Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa
File:                     3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          TOLGPVl+oHt0XgwBjcPxiqr/y/b0Umy45prMoAz2hR4=
Subject key identifier:   05:C0:47:EA:79:EB:7D:26:A2:67:D0:F8:0D:D7:49:6D:46:FA:62:6E
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       347477314B714EAE05C80A016F31863E8E128F87
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:46 +0000
ROA not before:           Thu 04 Apr 2024 04:32:46 +0000
ROA not after:            Thu 03 Apr 2025 04:37:46 +0000
asID:                     28210
IP address blocks:        168.228.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Jul 2024 11:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:74:77:31:4b:71:4e:ae:05:c8:0a:01:6f:31:86:3e:8e:12:8f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:46 2024 GMT
            Not After : Apr  3 04:37:46 2025 GMT
        Subject: CN=05C047EA79EB7D26A267D0F80DD7496D46FA626E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:0b:08:89:5e:45:c9:d0:85:a7:0c:87:8d:
                    82:74:9a:c2:12:31:de:d5:cb:df:2f:b9:d3:b7:47:
                    a2:dd:7b:58:da:90:92:b8:74:ae:a8:ea:9c:be:0f:
                    e6:ae:c1:31:ca:1a:74:cd:87:3c:b8:05:6e:ea:f5:
                    23:50:7f:94:8f:22:42:ab:d5:95:43:d7:25:5d:cf:
                    f2:75:f7:c7:90:ce:56:c8:f1:80:c8:0b:26:06:ce:
                    1c:18:49:ba:3c:b4:11:43:b4:87:ea:a2:af:2a:24:
                    68:27:54:24:04:95:ea:22:f7:83:c5:bd:14:d2:20:
                    a2:26:44:f5:52:1d:1a:a5:f1:98:19:1c:b3:36:ce:
                    9d:e4:5a:47:93:31:4b:a2:57:d9:cf:4f:1c:77:9f:
                    65:f0:51:0b:7f:20:cd:47:18:d3:58:76:bc:a6:30:
                    aa:70:93:9a:19:fe:38:f8:2d:1d:7a:72:d1:4a:37:
                    25:6f:5d:3a:eb:c5:50:55:0a:83:61:e3:20:da:0e:
                    26:d3:4e:2e:9e:74:5f:a5:a3:52:46:46:bf:d7:c5:
                    55:09:5a:a6:07:44:ff:d6:57:c5:f5:b3:d5:5f:24:
                    57:b9:50:b2:29:dd:c7:de:c2:8d:d8:68:37:70:e8:
                    9b:35:b2:a5:8b:f1:f7:ec:a3:8b:a0:ff:d9:f6:47:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:47:EA:79:EB:7D:26:A2:67:D0:F8:0D:D7:49:6D:46:FA:62:6E
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:36:e6:78:6c:7a:c3:96:7b:47:68:c1:eb:94:e2:fe:f1:2a:
         3f:20:d8:15:aa:bd:5d:27:d6:3d:e8:17:72:7c:76:27:6a:d6:
         bf:50:7a:3a:23:e9:51:76:c8:ef:02:04:12:72:39:a0:32:0c:
         d4:86:2b:0c:88:2f:a4:38:06:0e:3e:c9:a1:4f:f8:df:23:19:
         30:e3:22:8e:15:08:c7:d1:d6:f6:38:1a:51:f3:39:f9:0d:b7:
         06:e6:d6:e0:09:97:c7:d6:00:8a:0f:fa:c7:41:76:e3:37:b3:
         92:e2:04:b2:22:83:ce:65:3e:85:16:d4:6a:61:e4:47:f1:1e:
         54:ec:12:84:08:35:54:d9:00:0d:1a:5e:33:b0:47:97:c4:f2:
         11:be:36:1b:45:f8:29:8a:ab:0c:e6:35:cc:8a:12:60:da:59:
         5a:6a:a8:ca:d6:fc:6a:fe:1b:4c:eb:bb:c0:8f:1a:93:f3:7a:
         37:ec:62:61:68:d0:ef:ae:f0:73:76:51:cf:97:97:8d:df:db:
         be:07:02:c7:18:11:9f:1c:14:61:6e:25:0f:29:f1:38:6c:ec:
         3d:d9:88:0d:28:ff:af:b8:cf:2e:46:2e:21:3c:db:fb:f8:7b:
         1c:82:f0:1b:06:19:a7:35:62:9c:d7:90:f4:14:12:8d:bd:79:
         5b:14:c3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 10:48:24 2024 by rpki-client on console-ams.rpki-client.org