Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
File:                     3136382e3232382e33362e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier:          fFfLnlHSFe2eRrZbVvT5xSZQeBgwl7E2Q3Uw+QM43+I=
Subject key identifier:   40:E6:00:A3:27:88:81:F4:81:8C:3A:B9:02:3F:C2:8F:0A:82:44:E9
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       30FB330B7B2604DAA2A097C6C499E1FD47331782
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
Signing time:             Wed 29 May 2024 18:23:52 +0000
ROA not before:           Wed 29 May 2024 18:18:52 +0000
ROA not after:            Wed 28 May 2025 18:23:52 +0000
asID:                     61794
IP address blocks:        168.228.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fb:33:0b:7b:26:04:da:a2:a0:97:c6:c4:99:e1:fd:47:33:17:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: May 29 18:18:52 2024 GMT
            Not After : May 28 18:23:52 2025 GMT
        Subject: CN=40E600A3278881F4818C3AB9023FC28F0A8244E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:dd:e5:aa:42:28:15:ac:cb:7c:97:08:b0:
                    89:c3:1d:ee:3f:1b:3f:2a:2a:e8:0d:51:a1:8e:47:
                    d5:13:40:d0:72:b6:33:ec:b7:a7:5f:70:d8:ab:c3:
                    08:c8:6e:fe:51:c8:17:08:2d:4e:4d:f2:6a:24:86:
                    69:13:df:cb:fe:41:33:33:93:a4:7a:be:bc:3a:64:
                    fc:2b:eb:3f:57:47:7c:83:2d:36:a4:71:ef:28:0b:
                    62:80:d2:50:a6:31:f9:01:48:48:bd:13:38:19:8a:
                    23:70:63:ca:86:74:08:6a:94:a3:6e:a8:66:8f:6e:
                    21:b3:5c:e9:df:ca:b1:2f:1b:7a:43:6b:51:88:17:
                    a3:ad:ef:e0:5e:8e:89:66:29:c6:ea:0e:ba:d2:a4:
                    d3:ac:72:22:3f:c7:4f:7b:8a:4b:4f:28:6d:f1:56:
                    3d:22:02:3f:7b:fc:45:92:98:fd:ef:91:fc:13:39:
                    90:ae:0a:0d:d0:b6:36:0f:63:4a:8e:cf:68:dc:10:
                    5b:74:a2:c6:d6:1c:0e:78:2a:a6:42:35:50:5c:28:
                    e6:80:dc:d3:04:b8:ae:cd:72:d4:de:af:86:28:f7:
                    1c:35:f0:06:9d:c1:ed:fb:2f:89:ca:1a:20:6f:e6:
                    98:e6:f3:e0:ce:bb:c6:40:1b:7d:20:f2:d5:f7:74:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E6:00:A3:27:88:81:F4:81:8C:3A:B9:02:3F:C2:8F:0A:82:44:E9
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:28:1f:31:a0:73:43:f5:ac:dd:09:cf:cf:24:40:ec:ec:
         ff:c9:0e:05:90:80:3a:26:dc:5e:97:26:a8:ce:43:83:fc:ed:
         33:4f:ab:57:74:91:60:88:d4:ef:da:42:5e:de:e8:8f:d3:a4:
         96:6e:ed:59:f2:76:c2:60:f7:ce:76:98:f9:a2:db:73:07:2e:
         1f:f8:24:a1:de:46:c6:ce:33:7a:d9:35:d8:90:ad:a0:15:2d:
         d3:79:8f:3b:38:a8:b9:95:a0:d2:25:46:9b:ac:e2:15:75:db:
         7b:67:a4:aa:bf:b0:86:3f:31:4f:4c:87:31:e9:4d:1f:e8:ae:
         9c:5f:a5:82:28:ba:cf:e8:0b:78:d0:83:3a:ae:50:5a:5e:41:
         ec:86:1d:34:c9:24:ec:83:6f:24:28:f7:c9:dc:94:d2:38:db:
         c6:ef:64:d6:7c:2f:00:c3:cc:30:c4:b4:68:e7:7f:75:fa:e4:
         52:ad:c7:02:30:81:df:65:3e:70:30:04:89:e8:71:e5:e1:1f:
         37:3c:a7:75:97:17:1c:f9:99:bd:2c:fe:97:29:5a:24:04:99:
         19:e1:b5:f0:da:01:01:63:d4:6f:28:28:14:69:4a:3b:95:4b:
         83:60:f4:95:66:27:0e:97:e3:61:30:c8:31:69:df:f2:e5:ad:
         7d:b9:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 08:28:00 2024 by rpki-client on console-fra.rpki-client.org