Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa
File:                     3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          csOH8jOCHRP2ijAMluphNY3mPvgVHcSws/rEbz+lgmQ=
Subject key identifier:   0F:D8:AB:00:0B:3C:EE:F7:98:71:90:0A:50:9A:FE:A6:74:97:8E:5C
Certificate issuer:       /CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
Certificate serial:       6A60F788CE8873714979C8165B3B78BF9797002F
Authority key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa
Signing time:             Thu 04 Apr 2024 00:29:04 +0000
ROA not before:           Thu 04 Apr 2024 00:24:04 +0000
ROA not after:            Thu 03 Apr 2025 00:29:04 +0000
asID:                     264025
IP address blocks:        168.197.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:60:f7:88:ce:88:73:71:49:79:c8:16:5b:3b:78:bf:97:97:00:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
        Validity
            Not Before: Apr  4 00:24:04 2024 GMT
            Not After : Apr  3 00:29:04 2025 GMT
        Subject: CN=0FD8AB000B3CEEF79871900A509AFEA674978E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:07:ba:8d:1c:c1:fc:6f:e3:10:a0:21:51:
                    c6:70:a3:e6:91:a9:9e:be:56:66:e5:fd:cf:37:9d:
                    79:7c:9a:72:4c:72:23:a9:5a:ab:27:68:3f:17:97:
                    66:13:63:ef:4a:df:8e:1a:54:ff:76:a8:da:49:39:
                    37:62:a2:cc:93:44:97:3d:9e:9a:e9:a5:52:0d:c4:
                    d3:2c:82:7a:82:18:7a:d7:37:dd:b0:90:3d:c6:66:
                    1d:44:a7:94:d2:7f:b3:26:4c:72:f8:46:a9:84:be:
                    8b:1e:2f:ff:5e:3a:65:53:e9:16:b5:26:72:46:0f:
                    3d:29:d8:99:4d:9f:3f:9f:88:0b:9a:8d:63:4f:4a:
                    3c:88:9b:6b:09:a3:6b:1c:64:37:ce:26:96:f1:17:
                    ec:75:51:3e:89:37:71:1b:35:44:ce:1f:e4:4b:7b:
                    d3:2b:9d:59:fb:00:0a:b6:2d:77:ed:a3:2b:e6:1d:
                    2a:79:d7:14:18:42:1c:15:4d:df:0e:fa:82:53:3a:
                    e3:8a:5e:19:7a:05:0b:81:f7:53:6e:eb:55:d5:95:
                    b0:45:63:27:d2:e4:67:1c:ee:e9:ed:fe:51:6c:b8:
                    69:1f:57:15:cc:1b:4b:93:f7:fc:98:61:e1:68:30:
                    0e:7d:46:d8:93:5d:98:46:e1:58:36:e4:11:65:6f:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:AB:00:0B:3C:EE:F7:98:71:90:0A:50:9A:FE:A6:74:97:8E:5C
            X509v3 Authority Key Identifier:
                keyid:E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:42:78:51:d1:e4:ea:e8:5c:8c:c4:11:fe:19:e6:c3:82:46:
         3f:08:2b:02:c9:8a:bb:82:15:fe:5d:ae:ee:7d:88:0a:57:c9:
         58:c7:31:f5:9d:7a:03:08:18:07:c3:2a:cf:c8:12:87:fa:0c:
         e9:b5:42:8e:af:b5:cf:6a:c4:21:e1:c7:02:d0:ad:b4:f2:47:
         0a:3f:4b:12:b7:28:c1:7b:e8:60:a4:38:37:3c:5f:18:c7:76:
         eb:af:cb:13:61:bd:3c:9c:c6:e2:f4:79:31:13:b9:43:64:85:
         e4:02:39:d9:6c:9d:58:07:7a:18:cb:b0:4c:1d:66:c6:3d:29:
         b5:57:18:f0:41:86:04:7a:ec:ce:34:39:27:28:ee:d0:ea:c0:
         bc:c5:32:27:11:fb:4f:d0:4a:ac:1a:71:71:b7:f5:ee:b1:c7:
         4e:c1:88:0a:ac:c4:63:6a:90:a8:97:92:82:6a:28:fc:2c:b1:
         53:98:0d:31:a2:5a:2a:78:8f:b6:ea:09:42:e7:5d:5e:78:3f:
         02:37:0d:c0:10:6e:52:af:a2:e8:89:53:5a:cb:42:2f:fe:3b:
         2d:8e:ab:09:b0:8a:9f:68:37:b8:4a:37:a8:3e:66:75:bb:2e:
         0e:c3:2c:63:1b:0a:cb:5e:00:8e:75:2d:bf:be:88:5c:ea:8c:
         e4:77:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org