Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3136382e3233322e35322e302f32322d3332203d3e203631353838.roa
File:                     3136382e3233322e35322e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          zMYEkolN74W4V22mROJ/lB1p83jrknKDsCwGNJpQ7fA=
Subject key identifier:   81:16:6B:AD:52:F1:B6:76:B5:CA:20:7C:DE:18:22:46:D6:7C:00:A5
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       2F9E4720146DFF0A4D5F789E0C3CD160DAD0947E
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3136382e3233322e35322e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 04 Apr 2024 09:00:22 +0000
ROA not before:           Thu 04 Apr 2024 08:55:22 +0000
ROA not after:            Thu 03 Apr 2025 09:00:22 +0000
asID:                     61588
IP address blocks:        168.232.52.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9e:47:20:14:6d:ff:0a:4d:5f:78:9e:0c:3c:d1:60:da:d0:94:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Apr  4 08:55:22 2024 GMT
            Not After : Apr  3 09:00:22 2025 GMT
        Subject: CN=81166BAD52F1B676B5CA207CDE182246D67C00A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:f0:6a:f1:d3:63:e6:da:d2:9b:6f:29:ab:
                    26:e7:c7:fb:c5:86:c8:35:f4:30:4f:63:90:a9:bc:
                    e0:36:54:37:c2:c0:9a:b9:93:ac:0d:7b:ee:b1:bf:
                    03:3a:2f:cf:1a:a8:67:3e:cc:fb:03:49:4f:8b:27:
                    12:98:aa:2b:eb:a5:c3:49:ad:a2:92:97:f2:93:c2:
                    de:81:28:4d:1c:28:18:6a:4e:58:a1:39:ae:e8:ec:
                    64:a4:5c:8c:42:1a:10:d4:ad:48:2a:9d:c7:c1:de:
                    15:b7:ef:38:9a:3f:6b:83:2b:fd:54:f6:4f:3a:77:
                    ba:7e:3e:a4:dc:4c:3c:07:6a:2a:21:ac:e1:27:da:
                    24:e6:da:9c:bd:2b:4c:82:ef:30:6f:ea:89:dc:44:
                    a4:fb:67:77:6b:e9:31:68:2f:0b:70:2d:25:c0:ee:
                    60:e5:2f:db:ab:21:f4:2a:85:ac:be:81:02:88:55:
                    66:ba:21:f7:cc:80:f6:40:b3:7e:94:1f:39:e5:53:
                    05:6b:c2:2f:99:a1:b1:01:d7:b3:a9:7a:f8:05:dc:
                    9a:ab:88:07:64:40:e4:fe:75:c8:15:53:01:10:34:
                    a2:84:cd:2b:ae:c3:03:cd:c5:df:7f:fa:85:e5:87:
                    7d:25:1f:26:e5:ba:51:30:15:c8:2b:17:33:09:b8:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:6B:AD:52:F1:B6:76:B5:CA:20:7C:DE:18:22:46:D6:7C:00:A5
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3136382e3233322e35322e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:e1:1e:84:d3:b2:c6:9f:1d:53:71:57:90:9e:b4:1f:ce:
         17:b3:2b:1e:fd:5e:23:1a:4e:d5:72:b3:4c:49:be:aa:28:2c:
         b4:77:e0:8e:88:6d:7c:bd:5b:96:2b:24:e7:1d:3b:0c:4f:0c:
         1c:8d:e6:d6:3a:7d:0b:bc:bc:ff:85:68:ea:f1:0b:42:b1:47:
         b1:f2:f5:b9:b0:96:28:f6:0d:b4:df:08:68:3a:28:1f:92:39:
         43:95:fc:aa:6e:48:22:0f:76:00:4e:5c:e3:04:3f:e3:31:b4:
         b5:52:21:93:d9:0c:70:ca:15:dd:11:83:29:f4:eb:87:9b:4d:
         19:46:d1:ad:f8:65:e4:8c:47:a0:b6:40:4b:dd:44:be:60:c3:
         07:b4:d5:3d:36:4a:4e:bc:48:b2:6d:11:99:e4:25:ce:ac:bd:
         4b:76:ab:c9:d9:de:95:e1:5a:d9:af:c3:1a:08:e7:45:09:46:
         7c:00:cc:9d:10:75:2c:5b:d5:ca:37:40:40:a9:4d:71:f3:ad:
         64:cb:79:10:77:97:f0:95:2f:00:94:c2:6d:2e:b8:a2:49:d9:
         5a:65:33:6a:25:a6:c6:22:c5:b9:90:9a:74:7b:d3:4c:45:0b:
         73:3c:77:bb:55:f3:80:f5:05:3d:33:05:7d:ba:18:6f:42:b8:
         77:3e:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:49 2024 by rpki-client on console-fra.rpki-client.org