Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
File:                     3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (raw, json)
Hash identifier:          Za87YRMzCNDUIh1O8VaBiTz0TyF/LyKCHP4hjQkNW44=
Subject key identifier:   CF:91:73:DB:10:11:D6:B0:C4:F4:B3:BB:CF:EA:CC:A8:01:21:BC:4E
Certificate issuer:       /CN=E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53
Certificate serial:       01A4C1E0DDD18766F2AD0497DDC5005E7A154C05
Authority key identifier: E4:2F:CD:E1:81:56:01:7A:B0:DA:4B:3C:8D:82:FB:56:DD:B1:1E:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
Signing time:             Tue 01 Oct 2024 12:40:29 +0000
ROA not before:           Tue 01 Oct 2024 12:35:29 +0000
ROA not after:            Tue 30 Sep 2025 12:40:29 +0000
asID:                     265487
IP address blocks:        168.197.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.crl
                          rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a4:c1:e0:dd:d1:87:66:f2:ad:04:97:dd:c5:00:5e:7a:15:4c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53
        Validity
            Not Before: Oct  1 12:35:29 2024 GMT
            Not After : Sep 30 12:40:29 2025 GMT
        Subject: CN=CF9173DB1011D6B0C4F4B3BBCFEACCA80121BC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:03:38:dc:5c:6f:81:6b:d6:fe:e9:23:91:
                    20:cf:52:27:92:6a:69:26:b7:23:8d:d2:12:52:f3:
                    bf:8a:cb:bd:ea:f5:bb:42:fb:e9:2e:46:45:b5:cb:
                    87:6c:71:c0:c8:46:31:da:b4:07:d0:b8:9d:e6:a8:
                    79:a2:dd:d2:00:93:0a:8c:d2:56:98:21:d5:1b:39:
                    48:d1:b5:21:0b:63:ec:67:92:c6:55:15:79:e6:c6:
                    51:fd:ca:75:9b:5f:61:07:58:c8:14:0a:8c:fe:05:
                    ad:4c:c2:c7:ca:25:1c:d3:60:dc:91:ab:e3:fc:2e:
                    06:eb:41:d9:9e:4f:a5:e9:5a:28:15:99:29:89:01:
                    17:ff:8c:0e:66:39:e8:09:d8:02:3a:62:6f:42:f8:
                    0f:3f:21:af:aa:50:c3:a9:72:d3:9f:33:dd:32:b4:
                    05:33:07:6f:36:fe:4f:1d:ef:0f:f7:5e:fb:84:d6:
                    ac:96:66:5a:8d:0a:54:35:fc:57:24:fe:c8:3e:e8:
                    d9:c4:2e:19:d4:89:ef:71:0b:f8:21:97:2a:d6:6e:
                    cd:e6:2c:98:d5:a7:27:75:16:f9:44:10:c3:47:a2:
                    6e:2d:f0:b9:89:5b:9a:dd:4d:7a:85:6b:9b:dc:bf:
                    c4:e7:31:11:ee:52:60:e8:56:bc:40:39:36:40:8b:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:73:DB:10:11:D6:B0:C4:F4:B3:BB:CF:EA:CC:A8:01:21:BC:4E
            X509v3 Authority Key Identifier:
                keyid:E4:2F:CD:E1:81:56:01:7A:B0:DA:4B:3C:8D:82:FB:56:DD:B1:1E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:cb:71:c1:3e:18:e1:81:c8:6b:07:a9:e3:3e:09:de:3a:
         74:5e:50:80:1c:61:6d:68:6e:c1:f7:92:28:83:c9:57:31:63:
         d0:14:29:34:7d:d2:7c:57:59:2d:73:07:a8:88:23:36:44:60:
         e1:19:78:ce:27:8c:bc:06:f2:58:45:7d:0b:25:56:f1:40:65:
         b0:4a:36:34:b8:74:ca:08:57:09:6b:99:29:71:a0:c8:d5:be:
         c8:87:24:8a:72:14:ee:18:c8:3e:06:67:19:06:61:a8:8b:ce:
         6c:49:5c:11:be:03:33:ca:57:82:b2:bb:c0:0d:d3:4c:60:10:
         b5:34:01:99:3d:f0:2b:6c:4e:4e:9c:b1:69:08:b4:5b:d4:36:
         37:fe:56:29:4f:dc:37:75:ed:2b:c7:5c:5d:08:11:fb:56:1c:
         00:70:46:a4:3e:d2:16:11:66:0a:8e:91:b7:45:94:c2:4a:d1:
         59:d3:59:25:97:b3:2a:78:02:1e:ac:ef:7e:8e:c1:f5:85:9c:
         fd:23:b1:9b:06:e2:0c:6d:33:1a:c7:db:2b:55:f4:fd:04:3e:
         cd:4c:07:44:f3:ff:2e:94:fe:1b:a7:4e:09:b6:f2:b7:65:3c:
         92:b5:1d:31:a5:6b:81:f8:3b:62:ea:64:a6:22:48:54:4f:a5:
         f4:35:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org