:
         bb:13:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:52 2024 by rpki-client on console-ams.rpki-client.org