Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa
File:                     3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          dOVTxCoZLFpsnLtv8U6VM2LmM+dEAjaRb+tNncoHhXw=
Subject key identifier:   73:FF:BF:FE:D6:53:6A:B7:12:39:7F:C7:67:0F:3E:B1:C9:AE:1B:7C
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       44C9B61FC7E6DB3384A605C87935801C83E7EE5A
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:40 +0000
ROA not before:           Thu 08 Aug 2024 00:36:40 +0000
ROA not after:            Thu 07 Aug 2025 00:41:40 +0000
asID:                     263641
IP address blocks:        168.205.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c9:b6:1f:c7:e6:db:33:84:a6:05:c8:79:35:80:1c:83:e7:ee:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:40 2024 GMT
            Not After : Aug  7 00:41:40 2025 GMT
        Subject: CN=73FFBFFED6536AB712397FC7670F3EB1C9AE1B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:06:9e:41:1f:97:7b:40:c4:4e:f0:71:a4:
                    95:7f:f0:7d:7b:4a:31:95:05:6f:47:50:78:97:06:
                    c4:09:8e:57:21:55:ee:b7:da:95:cf:83:18:70:10:
                    34:7c:b0:1d:57:56:a9:de:69:65:d9:f1:4a:6c:a9:
                    b5:1a:da:94:07:04:87:04:19:ce:2f:3e:34:7c:75:
                    e4:83:18:c3:90:03:b2:0c:ee:57:c8:0e:06:2f:e3:
                    12:e6:98:27:91:3d:f0:a8:c1:e1:39:5c:d2:be:9e:
                    13:2b:c0:e2:13:fb:63:d6:9b:da:f0:84:79:94:b0:
                    67:78:dc:8b:05:9e:52:e1:d0:88:bd:60:f8:92:e0:
                    92:f1:4c:3d:b8:b8:60:7f:cc:a9:b8:30:a0:0e:25:
                    1d:fd:c0:b3:b8:d0:41:b5:ab:88:fc:0f:fb:58:64:
                    70:c0:2c:79:dc:3e:23:40:8a:5f:38:1a:fa:0c:34:
                    e1:b8:70:4d:77:e8:d1:fa:23:e7:3c:a4:54:53:d5:
                    b9:0e:37:5f:4a:34:e2:d0:29:3f:c9:11:3d:43:5b:
                    83:a9:66:04:c3:b8:4d:94:26:8e:a3:73:8f:c0:2a:
                    04:b6:f3:b2:0f:20:b8:41:83:3e:a5:30:6d:94:9d:
                    44:57:f6:be:5c:09:48:1f:c3:b1:03:96:29:5e:ef:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:BF:FE:D6:53:6A:B7:12:39:7F:C7:67:0F:3E:B1:C9:AE:1B:7C
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:fe:b9:da:6c:81:ca:d7:b0:4a:7d:8a:49:88:9e:9b:7f:
         d2:e0:42:7d:f1:f1:af:c4:c5:d8:35:7a:f8:0d:e3:ab:ce:2e:
         38:26:c0:a5:05:f8:37:50:13:c5:bd:22:aa:a1:00:bf:ee:65:
         7f:68:5f:1e:5f:72:b6:07:26:e0:86:f5:fb:e8:a2:d2:1c:c0:
         70:fa:92:52:13:bf:2e:bd:52:84:ff:f1:84:b1:7a:58:42:30:
         a5:1a:0c:4f:0f:fa:2b:3c:53:fe:23:68:fd:a9:bb:ca:a6:24:
         61:a2:28:54:1b:56:56:cc:b6:22:b3:42:c8:5a:63:0a:a4:b2:
         ca:03:8d:8a:e1:f0:dc:03:54:b8:c7:68:84:ea:0a:3f:e9:8f:
         73:b1:e7:83:ef:e3:a4:37:3b:54:82:f8:6b:11:0d:c7:65:49:
         3d:93:d1:0e:7e:af:07:d3:d8:56:69:e3:b3:ca:3b:ac:dc:5a:
         33:7f:a4:73:e1:ec:17:62:ab:da:95:5c:87:0b:20:c4:a0:7d:
         c1:d2:fa:52:07:a4:55:bf:96:7c:d5:81:f3:47:04:04:fc:a8:
         89:2a:a0:35:5e:37:e2:fd:da:c6:e9:89:f2:f2:19:f7:d1:fa:
         18:fa:e0:29:e2:ad:9a:6f:03:10:ab:f1:cb:1e:33:55:0b:c7:
         5a:c3:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org