Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa
File:                     3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (raw, json)
Hash identifier:          gkMRtdPyFCsOEajnNYfFjx6MyRBrmK6RRWwlefPOQa0=
Subject key identifier:   FF:DA:7C:62:52:5E:95:EA:2E:B7:53:48:6D:E0:18:71:2D:32:C9:F6
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       33E595E176509A7316710A0E1721356AF591AE52
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa
Signing time:             Thu 04 Apr 2024 08:48:12 +0000
ROA not before:           Thu 04 Apr 2024 08:43:12 +0000
ROA not after:            Thu 03 Apr 2025 08:48:12 +0000
asID:                     61937
IP address blocks:        168.195.210.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e5:95:e1:76:50:9a:73:16:71:0a:0e:17:21:35:6a:f5:91:ae:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Apr  4 08:43:12 2024 GMT
            Not After : Apr  3 08:48:12 2025 GMT
        Subject: CN=FFDA7C62525E95EA2EB753486DE018712D32C9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:d0:a3:87:cd:34:f4:38:a1:7f:0d:44:28:
                    bb:b9:27:03:48:3d:e1:58:ee:fb:fc:73:ce:8f:3e:
                    bd:18:c1:e0:43:68:43:93:8a:16:cb:3d:65:6d:65:
                    24:b0:59:16:22:8c:ff:7e:c1:49:ef:11:00:7d:76:
                    a2:3f:13:05:81:65:d6:10:8f:d3:89:94:a2:ff:db:
                    80:2d:74:2f:1c:76:24:26:09:f8:ca:37:ab:25:5a:
                    67:28:29:b8:cb:e1:90:dc:48:2c:c8:8e:31:09:90:
                    ce:a3:20:41:11:98:db:d8:ef:d4:4c:0f:bd:92:7e:
                    4c:a4:32:cf:21:89:d0:f6:27:2b:3a:d9:86:36:e6:
                    10:e7:fe:02:39:be:0e:b7:6a:f2:a2:35:f5:fc:b8:
                    b0:db:e7:bb:6d:75:fa:cd:c4:49:9e:a6:a8:dc:22:
                    c9:d6:46:2b:4f:26:f9:eb:c4:50:9a:99:d3:b8:5b:
                    ac:6c:7e:9f:af:48:7c:bc:8f:24:0f:3b:8a:c8:9d:
                    f6:bd:b9:63:80:58:4c:92:8f:1d:97:c9:30:af:58:
                    bf:d3:b7:bc:84:67:68:96:1d:cb:79:6a:a2:48:61:
                    90:5e:6a:90:51:06:84:de:ac:96:97:ae:80:e5:dc:
                    54:42:22:31:a0:b8:c2:29:ca:79:af:de:8e:74:d0:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DA:7C:62:52:5E:95:EA:2E:B7:53:48:6D:E0:18:71:2D:32:C9:F6
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:5c:48:22:e4:f2:75:9b:5f:b0:9a:06:0a:5f:c1:7b:be:
         a8:bc:dd:99:63:13:f8:34:d1:a8:99:64:7b:4b:8f:1c:c3:41:
         2f:75:88:d4:c7:01:99:6b:fd:ac:1b:af:e5:00:e8:60:9b:a0:
         a1:8e:51:69:16:9a:f4:2b:78:51:e4:35:0f:3c:05:a1:7e:43:
         45:72:90:bf:23:0e:1b:66:e7:24:a9:af:51:81:e7:ca:16:e7:
         48:5d:03:f0:f4:a3:95:88:ca:b2:b7:ee:e3:79:66:fc:ad:89:
         45:d6:3e:d8:d6:5c:2b:e8:c5:84:da:14:04:4a:8f:ec:16:be:
         52:17:49:dd:79:f8:95:87:70:e3:99:c0:03:3f:9f:7b:f2:8d:
         03:bd:32:fd:33:a3:85:af:07:d6:be:30:2b:66:b1:00:c5:aa:
         60:42:d1:c6:e3:24:5f:ad:5c:f9:40:0d:dd:fc:cf:d0:87:09:
         f3:d3:3f:1b:4c:70:5f:4c:79:a1:f9:bf:73:e1:fa:ef:14:d8:
         78:19:b5:01:37:8f:96:c9:45:3e:6e:c0:f2:ad:f4:1e:e2:c9:
         cb:90:ea:47:1e:25:93:b4:d0:c7:b8:7f:0f:6d:02:8f:f1:58:
         dd:73:24:cc:89:ec:fd:f6:f5:d3:ae:e9:d7:a3:c0:4a:dc:1d:
         ce:c3:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org