Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          Rk457FvNyAmjoHPdog4/0Uzl4tEk5ru19WPzkasNX0w=
Subject key identifier:   82:25:D3:4B:8B:8E:ED:8B:AE:D7:BB:7C:74:55:C9:53:B3:FD:2E:90
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       312DF77ADF3C84032FF039DFE79C5A721A15670D
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa
Signing time:             Thu 04 Apr 2024 14:59:45 +0000
ROA not before:           Thu 04 Apr 2024 14:54:45 +0000
ROA not after:            Thu 03 Apr 2025 14:59:45 +0000
asID:                     266226
IP address blocks:        216.98.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2d:f7:7a:df:3c:84:03:2f:f0:39:df:e7:9c:5a:72:1a:15:67:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Apr  4 14:54:45 2024 GMT
            Not After : Apr  3 14:59:45 2025 GMT
        Subject: CN=8225D34B8B8EED8BAED7BB7C7455C953B3FD2E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:6a:b0:72:b0:df:c6:29:0c:bd:5d:58:03:
                    4c:2c:e0:df:71:42:f7:56:a8:e9:35:b9:3d:d9:38:
                    20:95:c8:e4:7a:ad:ff:e4:c3:7d:6c:82:5f:c5:60:
                    69:38:0c:4f:17:67:32:26:ec:d8:7d:58:69:07:9c:
                    e9:9e:5a:08:8d:31:c5:f3:52:25:35:bc:2c:f3:0b:
                    ed:87:b8:bf:b5:b8:37:dd:64:c8:16:c4:1e:c9:08:
                    e7:b9:d6:1d:6a:e6:b5:f5:5c:f5:64:3d:29:e6:9e:
                    53:86:4f:1b:56:4b:c9:23:1d:e5:08:dc:53:e0:97:
                    cd:ca:d1:5a:33:c6:af:2b:0e:b0:93:30:b2:2f:a8:
                    e0:70:e5:72:46:c2:f6:40:64:b6:16:cf:12:51:86:
                    30:28:61:ee:dc:aa:a0:fd:0b:29:3b:9c:76:8a:a9:
                    cd:c1:1a:68:9b:88:b4:3c:d9:c6:e0:f6:6e:43:ee:
                    f1:7b:3c:44:83:a6:7e:4c:d5:c1:0a:1b:c2:f0:d5:
                    00:66:3e:3a:be:36:45:92:60:a1:4f:d3:d6:3c:e9:
                    f4:8a:7c:08:52:12:f9:76:ab:20:57:48:9d:95:c6:
                    d3:83:38:dd:69:c2:c2:18:15:b5:ed:b1:49:c1:75:
                    f5:a1:87:f1:8a:6b:61:aa:52:92:5a:d6:de:0a:34:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:D3:4B:8B:8E:ED:8B:AE:D7:BB:7C:74:55:C9:53:B3:FD:2E:90
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:da:ce:eb:2a:c6:92:95:8d:6e:3e:c0:07:cb:9a:99:51:e6:
         f8:64:8c:c2:97:a7:2e:1b:0c:e3:52:5e:92:65:03:aa:b8:e7:
         8f:0f:28:0e:e1:b5:bc:89:b5:38:bd:5a:5a:3e:70:6d:8c:6e:
         b1:af:89:10:72:26:fe:08:55:5e:0f:aa:48:0a:9c:14:8e:99:
         e0:51:83:18:f6:8b:5d:96:1d:21:7a:ba:d8:40:4b:2d:d1:18:
         f4:92:14:0b:aa:f9:b9:4f:3e:e3:b9:91:49:cb:08:08:56:b4:
         48:12:18:98:13:e4:3c:bf:2f:7c:4a:31:a8:53:36:e4:4a:43:
         dd:3a:aa:29:d7:1b:40:34:3e:b4:02:87:d7:48:c3:fc:16:d3:
         ba:11:41:79:00:7a:69:1f:9f:4a:de:42:5b:bb:52:41:fa:16:
         d1:4e:71:b8:49:1e:17:b2:db:0b:63:34:5c:3a:cb:a6:bf:db:
         5d:dc:9f:8a:72:86:5f:86:9b:da:4a:75:eb:23:15:53:42:3e:
         4d:c8:33:9b:bd:11:6a:89:d4:67:fc:82:d8:f8:80:14:34:55:
         ce:40:c4:4e:a1:e8:35:3a:c3:a8:1d:68:04:46:64:fa:ee:c6:
         c6:57:e2:4f:17:cd:88:89:93:58:c5:e7:ce:35:23:fe:a8:04:
         ee:84:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org