Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          CFfGPzfREzw0+iep6aaBte2a+M0WqHq1mmgVG+ebPms=
Subject key identifier:   9B:95:B1:42:7F:E0:BD:07:28:EC:06:1A:CB:95:26:D9:86:E4:6A:48
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       1975ACA37A157B3E3301ADFAF7CE25F0897D1A47
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa
Signing time:             Thu 04 Apr 2024 14:59:45 +0000
ROA not before:           Thu 04 Apr 2024 14:54:45 +0000
ROA not after:            Thu 03 Apr 2025 14:59:45 +0000
asID:                     266226
IP address blocks:        216.98.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:75:ac:a3:7a:15:7b:3e:33:01:ad:fa:f7:ce:25:f0:89:7d:1a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Apr  4 14:54:45 2024 GMT
            Not After : Apr  3 14:59:45 2025 GMT
        Subject: CN=9B95B1427FE0BD0728EC061ACB9526D986E46A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:f2:b5:b4:31:31:66:87:02:5b:98:91:e9:
                    bb:18:a5:25:5e:d3:82:28:0a:6e:d3:aa:08:05:cc:
                    3d:41:c9:99:c2:01:7f:b7:9b:b7:cd:fe:2d:aa:25:
                    45:9a:5e:19:a7:0a:20:91:22:65:11:fe:a0:c4:b5:
                    87:3d:3c:2c:ea:51:ba:d1:d7:7d:f5:6c:bc:8c:65:
                    a5:69:6f:8e:17:d4:0a:e2:44:8e:bc:82:dd:cb:55:
                    2a:3c:34:38:e8:4d:ef:af:5e:e2:84:73:d9:fb:76:
                    2f:68:cf:e8:b9:4b:e3:b0:00:fd:8a:61:73:09:db:
                    de:5b:46:32:50:74:1b:a9:43:9f:fe:c7:ef:3f:a0:
                    f8:0f:d7:9e:30:1c:e8:b4:b9:98:00:1d:43:55:ef:
                    ec:97:81:bf:e9:c3:af:cb:bb:8b:1e:72:a5:2d:0e:
                    2d:b5:e1:59:6d:f9:f6:19:e0:c3:5c:93:e3:e0:03:
                    8c:55:60:a8:a3:5a:71:d7:27:7d:61:3e:e6:c5:3d:
                    6f:05:e7:6d:b7:ac:a3:58:b7:4b:24:01:74:e5:18:
                    28:75:1b:83:4a:10:7f:06:b3:39:44:4c:43:57:d3:
                    a0:bd:9f:84:a4:fb:9f:c1:11:2b:7a:b7:6c:1a:e7:
                    76:87:d8:94:a7:dc:c1:57:a3:52:8c:df:0f:4c:7d:
                    a3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:B1:42:7F:E0:BD:07:28:EC:06:1A:CB:95:26:D9:86:E4:6A:48
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:30:c7:a2:2e:57:2d:f0:dd:c6:f0:4a:0e:5c:3b:95:35:03:
         12:74:2d:03:dd:7e:db:fa:9f:bb:75:9c:64:b4:99:90:ee:2f:
         83:7b:16:3c:55:9b:11:71:b7:07:16:6b:59:55:6b:92:45:86:
         42:74:8c:87:03:0d:38:d7:f1:2d:03:14:93:4a:dd:ef:2f:ee:
         3c:40:1a:dc:a4:d3:b6:3c:98:a1:9e:34:78:53:9d:e0:7c:bf:
         c4:25:22:20:17:45:6c:d8:3b:da:d0:01:bc:ee:f0:54:36:e0:
         83:c1:2b:6d:6d:45:bb:02:3f:96:b8:b4:1a:a6:b0:dc:57:9a:
         8f:da:8f:51:71:ed:fd:79:7e:4e:4c:f0:46:5c:c1:02:cb:ad:
         46:92:69:73:48:9c:0e:ec:38:6b:89:28:42:22:24:af:21:42:
         7c:0a:93:1b:71:4a:f3:2c:2b:bf:79:b3:f7:88:a3:cf:13:f9:
         5b:0f:47:df:79:c9:28:2f:fc:e2:89:72:8b:70:db:be:8b:eb:
         54:22:d5:f2:ed:ef:77:f3:8a:98:3d:c5:65:96:23:4d:6c:b5:
         21:46:00:52:97:f8:1f:26:41:3d:d9:c5:4f:a0:33:4d:35:55:
         fc:8c:a3:6e:a3:a7:0c:bf:dc:ce:b3:d9:a9:83:78:e9:3d:b8:
         eb:70:19:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org