Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3332203d3e20323635323537.roa
File:                     3136382e302e3136382e302f32322d3332203d3e20323635323537.roa (raw, json)
Hash identifier:          X8K5BR5bxpYaeItlDtHJHOy1wxyp5b1pvutwGAtqBhQ=
Subject key identifier:   FC:A3:3B:0C:FD:19:9B:C3:1B:91:B4:10:96:2E:A0:A6:47:5A:B0:03
Certificate issuer:       /CN=9115D16733589A392CF57AE845CBFB93A02A8835
Certificate serial:       495A6ACD3CEF7FE1AD11F7E3BAA69720EF9DE304
Authority key identifier: 91:15:D1:67:33:58:9A:39:2C:F5:7A:E8:45:CB:FB:93:A0:2A:88:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3332203d3e20323635323537.roa
Signing time:             Thu 21 Nov 2024 18:05:58 +0000
ROA not before:           Thu 21 Nov 2024 18:00:58 +0000
ROA not after:            Thu 20 Nov 2025 18:05:58 +0000
asID:                     265257
IP address blocks:        168.0.168.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.crl
                          rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:6a:cd:3c:ef:7f:e1:ad:11:f7:e3:ba:a6:97:20:ef:9d:e3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9115D16733589A392CF57AE845CBFB93A02A8835
        Validity
            Not Before: Nov 21 18:00:58 2024 GMT
            Not After : Nov 20 18:05:58 2025 GMT
        Subject: CN=FCA33B0CFD199BC31B91B410962EA0A6475AB003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:3b:db:6a:ce:4c:38:86:a3:08:d3:60:e8:
                    18:68:62:3c:04:5a:5d:f1:d2:10:f8:65:33:97:92:
                    24:b1:b9:66:d7:f4:3f:de:63:d1:95:fd:17:87:3d:
                    e0:40:dc:da:e8:1c:c0:4a:70:26:dd:27:9c:16:45:
                    18:c6:6b:4d:c6:00:78:17:43:e6:90:3a:29:fa:16:
                    3a:3b:40:af:5a:77:24:74:7b:3a:d2:e6:61:8b:62:
                    19:00:77:4a:00:f9:15:5d:b5:3f:f2:dd:de:f0:66:
                    26:5a:da:8b:c8:17:c1:fd:7e:15:1f:9f:04:4f:97:
                    d5:f6:b5:bf:a1:30:57:8e:dd:1c:c2:f2:4b:24:00:
                    43:ca:ad:8e:a9:57:d0:d1:de:48:6b:7e:da:06:03:
                    dc:fe:52:0c:ad:a1:38:e4:27:e1:6d:09:72:86:8e:
                    cd:9e:b3:e6:d7:48:e3:8f:1f:a3:ea:1a:6d:08:ad:
                    30:d7:9e:c9:c8:04:bc:a3:29:de:2a:5d:d9:0e:4b:
                    58:46:a0:d2:b7:9d:60:63:72:e3:e4:9d:c5:49:38:
                    e4:b7:7f:e9:e4:fd:ee:21:bb:76:c6:5e:22:b0:58:
                    e5:d7:af:a8:f8:e0:37:3f:d6:3a:c6:3b:d4:1f:16:
                    a4:08:eb:02:12:ae:ce:ce:20:79:85:cd:34:0d:df:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A3:3B:0C:FD:19:9B:C3:1B:91:B4:10:96:2E:A0:A6:47:5A:B0:03
            X509v3 Authority Key Identifier:
                keyid:91:15:D1:67:33:58:9A:39:2C:F5:7A:E8:45:CB:FB:93:A0:2A:88:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3332203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:ae:64:37:5c:02:2e:77:01:db:2c:ff:98:c3:69:ce:42:
         52:33:ac:6e:27:38:f7:7e:90:c1:b8:58:76:3d:9f:28:89:3f:
         aa:66:a8:da:67:6b:a3:73:75:df:ad:82:d1:39:bd:f7:26:35:
         0e:a6:7c:2f:82:98:07:74:fb:78:1e:16:e8:b7:38:16:01:39:
         de:a6:5e:ab:a5:b5:62:aa:2c:4b:57:0d:90:43:ab:52:20:32:
         2d:8d:51:70:75:9b:55:48:70:d7:c3:8c:51:4f:83:10:e0:df:
         af:f8:07:5b:5c:c7:17:7f:34:0b:ef:e4:cb:8e:22:29:78:f6:
         44:fc:0f:3e:d3:f9:30:0c:15:79:0a:90:83:a1:19:06:09:41:
         fa:1e:91:1d:33:c3:70:a5:cb:47:f8:b9:69:64:97:59:bf:95:
         d0:0d:8b:15:fa:a0:6e:d7:8b:e3:b2:88:bd:7f:e0:0a:4f:be:
         2b:43:06:96:01:a3:27:68:de:f5:f5:b4:c0:13:4d:a3:be:8d:
         9e:ac:f8:88:d4:6f:c8:5b:ac:e6:8c:ec:c5:0a:da:c8:51:16:
         ec:cb:c3:6e:c0:8b:66:aa:e1:f0:33:0e:d5:70:03:ee:a7:77:
         9f:49:f1:e1:39:35:e3:8f:fd:f0:bd:e9:36:3f:9f:1f:5d:89:
         ea:43:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:15 2024 by rpki-client on console-ams.rpki-client.org