Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa
File:                     3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (raw, json)
Hash identifier:          GoqbINRNhTmMKdsCEYKKgihtWH89S/pmUlDFVjR5RLo=
Subject key identifier:   C1:2A:2D:43:B7:BA:05:72:3B:C7:EC:DF:09:3F:C2:D5:7A:0A:98:98
Certificate issuer:       /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Certificate serial:       1921AE43E20B9FEEAD353E84B9E11AA85D0F7575
Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa
Signing time:             Thu 04 Apr 2024 17:59:53 +0000
ROA not before:           Thu 04 Apr 2024 17:54:53 +0000
ROA not after:            Thu 03 Apr 2025 17:59:53 +0000
asID:                     264883
IP address blocks:        168.227.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl
                          rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:ae:43:e2:0b:9f:ee:ad:35:3e:84:b9:e1:1a:a8:5d:0f:75:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
        Validity
            Not Before: Apr  4 17:54:53 2024 GMT
            Not After : Apr  3 17:59:53 2025 GMT
        Subject: CN=C12A2D43B7BA05723BC7ECDF093FC2D57A0A9898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:1f:cd:9c:6b:d2:47:09:de:76:cd:a3:47:
                    83:2e:44:fd:10:c9:3a:f5:fb:b0:78:c4:9a:43:3c:
                    c7:00:f6:0e:85:9d:72:34:5c:36:ce:09:5c:6d:f0:
                    5d:ac:c9:f8:d8:00:12:52:b6:e5:64:92:a7:be:34:
                    82:0b:3a:9b:79:2d:5b:6e:0e:94:e6:d5:c5:eb:82:
                    45:f0:89:40:10:19:48:d7:e9:c6:fc:d2:27:d9:52:
                    0c:bf:80:a1:72:23:17:46:0d:46:b1:54:22:62:f4:
                    9b:3c:6a:c9:a8:83:c6:93:c3:57:60:f0:64:b4:6e:
                    8e:5f:b5:55:ae:08:d5:2b:57:5b:75:7a:1e:07:b0:
                    59:cf:2c:52:81:fc:0b:3e:d6:0c:bd:96:03:5b:9c:
                    3d:75:b5:c5:0f:bb:1b:1c:67:86:cc:ac:ef:67:06:
                    dd:60:7c:88:aa:16:53:65:5e:f7:d2:85:96:67:1a:
                    47:79:8f:28:71:8f:d6:8a:af:10:97:71:e9:30:ff:
                    c3:c8:82:26:2e:0a:72:29:aa:5f:ec:a8:f9:97:71:
                    7a:d6:62:8a:60:fc:9b:11:b0:aa:c1:f2:3d:7c:2f:
                    9f:93:51:1e:9a:be:5d:39:a2:29:56:68:34:c4:67:
                    48:7f:ca:87:70:7a:b7:9f:c3:a8:cf:2b:08:44:a9:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:2D:43:B7:BA:05:72:3B:C7:EC:DF:09:3F:C2:D5:7A:0A:98:98
            X509v3 Authority Key Identifier:
                keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d2:11:5c:e4:77:fd:ee:e6:00:76:60:22:42:87:b8:3b:d0:
         e2:cc:1f:4b:69:4d:69:a4:49:1c:b7:27:c0:5c:45:9b:1f:db:
         f4:7e:7c:a1:b8:ce:36:9e:13:19:9b:16:f6:98:70:0d:82:61:
         9c:d1:64:7b:8d:f7:b0:e7:18:8c:7d:2e:e7:1e:5c:5e:c9:9f:
         a9:44:b0:77:ec:61:71:d7:de:fa:55:e4:e2:a9:db:35:f9:fb:
         01:3e:e8:d8:26:92:4f:3b:29:43:b1:c3:89:e6:95:51:62:b4:
         b6:45:d7:1f:95:d5:e7:f7:88:24:45:f5:3d:6f:d5:01:ca:da:
         29:15:ea:eb:3d:3e:ea:3d:28:3a:9b:f1:1c:d9:72:e5:69:71:
         23:7d:5e:f3:74:7b:82:63:38:7e:5f:62:50:e4:4d:12:ed:6a:
         88:02:74:09:32:0c:13:69:f9:61:bd:4f:68:14:af:df:80:b8:
         82:e8:34:0c:4a:98:02:8f:72:a4:8e:8f:c0:93:4e:a6:cd:2a:
         9b:26:c6:76:46:25:99:50:49:35:f9:a2:38:9c:f6:a7:9e:dd:
         3e:cf:8f:23:13:ac:92:68:44:43:3a:c2:ac:2a:1b:4e:01:af:
         f9:eb:3d:1b:ac:d1:c7:b3:c0:64:0c:47:0d:8d:16:87:36:1e:
         84:63:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org