Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3233203d3e203238363036.roa
File:                     3230312e32302e3136302e302f32302d3233203d3e203238363036.roa (raw, json)
Hash identifier:          muT0E/jtcLGXPA1TxIYw04xzIcEDfj3pY0zEHTmt0no=
Subject key identifier:   1B:D4:53:DE:8E:C6:92:87:B9:A0:4E:B0:F0:F6:C1:D4:EC:A1:06:12
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       3A62D718B8DBB587A49890BE940FCB43136DA460
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3233203d3e203238363036.roa
Signing time:             Thu 26 Sep 2024 23:23:00 +0000
ROA not before:           Thu 26 Sep 2024 23:18:00 +0000
ROA not after:            Thu 25 Sep 2025 23:23:00 +0000
asID:                     28606
IP address blocks:        201.20.160.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:62:d7:18:b8:db:b5:87:a4:98:90:be:94:0f:cb:43:13:6d:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Sep 26 23:18:00 2024 GMT
            Not After : Sep 25 23:23:00 2025 GMT
        Subject: CN=1BD453DE8EC69287B9A04EB0F0F6C1D4ECA10612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:b6:15:25:21:c0:db:f1:57:38:57:3d:ff:
                    4a:be:cd:d9:e5:d9:67:8d:41:3f:b4:9f:e1:ba:dc:
                    26:9f:b8:62:08:70:da:8d:30:bd:a4:b9:2a:73:f4:
                    c4:a0:69:4d:1a:42:f6:35:92:7e:c4:b0:ce:87:5a:
                    c3:f6:e7:55:99:9a:1f:1b:e8:98:09:c6:c8:3c:35:
                    bf:09:a4:99:76:ed:d0:17:ab:28:bb:bd:59:ed:0f:
                    3b:f1:b5:d9:31:00:b0:8c:f5:86:a7:20:6c:35:47:
                    17:41:61:9c:50:fb:7d:e0:84:fa:f3:7c:65:cc:b4:
                    e6:f9:a3:c4:45:d5:df:26:0a:65:e7:78:8c:35:b7:
                    35:c7:63:22:db:c2:31:74:91:a0:0d:11:8e:07:ab:
                    dc:e4:cb:c5:aa:cd:e2:45:3a:78:10:91:4f:4a:51:
                    d9:84:37:bb:3c:81:bd:da:04:a9:9b:d4:19:28:74:
                    cf:77:54:d2:05:ba:46:b9:44:aa:c9:6f:87:eb:fc:
                    8a:68:7c:db:f9:16:a1:8f:80:38:85:4e:0c:ff:cc:
                    f6:aa:bb:04:dd:d3:10:bb:62:34:a8:58:e7:fc:ec:
                    3c:70:ee:cb:74:cd:e3:17:00:57:d8:2a:6c:c4:b5:
                    72:95:52:6c:22:44:27:63:5b:0b:89:dc:67:47:1e:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D4:53:DE:8E:C6:92:87:B9:A0:4E:B0:F0:F6:C1:D4:EC:A1:06:12
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3233203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:3b:9b:db:48:a9:11:48:ab:96:dd:a2:11:9d:a2:d4:ee:
         93:2b:13:29:32:3b:58:b8:2c:55:63:d8:6f:ec:e4:6a:f1:aa:
         f2:3d:1a:ed:67:9a:ea:46:72:4a:65:d3:91:da:eb:3c:29:4f:
         b1:d2:91:b3:99:52:2a:c0:e2:f3:8f:7f:da:fc:b9:e1:be:8e:
         4c:6f:d7:1c:e9:b6:73:16:d7:3d:2b:01:b9:02:14:71:09:60:
         0b:53:f0:f3:0a:4d:eb:39:80:03:0a:d3:49:2b:18:94:b4:1b:
         3e:75:a1:28:8c:13:f0:7d:3d:79:44:1a:db:21:a8:80:f0:02:
         b3:86:53:4d:df:0c:de:c4:0c:20:cb:7e:d1:a1:26:4c:cb:5f:
         7d:4d:4d:6c:a7:4a:3a:3a:b8:b0:cf:47:b9:5d:a2:6d:5b:65:
         a6:d4:8a:54:06:6e:b8:6e:88:a0:6e:0b:dd:e4:a3:b3:2c:9e:
         65:98:c2:ad:8b:3a:08:7a:51:1d:01:3b:e6:3f:a0:3e:43:43:
         e7:66:b7:6f:61:da:87:e3:ee:81:fc:b7:f3:ed:cf:b5:b6:98:
         8d:81:d1:5e:a0:1c:0e:a0:13:16:a4:74:05:20:54:a1:48:a3:
         4b:8d:56:44:55:3e:ad:28:dd:e8:56:ab:76:87:c1:09:b3:71:
         1f:56:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org