Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa
File:                     3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa (raw, json)
Hash identifier:          N3wVFFZqHLJSCesKQNj04G4dlcfPYd+5L0+96De9cTU=
Subject key identifier:   C6:27:DE:8E:5A:B9:7A:BD:21:33:59:97:35:8C:AE:56:57:16:A5:94
Certificate issuer:       /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial:       65C0C6D7117B97C4170DDC2AE5353F9B83C5CB98
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa
Signing time:             Wed 03 Apr 2024 18:32:12 +0000
ROA not before:           Wed 03 Apr 2024 18:27:12 +0000
ROA not after:            Wed 02 Apr 2025 18:32:12 +0000
asID:                     263918
IP address blocks:        168.181.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
                          rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c0:c6:d7:11:7b:97:c4:17:0d:dc:2a:e5:35:3f:9b:83:c5:cb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
        Validity
            Not Before: Apr  3 18:27:12 2024 GMT
            Not After : Apr  2 18:32:12 2025 GMT
        Subject: CN=3082010A0282010100C89FF91F395824C1B724AEE84B04102EAEC98CC25F52B154FBF461738F04D2D70A934F79CFE624E157183DDE600ACADB5524AA5E81D3F3FA3CDBE38C4C0B820871B04CE4EC9537DA00028C997C1516F7BFD95669F5EF8EA748F1EF76E33EE6CFD9B979B4BCD0B93006BD2FF87611D6613D80ED8E11C1CE26DF37598E4FB803C2511947BA629F096D2CA629E779E389AC4566776EF51D3F19DDD6990AE2FA455E21DFCE1BC9CCC3D91A6778DA84BD8FE4AC864E3063AB5DF2CB96A4DE98BA49FC2D0A4C9E76D045B5202952B13E6A2F4FCE02B4C8FCAEBEC8380CEBBB0FCF8EDA6EE6C5192290DA6FEA254F97D9AF535D3C6EAB4A7720FBECDEC37A7A3D76DE150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:f9:1f:39:58:24:c1:b7:24:ae:e8:4b:04:
                    10:2e:ae:c9:8c:c2:5f:52:b1:54:fb:f4:61:73:8f:
                    04:d2:d7:0a:93:4f:79:cf:e6:24:e1:57:18:3d:de:
                    60:0a:ca:db:55:24:aa:5e:81:d3:f3:fa:3c:db:e3:
                    8c:4c:0b:82:08:71:b0:4c:e4:ec:95:37:da:00:02:
                    8c:99:7c:15:16:f7:bf:d9:56:69:f5:ef:8e:a7:48:
                    f1:ef:76:e3:3e:e6:cf:d9:b9:79:b4:bc:d0:b9:30:
                    06:bd:2f:f8:76:11:d6:61:3d:80:ed:8e:11:c1:ce:
                    26:df:37:59:8e:4f:b8:03:c2:51:19:47:ba:62:9f:
                    09:6d:2c:a6:29:e7:79:e3:89:ac:45:66:77:6e:f5:
                    1d:3f:19:dd:d6:99:0a:e2:fa:45:5e:21:df:ce:1b:
                    c9:cc:c3:d9:1a:67:78:da:84:bd:8f:e4:ac:86:4e:
                    30:63:ab:5d:f2:cb:96:a4:de:98:ba:49:fc:2d:0a:
                    4c:9e:76:d0:45:b5:20:29:52:b1:3e:6a:2f:4f:ce:
                    02:b4:c8:fc:ae:be:c8:38:0c:eb:bb:0f:cf:8e:da:
                    6e:e6:c5:19:22:90:da:6f:ea:25:4f:97:d9:af:53:
                    5d:3c:6e:ab:4a:77:20:fb:ec:de:c3:7a:7a:3d:76:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:DE:8E:5A:B9:7A:BD:21:33:59:97:35:8C:AE:56:57:16:A5:94
            X509v3 Authority Key Identifier:
                keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:fc:d0:2d:de:50:bd:bc:9f:bb:42:5b:82:c0:4f:36:17:b9:
         0c:ba:6e:4a:fc:63:12:90:e5:48:74:2d:3b:a8:72:8d:4c:bd:
         39:fd:48:f7:8a:4a:5e:e1:cb:04:cc:1f:f2:97:2d:49:d9:36:
         70:9f:30:c3:b8:12:be:7f:d0:82:b0:c3:1c:e2:27:e4:b1:82:
         99:41:7a:52:0a:6b:2f:e7:eb:94:89:53:b6:2d:52:22:b9:e0:
         cb:40:82:cb:bf:9c:2e:48:e0:ac:44:4a:57:22:05:42:6a:c9:
         59:ef:a8:e3:7e:f8:ec:1e:8e:ac:a8:be:75:17:bd:a5:53:11:
         7d:28:b8:54:94:7f:85:2a:07:04:fd:57:29:78:77:ce:58:5a:
         ab:00:dc:27:46:53:58:51:25:35:4e:de:ae:ea:95:0c:42:57:
         d3:df:59:07:6f:e8:94:44:aa:89:78:8e:b6:57:f1:44:83:f4:
         f7:3b:f3:bf:bc:f5:36:c3:0b:fb:6c:56:bc:a5:7f:c5:26:15:
         c9:0c:65:b4:a4:19:e5:e0:3f:43:c0:d6:29:66:92:ef:e6:9d:
         8b:ef:ff:70:a4:a7:0f:d8:22:38:7b:7a:fa:b2:29:2b:a4:c7:
         02:99:28:2b:ab:77:7d:a6:5a:74:8a:63:93:be:88:97:91:8f:
         59:37:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org