Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa
File:                     3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (raw, json)
Hash identifier:          XUpZ5skGyQGGyzKbyd7D5740xey6Ni/VFzbM/99kAKk=
Subject key identifier:   8F:BD:2D:2D:03:B8:29:63:EA:39:72:CF:CF:72:65:F9:41:E1:4C:58
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       3DDBA3BC76F7BEE15243A0E79BDEDBDE5D312736
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa
Signing time:             Wed 03 Apr 2024 18:30:03 +0000
ROA not before:           Wed 03 Apr 2024 18:25:03 +0000
ROA not after:            Wed 02 Apr 2025 18:30:03 +0000
asID:                     28334
IP address blocks:        168.227.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:db:a3:bc:76:f7:be:e1:52:43:a0:e7:9b:de:db:de:5d:31:27:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Apr  3 18:25:03 2024 GMT
            Not After : Apr  2 18:30:03 2025 GMT
        Subject: CN=8FBD2D2D03B82963EA3972CFCF7265F941E14C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:3f:ff:71:63:3d:dc:4d:8f:f8:82:21:31:
                    46:53:49:e2:b9:47:ad:d8:76:7c:e1:7f:a6:2b:d0:
                    03:20:7e:9a:ec:4f:0e:00:e6:74:88:d9:7e:82:10:
                    4d:34:33:31:b2:06:41:1c:bf:24:4b:b0:db:3f:da:
                    9b:df:7e:f5:0c:b1:04:17:dd:f4:2b:f0:11:2a:e7:
                    68:56:06:94:c2:4e:2c:62:b4:3f:92:97:34:91:99:
                    e6:a6:f9:38:8f:fb:14:d0:55:c4:2f:f7:0c:60:71:
                    80:41:41:69:b0:1c:4f:29:85:0f:41:df:4a:f8:0c:
                    02:2f:f0:7f:49:b1:50:70:ab:dd:1b:1c:63:be:d7:
                    fb:af:18:4e:20:b0:e5:9e:0a:01:4e:2b:28:ba:d0:
                    53:62:42:a5:bf:b5:8c:fb:6a:11:8c:1d:75:fe:10:
                    73:4b:a9:2e:82:9a:46:a8:a1:73:79:b8:d0:69:1c:
                    72:87:c3:cd:ff:e5:3a:88:0f:91:84:15:4b:94:d3:
                    eb:1b:ef:7e:4f:e6:4e:4c:b8:d8:95:00:e2:dd:df:
                    2a:47:63:01:62:53:47:8e:a0:09:bf:d1:9b:9b:b6:
                    fa:8a:da:30:17:ab:90:a8:fc:a2:94:e9:87:a1:44:
                    fa:90:b1:b6:7e:d9:f6:da:72:14:a4:df:ed:26:d5:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:2D:2D:03:B8:29:63:EA:39:72:CF:CF:72:65:F9:41:E1:4C:58
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:ce:c4:70:76:d7:e7:7e:a6:74:a4:5e:7c:c3:6e:ce:a4:
         95:5c:9a:da:da:45:c3:5d:6c:89:1f:ca:f5:86:bd:8c:0a:7a:
         4a:79:e1:8c:34:4d:e1:1e:1b:4c:9d:1f:a8:d7:bb:91:d5:3c:
         35:af:bc:a2:9d:b1:32:bb:ad:6a:ac:2d:99:2f:69:4f:2c:23:
         46:62:ed:fd:df:60:af:86:a6:79:a6:fc:62:d2:a7:48:4c:d4:
         00:f6:57:10:b7:70:3d:9e:82:74:2b:64:50:94:84:94:f0:49:
         7c:8e:eb:b8:4e:17:e2:61:51:e1:ca:32:d2:3f:7d:e9:d1:b8:
         fa:ad:bd:5e:3c:95:d3:c2:5e:38:26:15:cb:83:ff:a9:1e:e3:
         7f:cc:da:e4:0b:f9:5d:be:e4:30:e6:46:0f:7a:41:53:09:bf:
         b4:29:60:a9:05:c3:34:6b:0f:de:7b:5d:08:09:65:d7:84:0c:
         5f:76:3c:02:d8:06:63:ce:c9:4b:23:3d:d0:f9:7b:89:97:00:
         6e:85:f5:1b:68:4d:6e:a9:32:02:31:12:d7:00:b8:a9:a0:58:
         23:7e:58:fc:31:33:dd:ca:f2:c6:22:00:3a:2a:39:42:a6:73:
         c6:6a:1a:76:20:42:72:37:f7:2b:1c:67:8e:ca:5d:ba:21:56:
         38:a2:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org