Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa
File:                     3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa (raw, json)
Hash identifier:          gFHRbuaeSKT1quzbnoJNjATMbtIGxscqpoqdzI/NSyk=
Subject key identifier:   29:DD:1F:BF:B7:04:DF:D7:DA:5B:E8:45:E1:63:CE:50:B8:1F:03:28
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       3E6DD266E0E8CA1FC04D25B1C064E85B4CEDD0D4
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:47 +0000
ROA not before:           Thu 04 Apr 2024 18:03:47 +0000
ROA not after:            Thu 03 Apr 2025 18:08:47 +0000
asID:                     267513
IP address blocks:        168.194.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6d:d2:66:e0:e8:ca:1f:c0:4d:25:b1:c0:64:e8:5b:4c:ed:d0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:47 2024 GMT
            Not After : Apr  3 18:08:47 2025 GMT
        Subject: CN=29DD1FBFB704DFD7DA5BE845E163CE50B81F0328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:7e:95:7b:39:d6:da:40:8e:f4:47:93:93:
                    38:ce:ee:52:ae:c2:e6:42:4c:98:3a:c4:d2:49:c4:
                    07:90:9b:f7:3d:6b:e7:46:00:a6:7d:9f:ba:0d:e8:
                    de:06:f2:9b:c8:a9:ce:a8:86:f6:ea:2d:6b:86:c1:
                    43:26:a1:9b:a3:9d:76:19:43:bd:f8:bc:37:5f:09:
                    ba:d9:e3:e9:7d:b3:be:e7:93:d6:73:8e:62:6f:a7:
                    59:54:9a:1a:bc:c1:93:5d:55:1f:dc:ed:a1:ca:34:
                    cd:20:a4:8e:01:9a:3a:5a:cd:9b:af:92:ed:37:b5:
                    32:e1:d6:1b:dd:2b:3b:f0:a8:f8:f6:91:bb:99:30:
                    a5:db:99:5a:a2:48:68:eb:11:33:85:6c:d1:10:61:
                    b5:df:7a:78:f4:8f:a6:e3:80:cc:25:27:4d:08:6f:
                    12:06:b4:96:6a:b3:63:08:26:34:8b:08:dc:06:bb:
                    4b:ff:dc:6c:17:b2:46:1e:5e:d9:25:87:75:b8:e1:
                    1f:46:d5:f8:d3:37:01:64:c0:4e:38:de:95:de:94:
                    94:e7:9c:a7:6a:83:b1:32:9c:a4:73:77:29:83:31:
                    88:13:21:bc:cb:99:b1:6c:67:6a:11:ab:62:d6:b0:
                    38:d6:a5:24:69:12:5f:cc:cd:e2:e6:9a:bc:4d:80:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DD:1F:BF:B7:04:DF:D7:DA:5B:E8:45:E1:63:CE:50:B8:1F:03:28
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:e5:07:4a:49:7b:6a:df:6f:ca:06:c7:93:16:9d:03:f3:
         e0:8f:56:1d:b2:00:e2:c0:b0:40:d9:9b:87:37:bb:70:a9:8c:
         5e:84:09:fa:48:26:e2:78:a6:a3:bb:8a:b7:2e:fe:c4:b8:1e:
         bf:f9:40:a5:d8:6b:4c:a8:28:95:bb:af:2b:d6:06:84:72:b4:
         a0:b4:e9:9c:d7:6a:85:5b:a5:e3:38:3c:d7:e5:10:fc:b1:ae:
         8a:fb:6a:9f:73:d3:d7:24:84:cc:74:d6:7f:25:db:48:59:08:
         56:75:30:bb:8e:db:03:37:a1:f6:fd:99:02:59:a8:ca:c3:ee:
         16:98:a7:1d:c1:d9:f6:2e:bc:ea:e0:a6:ba:34:e9:d3:7a:4e:
         84:d2:b3:ee:d3:72:a7:84:2f:e8:57:78:8c:3a:ab:42:45:42:
         af:71:7f:e5:8c:db:00:af:a5:3e:02:ad:78:75:d7:c7:ef:e7:
         c7:8f:c5:13:4c:c6:a8:30:6e:91:03:2a:12:bd:28:0f:e2:cb:
         f5:0a:0a:ae:4c:40:c8:6c:40:9e:2b:c9:ba:7a:84:cd:20:3d:
         77:81:50:ae:49:13:88:84:d0:64:f8:f6:80:de:ab:ca:ca:05:
         88:e7:07:dd:43:58:dc:90:a1:b6:a3:56:bd:8b:b5:d0:a5:6b:
         4b:07:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org