Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3234203d3e20323733333039.roa
File:                     3136382e3232382e32342e302f32322d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          CDWQr93/NPFrZxO83HZD9BOIW4AQzfwT8FhT+nvI7rc=
Subject key identifier:   EF:1B:47:A1:8A:8D:57:3E:22:9C:31:55:07:AD:57:9B:D5:95:48:2F
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       24D05EFB855B4B8B8DFC1847F48AD48D03EA41F0
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3234203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 14:51:43 +0000
ROA not before:           Thu 09 May 2024 14:46:43 +0000
ROA not after:            Thu 08 May 2025 14:51:43 +0000
asID:                     273309
IP address blocks:        168.228.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d0:5e:fb:85:5b:4b:8b:8d:fc:18:47:f4:8a:d4:8d:03:ea:41:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 14:46:43 2024 GMT
            Not After : May  8 14:51:43 2025 GMT
        Subject: CN=EF1B47A18A8D573E229C315507AD579BD595482F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:ed:4c:be:e5:2d:a9:fd:bf:67:6d:e9:0b:
                    18:6a:76:30:39:4d:5d:4b:e5:0f:2f:4c:cd:fd:43:
                    a7:8f:e9:82:59:e1:2c:35:c6:89:6d:ad:7d:00:ae:
                    f9:b0:5a:00:70:55:b1:f2:4b:44:16:c3:f8:84:1a:
                    77:0f:20:86:a2:6e:09:6c:c6:a4:d0:0d:04:e0:73:
                    ba:76:42:49:a8:86:88:39:4d:5b:b6:89:26:f4:24:
                    14:5e:df:3b:2c:07:fd:64:63:a3:cd:23:0e:59:31:
                    82:19:17:5c:5f:dd:31:70:97:ff:ba:cd:5c:a0:82:
                    35:14:3d:5b:4a:c7:3b:29:26:47:9e:23:ec:5b:23:
                    da:28:15:12:4f:5d:fc:34:cb:c3:9d:bc:2a:76:e5:
                    a9:cd:ba:06:19:ae:2a:33:ad:d9:46:2c:bc:83:91:
                    32:1d:f2:46:27:e4:2e:ef:b8:76:a3:0d:e0:47:64:
                    11:96:7b:b5:e6:f7:ec:da:c1:40:dd:fd:fc:e7:84:
                    8b:57:75:86:a5:5b:e9:e8:bd:33:88:a7:6d:3e:6d:
                    59:b2:a9:3a:dc:e8:d0:45:20:49:52:60:d6:38:63:
                    60:4c:9a:40:b3:31:8c:65:72:a2:db:e6:63:6f:c2:
                    dd:f7:9e:7f:10:ba:16:d4:7d:44:86:7e:01:d2:c8:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1B:47:A1:8A:8D:57:3E:22:9C:31:55:07:AD:57:9B:D5:95:48:2F
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:23:0f:b3:1c:50:ed:05:93:44:55:e3:04:8b:5e:3b:18:d8:
         c9:fc:43:a7:b0:b2:21:cd:e0:08:40:8b:c4:f9:ff:08:98:e9:
         9b:ba:93:76:9e:55:03:e0:26:38:ac:17:88:c1:3b:2f:74:0b:
         df:45:5f:53:0d:91:13:f5:c0:99:4f:e7:2c:fa:84:14:c5:0b:
         f9:35:21:08:3a:bb:96:3d:67:18:9f:c2:da:63:65:71:f9:bf:
         3f:fe:d1:96:76:aa:22:5a:a2:9d:4c:0b:45:04:3f:80:c1:05:
         f6:9c:4e:6d:fc:25:10:b9:7c:0a:b1:fe:4d:a4:c3:6f:94:99:
         85:a4:08:32:a0:f9:a2:dd:30:85:6c:e9:c0:38:b5:f2:07:b2:
         53:a5:50:ec:3f:cf:9f:9c:1b:44:41:12:3e:88:52:35:94:14:
         c6:cf:50:5e:c7:3e:77:91:91:6a:2d:d6:7a:e2:51:99:75:ac:
         a0:99:ce:47:fb:7b:2f:86:da:ec:e8:7f:6e:e6:da:93:cf:c7:
         fa:ed:ba:72:97:c1:52:e7:3a:5a:13:be:ae:b4:72:a8:8d:05:
         55:36:08:7d:d4:fa:7f:71:07:26:51:42:a4:16:31:2b:5a:94:
         22:11:7b:af:de:4a:f6:ce:f9:f9:6d:d6:a5:35:31:28:ee:6a:
         64:ba:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org