Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3232372e31322e302f32322d3234203d3e203238363639.roa
File:                     3136382e3232372e31322e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier:          kvzIps2K10zWhzvSi36Toseb5QiIN0z9SU6LIT96TJU=
Subject key identifier:   F2:AF:5F:D0:63:D1:49:46:DD:8B:5E:19:F8:1C:4A:1C:F4:96:2B:64
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       1D5A549207AB484BF2BBA15B0DB8CEE3B637571A
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3232372e31322e302f32322d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:03:42 +0000
ROA not before:           Mon 25 Nov 2024 16:58:42 +0000
ROA not after:            Mon 24 Nov 2025 17:03:42 +0000
asID:                     28669
IP address blocks:        168.227.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5a:54:92:07:ab:48:4b:f2:bb:a1:5b:0d:b8:ce:e3:b6:37:57:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:42 2024 GMT
            Not After : Nov 24 17:03:42 2025 GMT
        Subject: CN=F2AF5FD063D14946DD8B5E19F81C4A1CF4962B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:7d:99:bd:3a:7e:d6:8d:a9:99:4d:cc:5c:
                    fe:ea:2c:67:b4:a7:41:d1:12:60:c4:4e:61:3a:1e:
                    04:42:97:a5:0c:06:26:d7:f7:9e:09:81:d7:a6:9d:
                    fc:6c:fa:9f:fb:8a:7a:a0:ef:28:c5:e4:43:3c:43:
                    64:97:71:75:16:63:90:ba:92:f2:88:bc:44:2c:fd:
                    04:1c:33:b5:20:d3:47:2b:7c:ed:22:b0:9e:00:2a:
                    2d:cd:53:4b:a0:03:03:66:0b:b4:b1:eb:e6:70:a4:
                    2e:84:25:2c:3b:e5:85:75:57:d2:f8:05:36:7f:63:
                    fc:ec:df:b3:dd:37:92:93:5b:8b:44:16:b3:7f:fc:
                    aa:aa:f7:f1:b3:e1:e8:a9:62:35:33:ed:20:f1:b7:
                    59:47:0d:23:4c:03:95:17:bf:9e:7b:b6:20:af:20:
                    5d:20:b8:d9:1b:b6:3f:48:c3:ae:d2:f3:7b:b1:43:
                    b2:c7:90:99:01:c8:76:46:0c:39:61:14:70:9c:80:
                    18:fb:dc:cb:36:b8:83:fa:c7:cc:06:9e:2a:0e:f0:
                    1c:6a:ca:59:0b:7a:e1:65:93:90:2f:db:7a:2e:0e:
                    da:da:ba:df:80:6c:71:55:42:3e:70:cd:89:1b:f2:
                    df:31:c8:ac:e5:b5:c5:15:e7:57:b2:d7:17:78:70:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AF:5F:D0:63:D1:49:46:DD:8B:5E:19:F8:1C:4A:1C:F4:96:2B:64
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3232372e31322e302f32322d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:0a:80:1f:46:ff:58:0c:d5:6f:dd:4a:a4:6f:f0:22:11:
         fc:11:33:2d:ca:cb:74:dd:47:12:38:c5:25:ba:09:26:4a:35:
         65:f7:ae:83:de:99:f9:de:60:69:74:d3:e5:92:97:7e:d6:9d:
         65:e1:4f:80:cd:18:59:45:08:e5:cf:63:21:c1:b6:66:ca:8a:
         7a:9f:58:7e:ee:1d:12:e9:27:ef:7a:8d:6e:9c:2b:8c:05:46:
         9f:ec:9e:a8:49:d4:d7:99:e4:de:c8:d7:7b:c3:f5:c8:1c:fb:
         a5:61:a4:0c:1d:dd:36:48:47:54:c4:76:36:30:a8:f6:ff:f8:
         2a:f8:2b:54:31:de:a5:9b:dc:62:f0:0c:eb:75:fb:84:2c:8b:
         d1:5d:25:ac:0d:77:02:41:b9:28:e8:f0:22:78:ad:33:09:79:
         6f:50:d3:bb:53:cd:54:c2:7a:5b:1b:2b:71:c6:13:bf:82:ec:
         20:bb:7a:d5:f6:ca:da:a3:bd:05:a2:fb:d2:ef:7e:f1:b9:5a:
         f7:fe:d6:47:51:6b:b3:49:36:fa:14:76:58:ff:91:30:a7:3f:
         39:4f:cc:83:26:28:51:4a:0a:8e:30:f9:7b:e7:ca:51:0e:14:
         d2:d2:76:09:28:17:fb:3a:04:e1:a8:4c:81:13:20:74:80:28:
         f9:b4:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org