Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32332d3233203d3e20323632363131.roa
File:                     3136382e3232382e3137302e302f32332d3233203d3e20323632363131.roa (raw, json)
Hash identifier:          DeTjksZEWNpvvOqLetwxKxmP3807ljVgyUuQyLZ5iao=
Subject key identifier:   F7:AC:7D:13:5C:7F:DE:1D:79:F9:BA:C6:61:EF:2E:62:E1:D2:A7:12
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       7E97451C90E0833BD5906A013DDE068649CB5528
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32332d3233203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:25 +0000
ROA not before:           Wed 17 Apr 2024 14:15:25 +0000
ROA not after:            Wed 16 Apr 2025 14:20:25 +0000
asID:                     262611
IP address blocks:        168.228.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:97:45:1c:90:e0:83:3b:d5:90:6a:01:3d:de:06:86:49:cb:55:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:25 2024 GMT
            Not After : Apr 16 14:20:25 2025 GMT
        Subject: CN=F7AC7D135C7FDE1D79F9BAC661EF2E62E1D2A712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:1c:af:47:4a:c9:26:e5:9a:52:2b:94:79:
                    d5:42:50:1e:70:2b:e5:ab:cc:21:28:ee:7c:7d:2c:
                    35:2b:a3:39:a0:f7:a4:f6:d9:18:f6:6f:db:1f:65:
                    c5:d7:59:54:af:4f:c2:19:34:a9:79:2c:f5:bd:ad:
                    09:d7:5f:ec:8b:c9:33:1b:ab:01:e9:cd:64:d9:83:
                    4a:d5:fd:65:05:50:8a:c1:eb:bb:2a:dc:21:14:df:
                    73:c2:83:8c:0c:c2:c0:ee:3e:8f:70:a2:4d:4f:3a:
                    d2:f3:9f:90:ec:15:f1:49:c1:48:95:99:bd:b0:eb:
                    7b:02:45:38:85:6e:e2:1e:82:10:51:b1:0d:9b:32:
                    d2:71:3d:f3:44:b8:0f:a2:06:a0:41:59:28:90:6d:
                    35:24:22:a7:b2:d9:fe:44:84:0c:32:ad:4e:7f:41:
                    bc:da:63:5e:5b:18:3f:74:ec:61:ef:a4:05:02:dd:
                    ec:00:6f:46:3a:a3:ca:93:bb:5c:99:2b:5f:64:02:
                    1b:33:bc:bb:4f:af:5a:0e:26:10:96:99:47:73:9c:
                    98:f6:56:eb:55:01:4d:93:fd:cf:5d:e7:10:be:8d:
                    56:72:df:4d:05:eb:3c:9e:42:68:ec:5f:d2:21:0e:
                    59:12:d8:2e:a1:78:71:2a:c8:2d:f4:e9:59:6b:91:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AC:7D:13:5C:7F:DE:1D:79:F9:BA:C6:61:EF:2E:62:E1:D2:A7:12
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32332d3233203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:30:45:63:08:21:0f:43:fe:f0:2c:a6:fd:ce:19:4a:e9:
         da:60:5e:45:0e:33:94:6c:66:ff:2c:1c:06:f2:2f:12:3c:b0:
         db:23:34:2e:66:2b:30:87:16:58:af:e8:6a:6c:60:ef:4a:28:
         65:94:62:c4:71:db:56:63:8b:b5:20:ac:64:12:14:1b:55:91:
         1e:83:75:de:b8:47:61:7e:27:cf:0a:9a:6e:c5:79:b5:cf:25:
         ed:7f:50:1e:31:45:7a:fd:b0:3b:b0:e3:86:85:08:cd:62:df:
         7e:62:59:05:21:de:08:80:3f:5e:06:8d:04:36:bc:5b:e2:c5:
         ed:17:2e:8f:8a:73:79:a2:0c:d2:01:cf:78:4f:ec:de:9c:a6:
         b8:01:71:fb:0e:be:4e:88:43:58:8d:17:2e:2f:24:f4:6a:42:
         d3:81:05:55:de:16:14:cd:06:86:da:05:1f:e9:60:c8:60:4d:
         9c:20:f5:67:7a:34:b5:5d:12:db:e1:51:91:4c:d2:c2:09:4e:
         65:18:54:7e:8d:32:ec:92:5e:61:b3:23:8c:b0:0e:e3:1d:2b:
         6c:80:86:ad:97:0b:45:78:f7:0a:d2:c7:0a:d4:32:d5:dd:ae:
         d0:03:b9:ea:31:e0:5a:c1:47:38:a1:50:c7:c5:47:cf:a0:96:
         2a:be:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:05 2024 by rpki-client on console-fra.rpki-client.org