Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
File:                     3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (raw, json)
Hash identifier:          Qa5VSypv6LIVNBE4SdJKXnJFN1ru42sJm+bG+akeur4=
Subject key identifier:   38:1A:ED:99:D8:03:58:01:4C:D5:77:EA:26:15:9C:04:F2:D0:A0:13
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       4E168FCD94149D2A04276C81B67C3D2F15885167
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
Signing time:             Thu 04 Apr 2024 02:10:08 +0000
ROA not before:           Thu 04 Apr 2024 02:05:08 +0000
ROA not after:            Thu 03 Apr 2025 02:10:08 +0000
asID:                     262408
IP address blocks:        168.0.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:16:8f:cd:94:14:9d:2a:04:27:6c:81:b6:7c:3d:2f:15:88:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Apr  4 02:05:08 2024 GMT
            Not After : Apr  3 02:10:08 2025 GMT
        Subject: CN=381AED99D80358014CD577EA26159C04F2D0A013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:4d:cf:9f:68:21:c5:8c:39:fa:cd:07:e3:
                    52:0f:f1:77:a6:71:77:d3:f2:cc:c8:8f:3f:70:f8:
                    5a:c2:75:bd:82:bc:64:36:43:91:3e:8a:85:52:29:
                    0b:6d:29:d2:9e:e1:1d:d8:c7:36:91:80:0f:7e:4f:
                    39:24:35:6e:11:60:24:b7:34:71:b8:f5:5f:fc:f4:
                    bc:db:01:c9:ab:f3:b5:37:c9:96:7e:e1:d8:6f:74:
                    ae:41:e0:ee:39:98:5c:a3:75:30:ea:0f:e6:e3:69:
                    2d:f1:33:cf:57:10:e6:d6:ea:63:ad:d1:d6:3d:35:
                    d4:d1:57:ce:a0:a8:c9:9e:8c:1c:c9:44:a7:9e:db:
                    14:77:b9:ba:c9:c7:3d:28:f0:ff:0b:0e:51:03:c2:
                    52:ac:37:f1:a0:72:c3:1a:1e:16:c7:91:65:9f:26:
                    0b:ba:f7:3d:26:3b:2c:9e:b8:b3:9e:c5:90:92:b2:
                    85:36:08:2e:10:e9:54:e2:74:da:cb:99:6b:46:0c:
                    5d:8b:91:79:02:67:ea:57:c8:d4:22:75:f0:c2:27:
                    9f:0a:05:c2:11:7b:d1:20:d3:c8:7d:88:c8:94:d3:
                    93:57:58:ef:e7:b2:f8:3b:b0:18:63:72:3c:42:42:
                    be:5f:58:5c:bc:df:7f:97:d3:7f:a2:cc:bc:ae:a5:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:ED:99:D8:03:58:01:4C:D5:77:EA:26:15:9C:04:F2:D0:A0:13
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:b4:57:bf:1e:a1:31:02:70:a5:97:55:69:02:e2:c5:02:
         92:b1:ca:3b:42:3b:26:ce:94:c7:d9:34:4c:93:bd:fe:12:53:
         d9:c0:6a:7d:3f:ff:ae:f2:6e:0e:05:29:e6:b2:d4:8b:fd:60:
         70:80:ae:d9:a0:37:5c:ea:6c:32:8c:2a:77:7c:0f:94:b3:91:
         41:a6:0a:44:99:f4:58:d6:07:17:14:5b:6c:81:7e:1b:d0:10:
         30:b0:d1:ee:2c:f1:68:25:57:98:26:48:f7:f2:b2:fc:5c:53:
         60:b6:4b:50:25:56:fa:df:70:e6:fb:7b:a5:e8:c6:0e:5f:ac:
         b8:ca:cc:27:5c:cd:82:4a:28:d6:dd:8f:d6:50:97:8d:09:d5:
         35:ca:0f:43:6c:3e:5d:b6:4d:dc:d3:60:94:7a:40:09:29:43:
         a7:fc:e9:5a:e0:a4:89:c4:9f:c1:cb:20:1a:8c:12:c0:b7:d4:
         e9:8d:43:d4:c1:c7:b1:0e:3e:ac:e4:a6:7a:14:6d:a0:a7:27:
         4a:f6:d0:24:c8:5e:f5:f9:62:72:52:41:c8:69:db:32:01:80:
         b6:1f:2b:c1:7a:86:76:01:78:3a:dc:d9:c5:0a:a3:16:b0:e7:
         c5:81:69:e9:d6:76:08:ca:8f:0d:89:88:2c:f2:ee:39:9e:47:
         b9:f3:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org