Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa
File:                     3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          Bm4aeUGm188Q06p1C2LtKAC5o80k2eQOcl98V6CvssQ=
Subject key identifier:   B6:2D:10:63:50:82:5A:A2:5F:61:34:4D:21:E7:5A:CC:3D:7A:30:CB
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       20EEAE5F134FDF8CA332B42C5A26E87FE131E524
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        168.197.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:ae:5f:13:4f:df:8c:a3:32:b4:2c:5a:26:e8:7f:e1:31:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=B62D106350825AA25F61344D21E75ACC3D7A30CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:36:1b:07:7a:a1:d0:08:da:fb:6f:4f:7c:32:
                    ce:52:89:c7:2a:48:7e:d8:03:2a:a6:a4:35:6c:64:
                    26:a8:c0:71:9b:c9:5d:d9:d3:92:05:2d:78:13:d1:
                    dd:66:aa:35:3a:59:c3:8c:6f:5d:29:95:6a:68:a2:
                    c0:f8:58:15:fa:ef:ba:ff:00:06:d7:98:10:44:ce:
                    a7:7c:9d:3d:0e:a4:f9:f1:75:62:d5:96:0c:09:0f:
                    38:25:96:c3:dc:8f:7a:c5:8b:ec:ee:4c:6b:dd:f3:
                    40:d4:90:1e:9b:3d:c9:2a:6b:69:d8:d9:e3:1f:40:
                    75:60:a5:a8:90:5b:d8:f2:97:4b:13:fa:11:a3:8b:
                    7f:5f:ff:70:5b:f0:00:9c:f6:82:6e:e8:2d:a6:a2:
                    e0:39:6e:9c:bc:9b:b4:28:20:b3:e9:b9:c5:0a:7a:
                    14:87:26:71:03:63:83:da:cb:25:ec:fe:db:fe:d8:
                    fa:08:a1:3e:96:6f:cd:b7:24:20:46:84:72:c4:46:
                    05:4c:df:a8:62:dd:84:79:7b:bf:b2:5d:5c:05:cd:
                    51:51:4e:04:5a:b3:12:92:11:cb:40:fa:da:75:db:
                    39:a0:ad:69:12:54:80:48:e5:e2:b1:37:e4:84:68:
                    f1:cc:b2:39:16:a5:8a:12:85:ed:71:91:ed:08:6f:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:10:63:50:82:5A:A2:5F:61:34:4D:21:E7:5A:CC:3D:7A:30:CB
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:48:81:8d:aa:3c:2d:9c:04:f6:63:74:ef:60:81:2b:e2:
         00:cb:64:53:3e:20:4f:f0:45:a3:80:60:4c:fc:b0:46:f7:63:
         82:6a:52:1b:e7:04:c3:5a:6d:71:48:24:50:3b:0a:bf:98:f1:
         c1:83:de:73:df:c9:32:a8:fd:6a:24:22:d7:dd:55:aa:92:ec:
         85:9b:c5:1a:83:5e:0b:45:f7:55:d8:75:5f:cf:1d:00:01:0f:
         66:ad:e8:ca:88:1e:b8:80:e2:c3:df:4a:2b:a1:b0:70:3e:23:
         2f:86:03:16:bb:26:d5:b3:3c:5a:ef:79:27:0d:ce:c8:e2:b8:
         d9:19:b7:aa:2b:da:1e:5f:61:9b:d4:40:56:66:01:4b:c1:86:
         ec:46:2a:54:8b:65:e8:8f:6a:55:44:1f:46:52:f9:0a:7a:46:
         d9:08:19:fe:f0:a9:5e:6b:5f:c4:dd:f5:0d:ef:29:f8:75:d8:
         f8:3a:a0:a7:c7:0f:a6:6d:6b:3a:4d:fc:86:08:7f:c2:4b:17:
         79:1c:33:db:43:c2:a9:83:a6:3f:6e:54:98:f8:c6:66:04:0e:
         27:43:88:5a:5b:4b:00:71:24:39:55:d9:cf:b0:ff:cd:f3:0f:
         a2:43:2a:ae:f6:90:1a:de:47:a8:c7:57:90:a0:2e:02:c9:07:
         af:b5:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org