Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
File:                     3136382e3232372e37362e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          NrSau4fKO71aNDl+gsmdz1g03SOFSEm3EKXVHNLAjHg=
Subject key identifier:   B3:3C:98:FA:41:FD:BA:51:7F:F0:B1:BD:76:C2:83:53:9A:00:A0:22
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       7241EAD8808009B1BF0C748136AE479F5BF3BB3D
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
Signing time:             Mon 25 Nov 2024 17:03:58 +0000
ROA not before:           Mon 25 Nov 2024 16:58:58 +0000
ROA not after:            Mon 24 Nov 2025 17:03:58 +0000
asID:                     52940
IP address blocks:        168.227.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:41:ea:d8:80:80:09:b1:bf:0c:74:81:36:ae:47:9f:5b:f3:bb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:58 2024 GMT
            Not After : Nov 24 17:03:58 2025 GMT
        Subject: CN=B33C98FA41FDBA517FF0B1BD76C283539A00A022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:5b:bf:20:d7:42:c3:34:19:37:c4:47:8c:
                    00:bd:43:1c:c3:a4:d3:a0:6d:f6:f1:79:70:69:15:
                    2e:cf:18:c5:20:d7:f1:91:04:ef:3e:bb:81:56:d7:
                    76:18:da:a3:99:8f:f0:13:34:d9:be:b5:95:1e:d4:
                    3b:c2:36:ca:81:ad:14:21:ef:77:30:3c:a7:a7:56:
                    fb:b2:e8:95:90:06:97:78:dd:d5:88:17:5b:a1:64:
                    e8:77:ff:f3:0b:cb:7f:b3:e0:65:c5:f7:8d:a3:70:
                    c0:bd:39:cf:32:c9:12:56:d1:e1:47:23:e8:81:45:
                    75:94:c5:98:49:95:83:b4:32:d7:57:5c:2e:74:b8:
                    52:de:7f:66:8f:23:ae:52:90:dd:cb:a1:73:aa:88:
                    3f:7d:49:14:6b:c8:48:fc:8c:34:57:77:cd:33:b2:
                    61:e8:c9:f6:4f:fb:f4:34:93:d1:73:e8:af:3c:6a:
                    e2:99:45:1b:3a:a3:66:b4:7e:88:ec:41:dd:49:70:
                    e4:1e:92:f5:f0:b8:7b:41:16:13:45:61:2a:a4:7c:
                    a0:51:3d:54:34:a8:bd:33:ad:6d:fe:03:0f:7b:5a:
                    2a:38:41:7f:d2:a2:7c:c6:54:8a:b6:4f:25:4e:81:
                    1d:bd:9b:02:0d:c0:ec:bc:e5:b5:16:e6:08:09:51:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:98:FA:41:FD:BA:51:7F:F0:B1:BD:76:C2:83:53:9A:00:A0:22
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:79:ef:43:82:59:47:1d:ef:cb:34:e0:ab:70:49:36:b9:
         be:45:12:e1:31:bc:55:2f:56:9a:26:cd:9d:72:bd:b5:16:ee:
         0b:43:85:dc:1f:cc:53:cf:f8:86:2c:5a:e0:73:0e:2d:64:94:
         82:16:aa:7d:f5:06:d2:1d:f5:da:8b:20:43:2f:86:26:6b:e3:
         66:a8:07:3f:fd:de:4f:be:b2:15:fe:c1:91:38:7f:47:36:16:
         df:74:fa:44:f9:e2:03:61:a0:59:81:aa:08:0a:56:87:00:bb:
         e1:e6:7b:bf:20:09:a6:58:03:74:ff:dd:d4:d9:95:45:14:19:
         83:5c:ab:62:4d:8b:15:97:4c:cf:59:b9:01:5e:91:6d:20:81:
         c6:ef:c5:94:58:6f:51:35:62:1f:8d:3b:28:69:d3:0f:2c:9c:
         cf:82:3e:03:50:95:5c:0f:f0:d8:58:cb:a5:fb:0f:6d:80:8a:
         7b:80:74:36:dc:df:f7:9d:32:aa:13:ef:8d:e8:02:27:7f:04:
         55:5a:bd:b2:f0:65:5b:1e:05:cc:81:7b:73:fc:19:a0:cc:60:
         d4:1b:2d:5c:83:19:51:cf:e6:e9:2c:44:9b:20:75:6f:2f:b0:
         fa:9f:38:0c:f4:ac:e1:e2:5a:3d:ad:f7:c3:78:d6:a7:94:d0:
         7c:bd:a3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:35 2024 by rpki-client on console-fra.rpki-client.org