Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
File:                     3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa (raw, json)
Hash identifier:          QVdsGYvQzxSHUQAsXLmGOpHsmAKwC8jXsaC9voLXpkQ=
Subject key identifier:   63:C0:FF:75:18:6D:A4:E3:D9:3C:70:2D:51:08:E7:CC:54:65:10:38
Certificate issuer:       /CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
Certificate serial:       1E96B3FD256820CBEBEC430AEB51D01D7CCA23F9
Authority key identifier: D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
Signing time:             Wed 03 Apr 2024 20:20:55 +0000
ROA not before:           Wed 03 Apr 2024 20:15:55 +0000
ROA not after:            Wed 02 Apr 2025 20:20:55 +0000
asID:                     263498
IP address blocks:        168.195.140.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl
                          rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:96:b3:fd:25:68:20:cb:eb:ec:43:0a:eb:51:d0:1d:7c:ca:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
        Validity
            Not Before: Apr  3 20:15:55 2024 GMT
            Not After : Apr  2 20:20:55 2025 GMT
        Subject: CN=63C0FF75186DA4E3D93C702D5108E7CC54651038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:3b:f5:90:ca:d3:04:37:69:2d:1f:e7:8e:
                    07:07:49:61:74:ee:fa:32:29:f7:70:36:88:e9:8e:
                    08:3c:2d:21:70:52:38:e6:fa:c8:f8:a5:db:b9:52:
                    d1:ee:24:fb:c5:d0:72:e2:35:c0:78:de:6f:ab:2c:
                    e6:91:4a:f4:d8:f6:c2:e0:d6:60:75:d4:f0:64:69:
                    b7:2c:40:23:a4:5a:16:75:ee:30:7f:f7:d3:28:04:
                    47:fd:36:6a:ba:ca:4e:a2:c7:09:bb:2d:bc:61:a5:
                    11:af:af:e7:68:85:ee:e8:c8:39:86:53:da:d3:de:
                    a4:e8:01:7b:e2:e0:44:e6:86:17:7f:04:d1:f4:0a:
                    a3:fe:67:0c:d1:e8:51:19:28:9d:c3:e0:3b:21:be:
                    af:81:f8:79:e5:40:12:e7:21:8b:11:55:ca:88:e3:
                    bc:9f:22:0e:b0:84:fd:f2:7d:4d:cb:b2:b0:86:77:
                    76:4f:26:68:25:1b:71:00:53:51:fd:51:28:73:5e:
                    b5:29:44:8d:f1:02:7b:a2:0c:81:12:c6:a4:40:5a:
                    7e:1e:21:49:e6:2d:aa:88:03:1b:df:1b:c3:16:40:
                    91:0b:a2:9a:a0:ea:8f:9b:0a:10:ec:59:c8:fe:f3:
                    a0:60:eb:39:b7:f1:1b:00:06:9a:80:f3:cf:76:4a:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:FF:75:18:6D:A4:E3:D9:3C:70:2D:51:08:E7:CC:54:65:10:38
            X509v3 Authority Key Identifier:
                keyid:D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:7b:b6:6b:46:f2:24:65:3a:fe:b9:39:b7:71:7b:10:c5:
         3c:f5:2b:1b:2e:8e:fe:25:2d:a7:2c:6a:de:78:e3:1e:74:1c:
         77:d9:37:ef:ed:67:ce:46:5c:0d:9c:d6:1a:41:35:6a:c5:15:
         77:8e:29:75:56:03:13:20:d0:dc:45:01:54:88:3b:e1:31:6f:
         26:e2:0d:fb:26:32:1b:26:5b:7e:6d:37:e8:5d:41:93:91:28:
         dd:ca:f2:63:54:35:a0:83:ca:0d:7b:4e:01:a7:12:11:d0:80:
         96:4a:07:26:0a:94:68:5a:8f:08:77:76:0b:bd:0e:76:3d:c2:
         ce:71:bd:72:32:d8:c7:cb:6d:7b:1b:98:56:ab:d0:7f:56:af:
         23:26:f1:c0:36:82:b2:12:75:61:98:59:ca:3d:9e:7d:32:1a:
         30:46:51:3e:18:b4:89:9b:4d:78:29:a5:49:a3:e8:47:53:f3:
         a2:7a:66:45:90:c9:b5:25:5a:7c:c1:6e:60:85:de:30:4a:7a:
         16:8d:d3:e3:95:bd:06:32:36:e1:13:3c:da:d4:7a:0d:e5:17:
         c4:08:56:66:e7:1a:3e:d3:b0:ca:a0:ba:e2:e3:2b:76:f8:f1:
         00:41:f1:a6:24:d4:d7:36:68:3e:19:b6:3e:a0:b3:99:65:49:
         fa:36:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:52 2024 by rpki-client on console-ams.rpki-client.org