Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
File:                     3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (raw, json)
Hash identifier:          q7aLt2Inw1Ne1cOD9ikfkm/HrCqcFP6PINfrl2PiL6I=
Subject key identifier:   15:E4:17:8C:01:A1:10:17:01:0E:DC:6B:D8:7C:84:3D:66:16:31:2C
Certificate issuer:       /CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
Certificate serial:       26AA22507217B31150148ED52595C761F3AD7297
Authority key identifier: 9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
Signing time:             Thu 04 Apr 2024 13:36:20 +0000
ROA not before:           Thu 04 Apr 2024 13:31:20 +0000
ROA not after:            Thu 03 Apr 2025 13:36:20 +0000
asID:                     266156
IP address blocks:        192.144.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.crl
                          rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:aa:22:50:72:17:b3:11:50:14:8e:d5:25:95:c7:61:f3:ad:72:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
        Validity
            Not Before: Apr  4 13:31:20 2024 GMT
            Not After : Apr  3 13:36:20 2025 GMT
        Subject: CN=15E4178C01A11017010EDC6BD87C843D6616312C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:0e:50:bc:c3:d3:96:a6:91:2b:3d:b0:62:
                    91:47:3a:ce:a2:92:33:f7:b6:7d:6d:be:a4:fd:7b:
                    59:0c:10:66:40:70:12:40:03:8d:aa:92:39:7c:a4:
                    e8:e5:31:f9:c6:93:ab:c0:4f:b7:c9:60:28:7e:9a:
                    00:b7:ec:ad:8e:0b:0e:60:c0:40:e3:5c:05:8c:0e:
                    97:a7:86:29:17:62:41:4f:7d:47:e6:5f:2f:29:71:
                    5b:a4:79:7d:11:e2:2a:e7:b2:91:41:e8:12:de:2f:
                    9c:28:93:2f:fe:4e:60:08:c0:e4:1f:fa:f2:3e:57:
                    76:a7:c0:39:9f:c3:a3:e4:8b:9d:29:61:05:87:61:
                    4a:3f:5b:ff:25:1d:98:8b:a2:98:0b:96:de:90:f5:
                    05:c3:0b:4e:e5:97:f0:6c:c6:02:e2:25:e5:22:f8:
                    2f:da:31:ec:89:7f:7e:1d:7a:8f:15:b7:45:36:7a:
                    99:ca:20:f6:1e:d3:9e:ad:a5:6a:83:b8:c6:dd:64:
                    d2:40:c7:e4:f8:45:8a:d9:c1:14:21:0c:2c:4b:bd:
                    4f:6a:59:22:ad:14:3f:c2:45:f5:f8:0e:28:07:a5:
                    7a:c0:a9:4a:e4:da:35:24:aa:07:c8:9b:bc:51:49:
                    66:ce:fb:69:2d:76:2a:b0:4c:40:4f:bd:4f:d6:de:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:17:8C:01:A1:10:17:01:0E:DC:6B:D8:7C:84:3D:66:16:31:2C
            X509v3 Authority Key Identifier:
                keyid:9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:fa:96:2d:07:2f:47:e9:85:0e:08:c5:da:3f:c2:fa:9f:
         2e:d7:e8:45:ea:59:a2:b9:01:9d:d2:10:da:35:39:03:dc:fa:
         5f:3c:d2:a7:77:d1:82:43:27:e4:31:f5:da:30:0b:a5:ca:56:
         76:d2:cd:fa:ac:0b:fe:7d:4e:e3:d8:25:b9:e3:be:e6:72:76:
         5e:4e:6a:b9:e5:aa:b8:bf:f2:bd:e4:83:e1:c8:30:cd:db:b8:
         0c:1c:3f:d5:f3:db:f8:a5:18:da:2c:ac:be:7a:34:b4:65:17:
         1a:a5:30:38:9e:3f:46:0d:01:20:65:f2:50:fe:4d:b2:e3:79:
         99:57:79:2c:22:df:f3:5d:ed:14:10:61:8b:4a:6a:d2:ac:31:
         b2:a1:12:cf:89:3b:c3:1f:e4:b5:a3:11:99:8e:ab:72:0b:76:
         3a:2c:cd:7d:67:f2:e0:ff:08:59:df:cd:a7:c6:e7:a5:f3:fe:
         3a:71:71:aa:40:a1:cd:a0:bc:f3:5a:03:2e:06:28:8a:8c:e6:
         85:d5:81:2e:bd:ba:47:3c:5b:a8:68:f6:8b:7e:53:a0:60:bd:
         91:c9:0b:74:54:83:ed:15:59:80:d1:da:ab:ec:9d:d5:6f:1a:
         5c:88:05:57:55:07:15:28:94:95:97:40:b9:b0:97:88:99:66:
         bc:c6:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:36 2024 by rpki-client on console-ams.rpki-client.org