Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
File:                     3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (raw, json)
Hash identifier:          9Z6QhBrAwSh8fWhzdOFZoMoTMEjrj84oWnaIjsmM0mg=
Subject key identifier:   F7:D3:1F:7B:59:94:2B:42:AF:95:76:FC:A5:DC:2A:7D:C4:B1:6E:16
Certificate issuer:       /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial:       1FEBFA423C4C89C558D0B6FAEB78524752F2083B
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
Signing time:             Thu 04 Apr 2024 11:35:41 +0000
ROA not before:           Thu 04 Apr 2024 11:30:41 +0000
ROA not after:            Thu 03 Apr 2025 11:35:41 +0000
asID:                     263582
IP address blocks:        168.196.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
                          rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:eb:fa:42:3c:4c:89:c5:58:d0:b6:fa:eb:78:52:47:52:f2:08:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
        Validity
            Not Before: Apr  4 11:30:41 2024 GMT
            Not After : Apr  3 11:35:41 2025 GMT
        Subject: CN=F7D31F7B59942B42AF9576FCA5DC2A7DC4B16E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:54:fe:7d:45:75:db:fb:e5:9e:76:fa:31:
                    e1:a3:d1:e3:e8:ca:51:ae:28:47:34:ce:a3:80:ca:
                    d4:e9:23:a9:41:aa:0a:c6:4b:42:96:6f:03:08:ea:
                    7b:09:09:55:ab:9c:e2:f6:88:0d:fd:a9:18:a8:95:
                    f2:4e:a4:a9:9a:b5:20:a0:19:4b:d7:c9:e4:d2:da:
                    8d:f5:ff:3e:96:d2:de:6e:f6:e7:65:c4:ec:42:91:
                    c1:97:90:0b:8c:7c:db:83:bb:9c:26:29:3d:72:74:
                    11:ea:4b:41:a3:b1:d4:3c:68:e7:03:a2:d2:1c:69:
                    01:86:30:7c:84:3c:4d:b3:0d:36:2f:43:44:89:e1:
                    2a:42:b1:66:c4:7b:f5:a3:23:d2:79:f8:35:09:ed:
                    c3:de:47:4a:a8:46:cc:6a:e1:ad:9a:20:58:bf:6c:
                    59:56:e2:67:58:d2:88:10:50:b5:8d:13:3f:e9:d7:
                    3b:4d:f0:00:c3:57:60:c5:cc:25:75:0c:17:39:cf:
                    82:a8:4b:53:b8:74:bd:85:3e:e1:1c:d9:64:4d:0a:
                    23:0e:ac:d3:71:fd:56:82:4e:28:4f:97:d6:0a:84:
                    72:4f:89:ad:0a:64:91:64:27:dd:89:d6:c7:9f:36:
                    8a:9a:f0:c6:b2:cb:99:24:b0:17:c6:11:9d:0c:17:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:1F:7B:59:94:2B:42:AF:95:76:FC:A5:DC:2A:7D:C4:B1:6E:16
            X509v3 Authority Key Identifier:
                keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:51:dd:ac:ce:aa:8f:29:16:f6:7d:91:3f:a9:20:f3:8d:
         49:fc:53:59:c9:8e:28:20:dc:ce:37:55:61:01:34:36:4d:1a:
         9a:ee:e3:f2:b5:0b:7f:d0:bb:44:71:0f:ca:7f:9f:06:55:dd:
         94:17:33:7c:3d:54:23:ae:26:d0:6e:ac:4a:6c:9e:f8:f9:3c:
         54:e7:61:21:7e:29:a1:5e:ea:fa:9f:84:bc:76:37:4f:f8:46:
         ce:ef:b9:aa:10:76:09:a8:86:52:e6:4a:9c:fe:5a:e6:c5:05:
         da:a5:2f:31:c1:23:00:3e:32:e1:4d:44:34:26:b9:a6:c1:47:
         f2:80:3f:94:7c:6f:d8:bd:f8:0a:56:47:00:eb:33:e4:10:fe:
         0e:8b:c2:13:4c:84:06:b9:49:40:eb:0c:ea:3c:3d:83:28:a5:
         bc:51:c2:f0:1f:9a:c3:14:7d:60:dd:1d:8a:23:1d:06:3a:22:
         9d:26:ce:84:e1:3e:20:01:3c:50:ec:87:87:d8:7f:7f:3d:e9:
         28:05:82:77:8d:83:a1:c5:84:71:8d:f9:f6:26:3f:06:24:1c:
         74:5b:27:87:70:1d:64:ba:3d:6c:ab:07:8c:18:ff:e1:29:4d:
         83:d2:35:b8:a2:d3:7e:fb:3d:c4:59:03:ec:d1:8e:96:64:e8:
         dd:35:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org