Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa
File:                     3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa (raw, json)
Hash identifier:          QRTq0tmBi7upFQFJiGxcVTSDr7q6q5600srwvJyYOM8=
Subject key identifier:   C4:AC:63:98:12:EE:9A:C0:2F:10:7E:70:1C:C6:2B:19:2D:A4:9F:8D
Certificate issuer:       /CN=7C4E9246B15A5293F06E721B4412675ED1159708
Certificate serial:       11C404D5DA393CD1D113BC717F75B1A0A91A2780
Authority key identifier: 7C:4E:92:46:B1:5A:52:93:F0:6E:72:1B:44:12:67:5E:D1:15:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa
Signing time:             Thu 04 Apr 2024 21:50:34 +0000
ROA not before:           Thu 04 Apr 2024 21:45:34 +0000
ROA not after:            Thu 03 Apr 2025 21:50:34 +0000
asID:                     265442
IP address blocks:        168.196.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.crl
                          rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c4:04:d5:da:39:3c:d1:d1:13:bc:71:7f:75:b1:a0:a9:1a:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4E9246B15A5293F06E721B4412675ED1159708
        Validity
            Not Before: Apr  4 21:45:34 2024 GMT
            Not After : Apr  3 21:50:34 2025 GMT
        Subject: CN=C4AC639812EE9AC02F107E701CC62B192DA49F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:25:c9:91:8b:a4:dd:c2:82:86:81:00:78:
                    27:e5:2d:b3:1a:41:d1:d6:fc:9e:53:a1:2d:d3:d0:
                    87:d6:a8:a6:93:f4:ce:80:bd:f9:7a:66:b8:68:fa:
                    ee:15:ec:a7:0b:d5:d5:13:70:67:aa:f9:51:06:e8:
                    c3:93:db:d6:c3:48:65:ba:41:12:d0:bd:3c:33:30:
                    0e:f0:65:4c:22:60:cf:41:56:48:2f:f1:b4:d1:f1:
                    22:02:3a:ed:a3:b0:93:9b:57:90:99:76:3d:18:8c:
                    8d:03:f3:c1:ea:5e:56:06:24:a0:c4:e0:29:54:11:
                    6e:45:6a:6d:ab:82:67:a6:d0:84:1e:9a:b6:f4:bc:
                    c2:8b:8f:7b:9f:4e:be:56:96:ee:4e:39:71:1d:2b:
                    f5:7c:b7:2f:87:8f:22:2c:9d:f3:d8:d9:b0:19:48:
                    88:c7:64:25:0c:6b:7e:a8:9c:69:b6:15:31:3a:ca:
                    23:8d:8a:97:15:e2:2e:1d:a2:3a:cb:7c:79:2d:c7:
                    a7:c7:ff:94:22:7d:36:7d:dc:cd:12:76:94:bf:6b:
                    84:a8:11:c5:d3:73:02:03:fb:7b:d5:1e:18:eb:5d:
                    ef:48:a2:ab:27:ec:02:98:4a:3e:02:de:0f:68:c5:
                    40:3a:df:34:93:e3:7b:ca:be:0a:54:5d:81:79:c7:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AC:63:98:12:EE:9A:C0:2F:10:7E:70:1C:C6:2B:19:2D:A4:9F:8D
            X509v3 Authority Key Identifier:
                keyid:7C:4E:92:46:B1:5A:52:93:F0:6E:72:1B:44:12:67:5E:D1:15:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:0a:04:4f:fb:b7:8f:20:34:90:ad:54:2c:e0:43:40:3e:5e:
         4b:3f:7e:c0:a5:c5:f8:61:8b:21:d5:44:2c:52:31:b6:71:29:
         6c:4e:ac:f1:81:a2:81:ac:28:0f:53:f1:44:f2:03:50:35:64:
         cf:2e:fc:55:89:da:b6:5f:b7:d6:93:e8:07:b8:73:cc:71:85:
         c3:2c:6c:5c:e8:90:41:fd:5c:cc:49:e1:4e:a6:e9:6b:62:ea:
         7d:2d:86:55:63:12:9a:63:f5:15:b9:82:cd:9b:73:7c:f9:f5:
         a0:74:6d:ea:fd:42:d6:34:2b:a6:a3:ad:c9:8b:a3:b7:28:ad:
         76:a7:7a:3e:ff:ec:6c:d0:e7:f1:d5:42:9c:02:5a:b4:50:20:
         e5:10:03:de:d4:e5:bf:ce:ca:8b:76:0b:e8:bf:32:1a:79:77:
         47:47:d8:ad:4d:a1:d3:7b:96:1c:25:84:5b:6a:30:38:38:e9:
         3f:ee:a3:74:f7:63:e7:af:20:e0:3c:6d:3e:89:f5:8f:28:af:
         54:0e:9c:80:6a:2e:8f:b7:e3:96:b8:3f:e5:73:d3:c2:94:fc:
         d1:b0:f0:fc:52:b4:ee:b6:29:63:37:67:96:d3:7e:50:fd:7b:
         a2:8b:44:9f:65:2e:93:db:d9:3a:ec:47:ff:f2:c9:8d:d1:15:
         91:25:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org