Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
File:                     3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier:          FjC+o/LcKQcCie0tHtLeZof0dxEFBjhkELv7vuOwykU=
Subject key identifier:   E3:33:7D:5B:42:0D:7C:D1:3D:B1:41:BD:1B:14:3B:2C:24:C5:2D:B7
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       1B9F5D95197D2956CFB40A839E40790F662EC684
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:04:23 +0000
ROA not before:           Mon 25 Nov 2024 16:59:23 +0000
ROA not after:            Mon 24 Nov 2025 17:04:23 +0000
asID:                     28667
IP address blocks:        168.196.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:5d:95:19:7d:29:56:cf:b4:0a:83:9e:40:79:0f:66:2e:c6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:23 2024 GMT
            Not After : Nov 24 17:04:23 2025 GMT
        Subject: CN=E3337D5B420D7CD13DB141BD1B143B2C24C52DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:72:e0:af:36:78:10:77:47:39:b3:2e:e2:
                    b6:8d:2d:6f:a2:ea:c4:a5:4c:46:5b:77:b1:8a:24:
                    9f:8f:ea:aa:8d:56:13:7f:0f:61:9b:cd:1c:45:0d:
                    9e:df:50:ad:74:d0:b6:4d:66:68:4b:49:43:8a:e9:
                    51:18:63:93:f8:34:0f:aa:63:a3:60:e7:82:1d:f7:
                    7e:d3:4a:b9:d7:e0:2c:37:2f:8c:2e:5d:e1:f5:2f:
                    93:5e:91:87:dd:90:e8:b2:d1:14:91:3c:84:2d:f3:
                    b8:5e:de:00:c5:f9:a9:4f:48:e1:c7:f2:37:19:62:
                    90:35:8d:b6:d9:7b:b4:4a:f5:82:b2:09:21:b3:61:
                    8e:50:7f:08:17:fc:a1:7a:30:6d:2e:b3:5a:06:b2:
                    e1:6e:a0:35:49:4f:a4:73:64:70:fd:5d:08:56:ce:
                    ff:3b:8d:8d:e0:a0:21:ef:63:a7:f9:9a:65:1a:d8:
                    25:0d:2d:a7:87:a9:e9:31:a5:e4:ee:f0:8d:74:03:
                    35:12:00:32:64:2e:b1:b0:58:56:95:8c:0f:3b:96:
                    d2:a4:fa:70:a6:81:0e:a3:c9:c6:fa:6c:88:c5:8d:
                    c8:c8:4d:ac:9e:8a:d4:06:2a:3f:14:b9:a9:f6:89:
                    0f:48:78:1c:e2:b0:ec:1e:4b:2a:34:20:f0:73:34:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:33:7D:5B:42:0D:7C:D1:3D:B1:41:BD:1B:14:3B:2C:24:C5:2D:B7
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:54:7d:54:fa:3c:cb:6c:54:fd:47:7d:39:4c:9c:d5:0c:
         50:f8:7a:16:d7:b8:6c:54:3c:31:1e:39:2d:d4:8b:f8:41:fc:
         74:42:26:bd:fe:41:9f:fe:72:5a:89:1a:56:f8:d8:c6:ee:fb:
         b9:7d:aa:0a:81:7c:bf:b8:38:4b:ee:1b:00:d9:1f:ed:2c:b6:
         d0:d3:81:ff:2f:38:f3:78:7c:8e:23:d2:26:c2:c2:d1:59:97:
         b7:8c:d4:d4:24:51:71:9f:67:1e:89:3b:9d:f3:c2:5b:c8:6c:
         a2:c2:d2:ca:2b:71:a2:14:77:91:31:01:a8:0c:3c:0f:84:24:
         c9:e6:ed:50:c6:f7:a1:71:79:d0:f7:37:90:f3:49:34:6f:4e:
         57:f4:61:5f:d6:db:30:0e:2a:c8:5d:01:93:d7:42:06:2e:52:
         49:ee:7e:cc:7b:c2:56:b6:70:c9:44:f8:24:3d:26:e8:c2:55:
         c5:c4:08:34:08:75:36:f0:42:51:1d:db:5e:7f:7e:f7:3c:c6:
         3a:2d:cc:77:4e:a2:c3:56:ca:0f:d7:cb:aa:6d:92:00:e6:c7:
         9f:f2:06:7f:08:da:58:35:ae:b3:30:9c:09:f2:0d:b8:e6:3e:
         61:1b:4e:4d:41:d8:b1:17:6c:3c:8f:81:34:da:4e:2f:3d:82:
         c5:43:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org