Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa
File:                     3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          Idjjkx4JDqGuuT9hvYXQpU9kZKLPmUyRH3RIN9/yBvA=
Subject key identifier:   4F:0E:EB:6D:7D:FE:1D:DB:B9:ED:E1:04:9A:F0:4A:FD:39:B8:62:A6
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       232D0D5B7EA5333F25595C300FEB994E95F14D3B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 18:00:26 +0000
ROA not before:           Wed 08 May 2024 17:55:26 +0000
ROA not after:            Wed 07 May 2025 18:00:26 +0000
asID:                     273309
IP address blocks:        168.228.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:0d:5b:7e:a5:33:3f:25:59:5c:30:0f:eb:99:4e:95:f1:4d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 17:55:26 2024 GMT
            Not After : May  7 18:00:26 2025 GMT
        Subject: CN=4F0EEB6D7DFE1DDBB9EDE1049AF04AFD39B862A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:f6:cc:3f:6b:97:4a:d5:4e:f6:11:a2:67:
                    b3:01:80:03:40:6f:07:32:76:5e:6d:58:69:df:22:
                    28:ec:10:9e:8c:8e:74:0f:bd:90:ea:72:d2:fa:31:
                    96:38:08:93:d0:5e:dd:f3:a9:d1:aa:0d:b6:62:2e:
                    1e:00:c6:22:28:6a:a3:92:8c:e3:07:2c:7c:03:05:
                    97:b7:85:4a:7a:0b:c8:00:c4:d4:b5:63:0b:45:02:
                    ac:76:7d:8a:16:f8:da:8e:35:cc:0f:ab:49:37:a0:
                    f0:4c:28:07:3c:90:49:96:63:36:48:56:70:1a:4b:
                    37:e8:97:2d:17:21:2b:c1:11:c0:c7:ec:05:7c:2c:
                    fa:ff:25:ee:de:e4:53:fb:62:42:db:a1:50:77:2d:
                    bb:81:b1:5b:1a:49:da:49:a1:a5:d9:99:35:e1:ea:
                    a8:fa:7c:5f:c5:b0:42:ab:27:66:6c:b6:56:c7:96:
                    05:b1:27:ef:8d:03:bb:02:a3:3b:a1:2c:8c:0f:23:
                    7e:7d:24:f2:b3:18:2f:a8:a5:fa:f3:fb:96:c3:47:
                    77:90:3e:82:52:92:51:14:f5:67:68:39:56:20:ec:
                    82:38:46:7d:c3:ab:35:f0:29:e0:67:99:3a:fa:88:
                    79:c9:f7:43:7a:68:a6:fd:8c:b0:17:fc:cc:a4:a4:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:EB:6D:7D:FE:1D:DB:B9:ED:E1:04:9A:F0:4A:FD:39:B8:62:A6
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32362e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:30:76:90:60:f2:80:d2:04:8c:72:ec:44:f3:e9:0c:9b:
         eb:88:30:e4:d1:44:75:67:fe:2f:d6:e7:4c:64:67:4b:e0:e7:
         00:8b:17:be:41:53:52:73:b8:30:e1:ce:df:62:78:c4:30:86:
         0b:01:55:53:30:ff:62:d6:8a:4a:7e:a3:13:bb:67:92:5b:52:
         c3:95:33:c5:3b:a8:18:1d:58:13:5f:48:95:e5:84:c1:b7:7b:
         32:8b:7a:24:eb:0e:e3:5a:5e:8f:21:ef:1e:94:ae:c3:ca:24:
         30:78:00:fe:69:7f:f4:5a:5f:f8:af:19:60:f7:44:56:dc:4e:
         91:7e:41:61:0d:c0:67:59:53:ab:8c:44:d3:29:44:02:1f:be:
         23:bc:f8:d0:e1:bf:49:53:9d:fe:6b:26:b2:6b:ab:72:6f:91:
         ea:36:37:40:89:e3:ac:a0:b3:e5:00:cd:4d:0a:4b:a8:c8:af:
         42:43:49:25:e9:bf:93:f0:ac:c4:ca:bb:c9:98:6e:c2:46:12:
         b7:dc:c1:03:f6:15:e3:a4:b0:88:99:ff:a9:d3:78:ec:80:4f:
         1b:d5:89:80:f6:30:f9:de:77:a3:27:a0:df:70:ae:6a:0d:6a:
         3b:e8:df:39:eb:e1:4f:ac:1e:40:df:b2:a9:6d:c1:77:75:73:
         9b:5e:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org