Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa
File:                     3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (raw, json)
Hash identifier:          I1zuOdE1w0qa2nYJjawhyOE4VsKF3QHgEIEzHiWGGPA=
Subject key identifier:   C2:C6:62:01:80:29:76:B8:46:BB:7E:37:92:3E:E1:C7:87:29:73:83
Certificate issuer:       /CN=7953D59AEF2A6773CA8535EBECC18720D7980989
Certificate serial:       1669C81C2EB4C11B4AB08C374319CF7E6F81F64E
Authority key identifier: 79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa
Signing time:             Thu 04 Apr 2024 19:02:01 +0000
ROA not before:           Thu 04 Apr 2024 18:57:01 +0000
ROA not after:            Thu 03 Apr 2025 19:02:01 +0000
asID:                     266198
IP address blocks:        160.20.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl
                          rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:c8:1c:2e:b4:c1:1b:4a:b0:8c:37:43:19:cf:7e:6f:81:f6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7953D59AEF2A6773CA8535EBECC18720D7980989
        Validity
            Not Before: Apr  4 18:57:01 2024 GMT
            Not After : Apr  3 19:02:01 2025 GMT
        Subject: CN=C2C66201802976B846BB7E37923EE1C787297383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:50:68:97:9f:8d:3d:ba:1b:87:8d:00:cc:
                    04:c0:3a:31:fb:40:a7:a9:1c:16:ec:d6:4f:97:10:
                    2d:ac:b8:c1:cb:2d:13:ed:3f:87:b5:f4:e2:c4:cb:
                    79:b4:ea:8e:00:12:f1:5c:ae:8a:e8:c2:1c:02:42:
                    4a:86:49:9b:ac:0b:a1:48:2d:f7:24:12:cb:55:97:
                    ae:d1:08:9a:75:87:0d:35:61:35:d7:56:79:a4:85:
                    04:a2:cd:43:f7:69:4b:47:a3:45:0e:55:d4:6e:5d:
                    43:cf:5d:be:1a:f6:90:8a:8a:5d:6d:ae:53:e6:84:
                    c4:ba:21:63:47:ca:c7:a9:ac:e0:20:e8:09:3e:6c:
                    4c:9d:93:1a:59:90:5a:ea:a6:75:cb:6a:3d:32:22:
                    72:28:5b:1d:bb:7a:87:6f:ef:5f:04:aa:49:89:c6:
                    ba:9e:3d:11:0d:8a:33:0e:f6:0f:b1:e5:a6:bd:b9:
                    58:b0:96:b0:a3:53:92:15:93:b0:cc:80:4b:58:78:
                    1e:44:97:27:8f:7c:ec:2c:7d:2f:09:2c:51:a6:62:
                    3a:99:93:6c:2e:49:01:5a:77:46:b4:f6:9e:73:40:
                    f7:c6:51:bc:b6:aa:e9:75:9b:53:21:f8:36:b2:90:
                    e3:7f:dc:d3:b9:9c:17:8c:b2:6f:4d:a1:39:35:25:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:62:01:80:29:76:B8:46:BB:7E:37:92:3E:E1:C7:87:29:73:83
            X509v3 Authority Key Identifier:
                keyid:79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:b1:67:15:75:13:7d:06:37:fe:1a:0d:73:c6:2c:43:f9:
         f4:d3:5d:04:f1:cb:6d:6c:36:4c:bd:42:ad:52:13:48:b0:17:
         d6:c7:95:cc:f3:ff:d2:78:0c:d1:4b:92:ec:81:e9:f1:c7:e0:
         e8:dd:82:f5:20:2a:16:51:80:bf:9d:5e:d0:dc:56:a2:41:f9:
         24:ff:1e:85:f9:e9:42:fc:62:bc:42:e3:0f:d0:96:47:3b:6a:
         6a:bb:97:72:92:3e:6e:e0:92:d3:20:bf:90:70:ff:cd:7c:e6:
         49:92:9b:69:e4:f5:b2:ea:13:ef:6e:c6:b4:65:10:2d:26:ac:
         e3:1e:35:e6:54:c2:a3:2a:b9:d5:e0:90:cc:3c:d6:ed:e5:67:
         40:a7:78:ba:2e:ac:d6:8c:88:00:e3:7e:fc:e5:11:d8:0b:ab:
         c8:96:b0:a1:f1:58:50:0f:48:31:a6:3a:f3:7e:17:77:1f:74:
         77:11:3e:ac:4a:74:34:d7:c9:31:de:d3:bb:70:06:93:72:51:
         b1:61:50:7c:ea:35:07:09:f0:e8:e5:82:be:68:ec:d3:ea:b6:
         33:f1:f5:f0:0f:ae:cb:2d:e7:77:da:1f:f3:09:f6:28:8f:2a:
         63:7e:f7:11:88:3c:3c:52:77:09:c0:ec:8e:b3:f2:40:c1:e0:
         6e:45:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org