Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
File:                     3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa (raw, json)
Hash identifier:          8n5/euVRweGIU2PSlfIBF6uXg0jgNeQ/6A7Wa1zs94s=
Subject key identifier:   62:92:29:AF:99:B3:55:9A:D3:DD:BF:D9:46:26:49:D9:6C:A2:1A:FF
Certificate issuer:       /CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
Certificate serial:       44352D34FF9B56EBE13F169548138CA5D5B5F115
Authority key identifier: 59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
Signing time:             Wed 03 Apr 2024 18:30:59 +0000
ROA not before:           Wed 03 Apr 2024 18:25:59 +0000
ROA not after:            Wed 02 Apr 2025 18:30:59 +0000
asID:                     265455
IP address blocks:        168.196.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.crl
                          rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:35:2d:34:ff:9b:56:eb:e1:3f:16:95:48:13:8c:a5:d5:b5:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
        Validity
            Not Before: Apr  3 18:25:59 2024 GMT
            Not After : Apr  2 18:30:59 2025 GMT
        Subject: CN=629229AF99B3559AD3DDBFD9462649D96CA21AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:13:06:6d:a8:dd:b9:7b:4c:b8:d5:4d:6a:
                    65:2d:fc:e0:d2:d6:4f:6b:22:cb:37:c0:8e:1c:4b:
                    3e:01:33:31:bd:68:2d:37:d6:1d:88:f0:3d:11:80:
                    36:30:4f:6f:b4:7c:9c:2e:62:bf:48:c9:fd:11:1d:
                    f0:dd:83:aa:f6:bc:65:ab:ef:36:d8:81:84:b9:3f:
                    d2:c9:e6:80:10:aa:18:4b:cc:37:65:b8:7d:2a:79:
                    de:7a:d0:43:eb:e0:e6:3b:e1:e3:65:92:15:8b:b4:
                    3a:a2:b1:2b:a6:d2:49:bd:30:50:67:ba:fa:63:28:
                    ab:05:77:b9:f2:a1:41:05:86:ff:20:78:cd:6a:82:
                    a0:e3:82:59:e6:28:bb:2d:97:e0:a4:3b:32:92:6e:
                    a6:9c:bc:2f:d7:39:fb:6a:19:12:85:a3:8f:f5:58:
                    1a:ab:c9:0a:03:6e:2e:48:dd:34:43:fa:d1:99:c6:
                    a4:d9:13:dd:b6:de:61:38:b3:47:8c:d9:b8:4d:5a:
                    87:de:6b:44:53:a6:5d:ac:89:c5:16:86:b9:0c:4e:
                    99:35:d2:0a:e8:b5:f9:93:41:29:3f:fd:a7:3c:d6:
                    b7:04:ce:49:e0:98:ef:48:34:18:f4:2c:bd:57:62:
                    b8:7b:53:ed:fa:71:27:12:05:0d:25:0d:da:4a:0a:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:29:AF:99:B3:55:9A:D3:DD:BF:D9:46:26:49:D9:6C:A2:1A:FF
            X509v3 Authority Key Identifier:
                keyid:59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:be:2d:7a:7a:a8:94:64:4b:8b:f8:26:b3:a5:1f:c7:b2:
         77:ab:c1:ec:5a:f5:67:a0:be:30:7b:4a:e8:a2:14:55:98:88:
         44:a7:23:c5:17:ec:f9:48:8c:9b:4c:47:a1:a1:24:6d:b7:41:
         a0:37:15:3d:5f:33:7b:16:27:18:e4:22:29:57:63:2c:db:13:
         95:a7:7d:96:74:ea:be:00:86:57:e5:8c:a1:15:e2:df:f8:09:
         b7:d6:55:9c:fb:b0:d6:b9:a1:f4:0d:01:0d:d0:8c:d6:a9:b7:
         44:d7:0b:ff:f3:0c:83:db:c4:b7:17:25:00:2f:6e:c6:ab:31:
         d6:6c:6d:e2:40:da:b5:9a:b9:32:b6:5c:97:28:e1:96:9a:8b:
         1b:8b:0d:0b:d9:55:46:b8:d3:bc:6a:6c:a6:53:7d:0d:e3:cd:
         dc:05:e7:7b:6b:a1:bf:71:50:c6:53:69:14:c7:42:63:56:7f:
         31:a2:d7:88:24:c2:a7:07:03:2c:44:4e:85:06:20:79:ea:9c:
         d2:32:e9:86:53:b3:30:ff:a9:f0:69:e7:ff:4c:e3:73:aa:91:
         51:ec:b1:3f:1d:1d:7c:78:47:56:42:80:c7:61:38:a2:be:1d:
         79:7d:34:c4:ab:c0:83:e9:0f:6b:c8:21:61:08:1e:06:bc:23:
         3f:6c:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org