Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa
File:                     3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          8OAuee6tosojg4a9DEK+XHwzUbayFiSrxzkd2zM0T0s=
Subject key identifier:   31:0D:7F:E4:18:93:68:79:61:50:CB:46:9A:05:5B:53:F4:D4:E0:34
Certificate issuer:       /CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
Certificate serial:       3DB1A20A74707B8A82FD875662F36DF28386F436
Authority key identifier: A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa
Signing time:             Thu 04 Apr 2024 00:44:50 +0000
ROA not before:           Thu 04 Apr 2024 00:39:50 +0000
ROA not after:            Thu 03 Apr 2025 00:44:50 +0000
asID:                     61632
IP address blocks:        168.232.184.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b1:a2:0a:74:70:7b:8a:82:fd:87:56:62:f3:6d:f2:83:86:f4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
        Validity
            Not Before: Apr  4 00:39:50 2024 GMT
            Not After : Apr  3 00:44:50 2025 GMT
        Subject: CN=310D7FE4189368796150CB469A055B53F4D4E034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:78:2d:a9:f3:11:46:e4:b6:77:59:af:1b:
                    13:6a:53:ce:5e:7c:86:d1:d3:a7:11:83:72:fb:41:
                    58:46:90:7d:2a:fb:5c:ba:51:2b:9f:e2:4d:70:5e:
                    29:db:1d:8a:b0:2c:34:bd:09:c7:a9:fd:52:77:9c:
                    9a:76:3e:b8:c0:fc:11:c3:60:bd:40:27:76:66:be:
                    04:e2:d4:52:21:b4:05:85:c4:b5:9c:74:c8:54:13:
                    99:06:36:cf:c7:3a:b3:2a:5d:8a:bf:fb:b8:61:a3:
                    b1:3e:b4:e3:4a:5f:34:4f:06:2e:fe:45:0e:2d:88:
                    60:ec:b3:8d:20:78:76:c1:c6:e1:c0:89:a1:f9:fa:
                    75:2d:51:4d:8b:c1:d0:d8:5c:41:39:65:71:28:a1:
                    19:e1:5f:a9:01:fa:01:8d:8a:d6:de:4d:8c:fd:31:
                    7f:09:48:aa:24:06:cd:e0:e0:02:a4:0b:00:a0:0b:
                    00:d1:72:0e:ee:1a:2c:2e:04:9c:37:59:ea:89:a6:
                    2d:7c:db:85:0f:c6:1c:6d:e9:47:6e:25:4b:c2:29:
                    f3:85:3c:87:78:03:c9:c5:02:0b:e0:09:0f:81:6a:
                    67:49:21:f7:d1:60:8c:03:a3:1a:7d:21:ab:23:55:
                    90:64:01:83:0c:1d:f6:18:10:27:01:b3:a7:e7:43:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0D:7F:E4:18:93:68:79:61:50:CB:46:9A:05:5B:53:F4:D4:E0:34
            X509v3 Authority Key Identifier:
                keyid:A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:86:58:b0:b4:ba:50:89:87:0b:4a:f6:1c:83:09:fb:77:
         75:32:ae:bc:83:6c:57:e4:48:21:7f:76:44:f6:76:28:28:02:
         ea:c6:c0:eb:53:e4:93:88:b7:3b:06:75:19:ca:b2:eb:02:e0:
         ec:17:e0:7a:19:c8:10:12:01:d5:13:be:24:04:59:31:ed:cd:
         9f:f1:90:77:55:9e:cb:f5:c5:18:f7:b9:99:7d:04:94:0d:97:
         c0:b1:de:c3:ba:73:ef:78:47:80:f8:eb:e5:cb:5a:fe:df:d2:
         cd:ff:69:09:dc:97:f7:66:81:f0:1c:63:e1:92:71:9a:2c:8e:
         0d:19:89:2c:60:28:e9:b6:53:ae:ac:f9:53:ba:8b:80:04:0c:
         b4:6b:92:2e:94:62:a8:ec:72:36:70:a5:5b:87:84:21:f6:9d:
         ed:ea:c3:a2:62:53:4b:84:5e:70:ed:b7:07:b8:0d:31:00:78:
         c0:0a:d4:d6:06:47:73:f2:24:4a:1b:5d:ef:8f:f2:ed:ab:8c:
         65:7a:16:c2:1e:b7:9b:8c:36:01:dd:87:67:41:90:a4:fa:02:
         29:fc:36:a0:cb:b8:f4:d8:a0:d5:38:c7:00:4c:7b:fc:e2:a9:
         09:1d:62:9f:77:8f:1a:76:5a:76:20:55:ee:3b:f5:f1:7d:fe:
         80:69:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:08 2024 by rpki-client on console-fra.rpki-client.org