Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
File:                     3136382e302e322e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier:          EBCQxGqUdFXN7B9oNWC/3mf+bmVddwlHBaHjXcqk9X4=
Subject key identifier:   14:3E:5C:97:9A:64:47:18:A5:08:3F:93:0D:77:58:A8:36:EC:B8:FA
Certificate issuer:       /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial:       50B2B74A44B7D386DF307107C1872E3A1195D764
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
Signing time:             Thu 04 Apr 2024 04:19:39 +0000
ROA not before:           Thu 04 Apr 2024 04:14:39 +0000
ROA not after:            Thu 03 Apr 2025 04:19:39 +0000
asID:                     265240
IP address blocks:        168.0.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl
                          rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b2:b7:4a:44:b7:d3:86:df:30:71:07:c1:87:2e:3a:11:95:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Validity
            Not Before: Apr  4 04:14:39 2024 GMT
            Not After : Apr  3 04:19:39 2025 GMT
        Subject: CN=143E5C979A644718A5083F930D7758A836ECB8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:c5:cc:54:57:ef:39:ed:80:16:c0:f8:73:
                    14:27:6c:33:31:8d:a9:77:51:e1:0b:fd:88:9c:98:
                    a0:f5:b1:eb:3a:db:f3:51:23:e6:72:6e:e0:65:a2:
                    ff:53:68:17:91:7f:fa:23:d7:f8:2a:08:99:30:81:
                    08:22:10:db:32:3b:fb:56:58:99:e6:01:16:6f:79:
                    74:3b:e4:f9:f6:1e:75:50:c3:fc:ee:8d:1a:b8:65:
                    3f:ec:df:a5:00:b7:ed:2b:ed:67:f6:41:db:4f:cc:
                    22:16:ec:df:ea:0a:e7:0b:d2:2b:f4:70:5c:f2:eb:
                    19:73:2e:1e:a4:db:1e:97:3c:06:43:fe:1c:24:79:
                    54:2d:56:27:95:81:72:42:c8:59:e9:15:40:ab:49:
                    22:52:65:fb:23:19:5c:e4:a7:66:9d:db:a6:4c:f4:
                    59:7b:2a:53:3c:0a:ec:76:ff:fb:5d:5a:e6:49:e4:
                    89:dc:87:d5:e5:36:46:3a:2f:76:fd:16:dc:03:51:
                    1b:be:49:da:87:86:1e:df:07:7f:07:41:9d:e6:34:
                    a5:03:9c:2a:30:50:5a:93:75:df:5d:b5:a1:69:0a:
                    c7:c2:21:c3:ae:21:25:18:ac:9a:68:c1:dd:fb:0a:
                    5c:fc:b1:e0:33:36:6c:f2:63:00:50:45:5e:18:5d:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:5C:97:9A:64:47:18:A5:08:3F:93:0D:77:58:A8:36:EC:B8:FA
            X509v3 Authority Key Identifier:
                keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:40:21:4f:ff:24:15:78:d8:2b:b1:b1:95:20:3a:db:6a:ac:
         2a:df:72:46:98:3a:18:df:42:b6:a5:21:05:49:34:d8:34:29:
         ea:57:04:9f:9a:c2:6b:6f:90:b1:6b:5c:e7:0c:f5:8f:f7:1e:
         23:6c:48:09:61:ec:fc:3b:c0:46:b2:1e:5d:f4:95:4b:b5:91:
         74:6a:d2:83:81:27:f8:e0:c3:ee:7e:75:09:82:a9:97:99:1c:
         4b:2f:93:dc:f3:75:9c:49:5c:01:75:38:c1:47:44:1b:e7:08:
         34:8f:b2:e1:9e:50:a0:c5:ca:11:be:15:f7:31:53:ea:90:ad:
         f6:4e:90:ce:3f:7f:ce:77:3f:fc:8c:ab:19:83:e1:05:da:8b:
         74:48:45:a7:4a:61:23:3c:8a:e5:76:89:ff:61:7b:4b:46:53:
         33:9d:31:e3:6b:96:fb:0b:11:17:9f:f1:79:68:6c:db:94:65:
         b9:af:ee:79:0b:85:39:00:b5:cd:f2:20:a5:e2:2c:8a:9e:30:
         1f:0a:59:a7:89:c1:4d:19:30:05:24:9e:b8:9d:55:b9:fd:51:
         5a:bc:71:c0:55:b2:b6:7e:3c:5d:f2:c3:54:fe:55:5b:82:8c:
         fb:5a:34:0b:db:d1:d6:9a:c1:e3:db:c6:bd:17:d7:2b:5f:e8:
         bb:74:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org