Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3136382e3132312e3133322e302f32322d3234203d3e20323639303733.roa
File:                     3136382e3132312e3133322e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          hRKTnXpjqFswxTaF7OTErahxtY32eA/335wwVjXQcII=
Subject key identifier:   D7:1D:12:86:45:7E:AF:6D:EF:9B:B0:EE:17:5F:B5:ED:89:4A:01:E1
Certificate issuer:       /CN=7C85DCA145843B801E0DE7F701B0084B2991189D
Certificate serial:       611E0938D6E48FCD612A553069BBF076824E449F
Authority key identifier: 7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3136382e3132312e3133322e302f32322d3234203d3e20323639303733.roa
Signing time:             Fri 19 Apr 2024 20:19:09 +0000
ROA not before:           Fri 19 Apr 2024 20:14:09 +0000
ROA not after:            Fri 18 Apr 2025 20:19:09 +0000
asID:                     269073
IP address blocks:        168.121.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1e:09:38:d6:e4:8f:cd:61:2a:55:30:69:bb:f0:76:82:4e:44:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Validity
            Not Before: Apr 19 20:14:09 2024 GMT
            Not After : Apr 18 20:19:09 2025 GMT
        Subject: CN=D71D1286457EAF6DEF9BB0EE175FB5ED894A01E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:59:e3:31:f3:8c:29:c2:36:b9:d4:9a:3f:
                    8b:b6:2b:f9:26:3a:33:5a:d9:1f:43:77:2b:c9:46:
                    68:cc:a3:79:81:33:4e:bc:d1:91:eb:6c:9c:1e:2a:
                    a1:79:91:69:7f:46:4a:c6:5c:7d:49:1b:b3:87:11:
                    e9:46:06:7d:9a:59:7c:76:cb:0c:c1:ff:6f:35:1f:
                    ba:8b:9b:14:11:c1:15:e7:c5:61:74:63:5b:3f:70:
                    87:2c:aa:41:d2:8b:51:69:aa:2d:ed:c6:7a:1a:77:
                    c7:ca:41:97:66:27:6e:78:77:c6:cb:43:11:77:c3:
                    03:dc:49:8a:ab:d0:81:79:15:1c:e0:39:06:de:a2:
                    b6:5b:08:29:32:3a:ba:58:28:47:6f:08:6e:c6:95:
                    63:4c:a6:89:78:c3:bc:bb:f9:4a:fa:cd:ac:0f:f2:
                    38:d2:4d:da:59:ae:e2:3f:e0:53:a2:be:cf:b2:6a:
                    c5:4c:33:23:3f:3d:9d:7f:94:40:6e:cf:9b:78:3f:
                    e0:04:41:47:66:af:fc:40:d2:68:bf:6d:34:98:7a:
                    69:61:2f:6c:f5:33:9e:b2:aa:b1:3f:16:c7:97:7b:
                    d2:ef:19:e2:36:15:82:9a:ae:01:e0:e2:6f:92:fd:
                    90:1e:53:ab:e8:44:ea:b6:6b:e6:6a:b7:4b:e2:ff:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:12:86:45:7E:AF:6D:EF:9B:B0:EE:17:5F:B5:ED:89:4A:01:E1
            X509v3 Authority Key Identifier:
                keyid:7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3136382e3132312e3133322e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:85:ea:1f:75:5c:ea:8e:97:6a:9f:37:bf:1b:b6:51:dd:88:
         57:97:6e:79:1f:8d:8c:8b:89:83:40:46:82:5e:3a:2b:ea:e0:
         4a:16:be:c1:73:17:74:68:c2:2d:49:83:06:6f:f9:f3:14:1f:
         55:3a:4d:d7:c7:23:25:ec:19:fe:29:62:80:27:c6:53:a2:42:
         a1:2f:a7:19:31:d8:f5:90:2f:5c:52:1d:f3:05:1e:96:90:51:
         3c:05:a8:93:ef:78:34:ae:e6:20:b4:5d:d8:51:9a:4b:53:59:
         e6:58:8f:0e:29:57:78:fd:49:d0:d1:b4:86:40:40:eb:26:1d:
         b8:5f:7d:17:1e:77:bd:67:ed:71:a0:dd:0b:1f:c3:76:f5:55:
         8f:16:ec:38:b4:27:c2:22:bf:27:1d:40:c8:23:f5:c2:cb:d5:
         e2:bb:ba:b3:11:cf:5f:3c:89:d0:04:e2:74:d6:9e:65:61:69:
         2e:99:bf:a7:f3:00:1f:3d:e6:57:86:c1:d9:58:0d:a1:be:d9:
         0a:c5:2c:a1:1b:ef:70:c8:68:d2:45:af:1b:38:3c:09:90:f1:
         17:a8:49:85:50:6a:39:b4:32:ce:07:9d:32:76:73:54:27:88:
         a5:c7:07:4c:d1:26:33:b7:99:64:b4:c4:e5:a5:b4:35:7f:1b:
         f2:1b:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:26:07 2024 by rpki-client on console-ams.rpki-client.org