Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa
File:                     3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          ZplTzJkmxF29v16FWyJwbk96yfPa97fhyAdOui9qWZk=
Subject key identifier:   25:68:6C:9B:88:DF:B1:56:6F:35:93:B7:91:BD:47:65:16:66:F4:BA
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       117836BB11D48C3C5B93E2EAD3CE82E69192CDB6
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 03 Apr 2024 21:08:51 +0000
ROA not before:           Wed 03 Apr 2024 21:03:51 +0000
ROA not after:            Wed 02 Apr 2025 21:08:51 +0000
asID:                     262300
IP address blocks:        168.181.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl
                          rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:36:bb:11:d4:8c:3c:5b:93:e2:ea:d3:ce:82:e6:91:92:cd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Apr  3 21:03:51 2024 GMT
            Not After : Apr  2 21:08:51 2025 GMT
        Subject: CN=25686C9B88DFB1566F3593B791BD47651666F4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:74:17:b8:65:f8:dc:d8:12:b9:0f:c7:6b:
                    55:9e:a3:b7:ba:19:8c:5c:b3:48:c5:48:8d:a5:e1:
                    b3:7f:8d:31:06:8b:e7:b7:6d:be:3a:b4:94:38:99:
                    ef:64:10:a9:1c:be:69:f7:e3:0c:7c:0c:f0:cb:ea:
                    86:d2:28:9b:3c:71:47:f7:0c:f3:1c:64:a3:47:3e:
                    73:57:ad:f6:ee:b2:8a:bb:ce:a8:41:a2:9f:a9:e0:
                    7d:a2:0a:8d:9e:d3:8a:01:73:01:d0:89:05:c3:96:
                    82:dd:2f:a5:1f:44:fb:85:63:64:c1:3f:1c:d1:72:
                    10:10:b8:e3:87:36:ac:d3:83:dc:49:83:0c:8a:8b:
                    4e:46:86:c5:f8:0c:13:82:e2:b7:58:d7:b7:63:64:
                    96:8a:32:ab:33:df:65:9c:17:a4:3d:8d:3f:37:32:
                    2f:40:3f:38:91:95:db:0a:3a:9e:ad:ac:a1:82:2e:
                    c2:8c:ab:8a:42:0d:b0:4a:76:b9:e6:d5:40:15:3c:
                    f7:e8:47:42:92:05:2b:6c:d1:5b:be:a2:02:3b:96:
                    cb:b3:40:25:17:17:d7:4b:8c:94:61:ab:cf:6f:3c:
                    08:0a:b5:b4:6b:4f:e4:a4:bc:cf:d7:f8:15:ac:a1:
                    af:8b:b4:1e:97:a1:2a:5a:06:c9:77:b1:ab:c6:e0:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:6C:9B:88:DF:B1:56:6F:35:93:B7:91:BD:47:65:16:66:F4:BA
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:fd:58:96:97:cc:9d:0a:67:73:5f:28:25:9b:a0:d4:d2:
         55:02:f7:66:f9:a3:c2:1f:8e:f0:e6:ea:6e:67:ef:0c:bd:ec:
         aa:75:9a:b2:0d:56:87:0e:f9:19:cf:4e:e3:44:8c:5d:22:66:
         d5:79:ad:4e:f8:ac:a6:d3:86:91:c1:cc:13:07:17:38:1b:1b:
         17:8c:03:9f:22:95:65:ac:05:b0:0c:27:ad:d2:2f:7f:de:de:
         fb:71:20:1a:37:ff:8b:da:1e:4b:38:ba:84:61:26:d3:30:f4:
         47:06:7b:71:c9:28:b2:c8:b1:29:50:d1:f8:49:d7:45:f1:83:
         ba:9d:83:22:75:33:2d:42:62:26:a5:81:ae:5a:69:23:1f:3a:
         f5:f4:e7:ff:a8:14:a2:e9:c4:9c:30:13:bd:22:a7:06:d9:71:
         ca:1c:e9:f1:78:e6:91:f9:9b:d9:82:cc:b9:fc:7c:cf:8c:4f:
         8f:09:52:39:3f:52:a4:0f:8f:10:21:55:3b:2c:ef:d5:97:12:
         da:ae:4b:3f:15:6a:0c:69:b1:89:65:06:aa:5e:35:87:2d:4c:
         5c:79:03:72:ef:e5:8f:dc:ad:46:01:eb:0e:58:e8:2d:9c:79:
         d1:bd:51:dc:ac:f9:ba:92:bf:93:ff:24:04:0c:29:97:91:8a:
         83:b9:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org