Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
File:                     3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          JfwWtY+uPRVPfp59XudHg1Yrqq/To0s7IhsAmfYuoD4=
Subject key identifier:   E4:F3:E8:6C:9F:5B:45:C7:8D:17:06:79:08:E4:49:7F:27:B5:ED:6F
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       6AF0FB0D2BDFD5418D9C4655E4A17B7F47EDAD55
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 08 Jul 2024 18:44:22 +0000
ROA not before:           Mon 08 Jul 2024 18:39:22 +0000
ROA not after:            Mon 07 Jul 2025 18:44:22 +0000
asID:                     266433
IP address blocks:        168.194.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 21:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f0:fb:0d:2b:df:d5:41:8d:9c:46:55:e4:a1:7b:7f:47:ed:ad:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jul  8 18:39:22 2024 GMT
            Not After : Jul  7 18:44:22 2025 GMT
        Subject: CN=E4F3E86C9F5B45C78D17067908E4497F27B5ED6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:20:4b:17:e2:ad:cc:3a:6c:a0:8d:b1:97:
                    53:63:40:3e:16:66:b7:94:b3:10:a7:98:d8:e9:10:
                    ba:e0:fa:f3:03:9f:25:32:87:50:49:9b:ed:4e:86:
                    ee:9f:77:98:6d:f0:2f:cf:34:a8:6e:cb:f5:65:df:
                    7e:50:f6:c9:33:76:bb:36:a4:1c:81:6a:75:1b:a1:
                    66:d0:a5:29:b7:a5:5f:ed:2f:16:5f:ea:18:db:81:
                    df:a0:1c:12:d0:07:e0:01:48:57:9e:ed:b8:71:d8:
                    b9:45:03:34:ed:5a:cf:dc:ac:30:38:f0:d7:9d:5c:
                    69:9a:db:c6:1b:5e:5f:00:a7:ac:e2:d9:bc:ca:ea:
                    b6:a1:df:fc:be:87:47:e5:3a:f3:5a:d8:e1:42:a3:
                    3c:bb:c7:f0:41:99:b3:a8:b4:43:3a:83:5d:7c:00:
                    9f:aa:b1:4d:f5:f7:2a:08:c0:1c:a0:17:a8:45:23:
                    27:c4:00:ba:52:39:3d:78:1b:8e:90:13:4c:48:2f:
                    a6:b3:24:ee:3e:6c:ca:9c:0d:ba:d7:4b:66:37:6c:
                    ea:54:69:80:50:7d:fd:9b:1b:78:66:b4:22:8f:3c:
                    9c:bc:9b:7c:e0:0a:b0:c5:90:ce:a2:4c:00:ee:c4:
                    67:a5:fc:05:2e:fd:73:9c:aa:e0:40:65:2d:20:3d:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F3:E8:6C:9F:5B:45:C7:8D:17:06:79:08:E4:49:7F:27:B5:ED:6F
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:de:57:08:93:44:58:5f:0b:72:4a:36:31:2a:db:83:25:
         06:7d:b6:42:9a:77:ad:e2:b7:15:a7:90:66:ba:29:4a:c6:ef:
         9b:af:99:94:40:59:61:8f:4e:c8:ce:75:27:97:30:b6:e8:ed:
         c3:fd:ac:37:eb:23:08:73:24:dd:64:de:5a:0e:ad:87:4b:d9:
         62:10:b4:ca:3a:cb:65:bf:a8:6a:12:a1:ec:f5:e6:2b:57:62:
         5f:6f:9c:12:fc:df:8c:6f:43:ed:56:2b:6c:eb:95:69:89:87:
         eb:7b:31:7d:02:8c:73:37:4a:b5:42:ff:f6:91:19:27:84:f2:
         bb:6f:1b:ca:de:fa:cd:50:26:16:90:a9:9b:1d:43:e8:87:d9:
         8a:ce:c1:99:bb:99:cc:99:8c:48:4f:6e:38:3b:7e:cc:c8:d3:
         fa:19:23:2d:22:37:6f:4e:b5:75:0c:bb:94:ad:35:a1:5e:3d:
         0b:fa:19:b6:ca:8a:7b:30:58:c7:59:a8:60:e7:67:98:4f:e6:
         f1:98:3e:98:0d:96:c9:4c:84:2a:d1:51:59:63:c7:5c:1b:aa:
         84:00:08:41:3a:77:35:56:1b:77:b6:cd:a1:7c:29:20:73:09:
         4d:92:df:29:e9:00:78:31:97:3a:7b:10:0e:9c:7a:24:f8:9c:
         5c:26:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:56:03 2025 by rpki-client