Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
File:                     3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          VUUD8qRi37Uruv4dTSR8ozN63tYGNocKS3vUGrTcCUg=
Subject key identifier:   97:D2:2A:10:01:49:D8:84:A2:6A:58:02:4C:1A:71:18:02:38:E9:48
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       15072FDFBEFE0A4EF4C73CB8F077FCDDD4CB0051
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 04 Apr 2024 06:53:54 +0000
ROA not before:           Thu 04 Apr 2024 06:48:54 +0000
ROA not after:            Thu 03 Apr 2025 06:53:54 +0000
asID:                     262645
IP address blocks:        168.194.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:07:2f:df:be:fe:0a:4e:f4:c7:3c:b8:f0:77:fc:dd:d4:cb:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Apr  4 06:48:54 2024 GMT
            Not After : Apr  3 06:53:54 2025 GMT
        Subject: CN=97D22A100149D884A26A58024C1A71180238E948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:28:51:1b:a3:c6:4a:f6:93:bd:c7:47:a4:
                    11:34:43:95:63:96:f0:eb:7a:fd:50:e2:0e:12:56:
                    1b:d4:c1:86:ac:36:ac:6c:90:52:5f:47:d6:44:00:
                    33:bd:8b:f4:f2:14:7c:95:c2:d0:27:6a:fc:08:0e:
                    9b:5f:98:52:38:55:09:df:e9:f3:e6:c4:f6:03:83:
                    ff:6b:96:f1:fd:73:af:aa:af:3b:d8:5f:79:e1:ab:
                    fd:3b:55:8a:44:a7:78:3d:46:61:c2:e9:69:50:68:
                    d9:56:a7:c7:90:8a:79:23:29:1c:2a:2d:4f:a8:4c:
                    ce:83:14:59:88:0c:83:d1:4f:a4:6e:3a:76:c1:03:
                    a4:7e:68:a5:1b:af:0c:44:fc:54:6e:a8:2a:e6:36:
                    07:36:30:02:c6:29:81:af:05:88:98:4c:dc:51:e8:
                    b1:b9:49:38:fc:73:b1:29:b1:3b:dc:d9:b2:e0:dc:
                    8e:6d:1a:59:4d:22:03:b5:79:fa:4b:3a:73:16:18:
                    83:64:02:73:42:5e:aa:c1:f2:6a:eb:21:75:b6:79:
                    4d:05:87:a1:34:89:19:f0:ff:a5:df:e0:d6:1f:05:
                    c8:db:94:cf:f4:51:d4:f0:11:a8:5c:cf:99:79:f3:
                    f4:0b:69:3d:98:99:e8:45:91:d9:ef:e0:c0:05:53:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D2:2A:10:01:49:D8:84:A2:6A:58:02:4C:1A:71:18:02:38:E9:48
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:19:35:c1:c9:63:f2:c0:8d:cc:e1:f7:1c:3f:10:37:18:5a:
         60:c6:8f:42:d7:e8:39:dd:7e:58:d7:8b:9b:34:aa:79:65:47:
         0d:83:24:dc:82:30:20:ab:4b:a5:49:72:76:4f:bc:4c:67:a2:
         88:4d:c4:02:45:e9:ad:e5:a2:8b:59:6a:98:2f:28:09:c3:9e:
         0a:3b:8f:ec:49:db:e7:0d:e8:10:33:9b:c3:6a:c4:38:36:f2:
         20:a8:a0:47:3a:66:ff:18:dd:8f:7e:2d:1c:10:00:04:0a:79:
         bb:f1:4c:f8:d3:a8:77:86:42:60:6b:8f:7c:aa:d5:54:41:e7:
         7e:d9:ec:6e:46:0d:26:a4:7d:6b:99:21:fd:c4:2a:16:d7:41:
         b1:b7:3d:1e:f4:1b:a3:50:7c:c1:23:7b:59:ba:4a:4c:06:00:
         95:08:dc:b6:f3:62:6f:91:8b:0f:26:7f:58:48:1d:08:f8:f8:
         49:7b:04:2a:f6:48:3f:8e:bb:47:fd:b4:20:65:4b:2c:a4:2a:
         c1:c0:e8:fc:81:ef:12:49:b9:a4:d8:04:4f:72:5f:6f:89:bf:
         ce:ec:9f:92:90:fc:65:ba:8d:c3:10:3b:59:df:15:e2:db:b9:
         bd:ec:23:32:58:fc:61:c4:de:de:49:ef:fd:98:d4:75:6b:35:
         69:2f:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org