Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa
File:                     3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa (raw, json)
Hash identifier:          Y5yS+lABjgryeObyQQApVegZhCOsk6cevxpC9b8udSY=
Subject key identifier:   92:9A:5E:CD:DB:DD:E6:9C:97:01:47:41:20:45:6A:18:A5:53:F8:79
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       7BD8ACFA6108D9574F2B0D25DF697BAC01747C99
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa
Signing time:             Tue 10 Sep 2024 15:51:19 +0000
ROA not before:           Tue 10 Sep 2024 15:46:19 +0000
ROA not after:            Tue 09 Sep 2025 15:51:19 +0000
asID:                     263421
IP address blocks:        168.121.156.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d8:ac:fa:61:08:d9:57:4f:2b:0d:25:df:69:7b:ac:01:74:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Sep 10 15:46:19 2024 GMT
            Not After : Sep  9 15:51:19 2025 GMT
        Subject: CN=929A5ECDDBDDE69C9701474120456A18A553F879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:de:8c:32:0d:b3:87:80:16:84:52:38:9d:
                    f1:f2:ff:cb:10:25:e8:eb:68:69:12:ab:fd:91:7a:
                    80:b1:6e:9d:ff:95:b5:44:35:31:9d:da:6a:26:ca:
                    4c:bf:1e:af:31:9f:e4:81:cf:31:96:93:b0:1f:ec:
                    aa:9a:9f:3c:fc:8f:36:ae:3d:b6:5f:df:8c:a6:af:
                    ec:da:12:0c:16:9b:75:9c:6b:dd:ac:d2:59:0c:ea:
                    72:2a:7b:10:1e:5f:47:d0:19:e1:73:79:bc:ce:71:
                    c0:a0:0c:ec:33:f4:0c:8d:aa:2c:c9:ac:2b:46:da:
                    49:aa:9a:7f:22:36:62:83:3c:a5:91:1b:c0:bc:60:
                    5a:60:c8:8a:d7:27:eb:63:b8:ca:64:56:7e:68:4a:
                    18:60:ad:ec:89:02:38:32:0c:b6:c1:d2:bb:6e:a4:
                    e2:44:d4:57:c6:ef:32:ec:4e:6d:35:42:01:cd:e8:
                    cd:51:1f:65:23:93:a7:57:95:51:4b:30:4f:38:f7:
                    ba:52:91:29:95:36:32:b2:a5:1e:62:2a:47:38:52:
                    45:8d:2a:6b:05:b4:2f:38:57:2d:ff:8e:5f:42:24:
                    5a:d1:6b:07:e1:4b:ae:20:0d:7b:c0:c5:4f:b5:be:
                    38:b3:a5:cd:27:62:71:85:b4:c4:2e:4f:b5:e5:df:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:5E:CD:DB:DD:E6:9C:97:01:47:41:20:45:6A:18:A5:53:F8:79
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:80:eb:02:f7:05:13:5f:a0:14:97:7c:ce:d7:e8:dc:37:0a:
         5d:3d:a2:6f:c4:84:75:e9:75:17:a1:cf:53:8c:ff:bb:1b:b6:
         21:58:7d:2d:86:68:9d:31:c0:56:28:87:82:1b:ae:5b:5b:1c:
         a6:26:ec:7e:0a:53:22:8f:56:f5:67:a4:b0:2f:16:40:d6:d2:
         9f:59:ec:26:dc:ac:7d:15:1e:a2:9f:c6:7d:db:b9:94:ee:10:
         4a:24:84:78:60:c0:de:ea:89:55:a3:7b:88:88:ec:99:00:f6:
         7c:a5:79:93:e9:59:6f:8c:44:0b:31:36:d9:3d:ac:47:a8:e6:
         22:11:82:9c:87:6e:51:35:c2:fe:b3:fd:5c:28:2c:39:b3:93:
         72:eb:13:c5:91:3e:22:f0:d3:47:e0:e8:03:75:88:32:0c:8b:
         2c:66:43:14:c4:c1:c5:75:aa:4e:8c:7d:6b:3e:0e:fb:c7:a9:
         c9:0c:40:ad:d9:18:48:0d:1b:cf:7b:58:49:03:ae:be:3f:ed:
         39:36:56:a4:db:50:b1:a7:c7:bb:87:32:3c:31:8c:a5:16:b0:
         1d:61:53:7a:d9:4a:9e:95:9f:da:b4:f0:23:68:7e:b6:0a:31:
         3d:43:db:bb:61:a8:65:75:9c:63:98:64:5a:14:a1:51:04:07:
         11:09:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:46 2024 by rpki-client on console-ams.rpki-client.org