Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3136382e3232372e38302e302f32322d3234203d3e203631363938.roa
File:                     3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (raw, json)
Hash identifier:          IiEN5Jt+IjiGA4rrpcidQwaTrr06LXFl6U2s56QvoZI=
Subject key identifier:   89:01:EB:00:47:91:5B:BC:67:0A:82:F5:94:4D:98:BB:5E:1E:19:C0
Certificate issuer:       /CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Certificate serial:       75A884ECA43E97A012B4AF1002C124A8912D7A55
Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3136382e3232372e38302e302f32322d3234203d3e203631363938.roa
Signing time:             Tue 17 Sep 2024 18:17:49 +0000
ROA not before:           Tue 17 Sep 2024 18:12:49 +0000
ROA not after:            Tue 16 Sep 2025 18:17:49 +0000
asID:                     61698
IP address blocks:        168.227.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl
                          rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:84:ec:a4:3e:97:a0:12:b4:af:10:02:c1:24:a8:91:2d:7a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
        Validity
            Not Before: Sep 17 18:12:49 2024 GMT
            Not After : Sep 16 18:17:49 2025 GMT
        Subject: CN=8901EB0047915BBC670A82F5944D98BB5E1E19C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:45:ec:3e:71:0a:7e:ad:71:46:4b:e9:0f:
                    ae:b6:30:fe:a6:28:b5:67:f2:b0:5f:ab:2a:d3:6b:
                    00:da:5c:99:6b:a5:05:2d:69:7f:98:52:61:cb:a4:
                    13:7f:79:c8:5b:66:5e:9d:72:57:a2:d3:85:40:9f:
                    80:df:9f:97:fc:0a:5d:0b:e6:98:a8:63:8c:19:0b:
                    f8:73:c3:19:63:3a:9c:1a:47:9f:9e:5b:09:6c:8e:
                    2e:dd:7d:b2:66:62:5d:9f:68:83:2e:27:de:69:26:
                    6c:18:99:c6:06:67:5b:58:4d:fb:eb:7a:7e:37:33:
                    80:d9:1b:81:43:a3:ca:52:93:a8:2c:fb:3f:3f:ae:
                    b8:7c:ba:dc:e1:09:67:e5:45:fa:8e:ff:79:be:c0:
                    31:fc:57:ff:81:cd:ae:52:5c:e9:ab:ff:8b:fa:06:
                    e5:95:78:9f:24:cf:dd:35:83:4e:16:55:b9:80:6a:
                    09:12:eb:03:e2:9e:d3:a2:4c:54:27:49:8a:61:eb:
                    f8:ef:6c:d2:0a:94:e2:72:a4:50:0e:a5:56:71:a2:
                    04:42:da:18:64:55:dc:9c:eb:2d:90:a1:7f:f3:81:
                    15:92:3d:d4:9f:54:d4:df:d5:e0:e3:5c:d7:6b:e0:
                    89:f3:50:b2:c2:86:24:61:29:81:4c:e9:a8:16:70:
                    5c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:EB:00:47:91:5B:BC:67:0A:82:F5:94:4D:98:BB:5E:1E:19:C0
            X509v3 Authority Key Identifier:
                keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3136382e3232372e38302e302f32322d3234203d3e203631363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:d9:40:53:bf:74:3d:80:21:7d:5c:29:3d:09:9e:1a:c2:
         74:f0:7d:81:56:2c:aa:9b:df:1b:ec:5a:c7:4d:7c:ca:56:1d:
         93:01:20:b3:4f:e6:0d:c2:f0:0f:f5:9a:b3:1f:a6:fa:6f:dd:
         9d:05:f2:8f:3b:38:98:ef:db:40:69:52:a0:3d:3b:38:63:64:
         35:c3:2b:5c:6c:fe:42:c4:23:94:02:5d:8c:21:7e:a9:3e:6c:
         94:58:ba:91:cd:0d:23:a5:78:e1:47:6d:99:70:ff:22:9b:b4:
         a4:6d:e4:d7:bb:aa:64:56:70:59:6f:ef:b9:8c:ae:e9:2b:6e:
         56:22:c7:54:cd:06:72:2f:7b:5d:34:31:b5:5d:12:e1:c2:f1:
         21:ef:35:f4:ee:4e:83:de:65:25:97:58:68:ec:e2:0c:41:c4:
         2f:f8:69:8f:5b:7a:63:fb:e2:29:4f:87:0a:08:5e:88:41:75:
         bd:1a:56:53:95:ff:78:dd:2b:b0:fe:72:13:d2:f6:d9:a9:80:
         90:7c:6e:dc:e0:df:c9:4c:19:e3:3d:cf:37:71:05:9b:08:4c:
         ae:79:e9:50:3b:bc:7c:db:9c:f7:04:52:58:c8:69:4d:68:c1:
         b1:81:e5:ca:55:d5:3a:74:8e:9e:4a:11:9d:f8:15:b9:f9:94:
         de:2b:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:00 2024 by rpki-client on console-fra.rpki-client.org