Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa
File:                     3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa (raw, json)
Hash identifier:          rAsxWn3TvFxFZwod5y7vJayCTIg6Cxtsx7dI2oylkYw=
Subject key identifier:   3B:61:AA:A9:B4:37:02:E1:29:4C:AD:43:5C:DC:A6:71:77:80:1A:DB
Certificate issuer:       /CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
Certificate serial:       394580C9259217348B0D21345FB14EC9AF7F109E
Authority key identifier: EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa
Signing time:             Mon 28 Oct 2024 19:43:12 +0000
ROA not before:           Mon 28 Oct 2024 19:38:12 +0000
ROA not after:            Mon 27 Oct 2025 19:43:12 +0000
asID:                     270980
IP address blocks:        168.196.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:45:80:c9:25:92:17:34:8b:0d:21:34:5f:b1:4e:c9:af:7f:10:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
        Validity
            Not Before: Oct 28 19:38:12 2024 GMT
            Not After : Oct 27 19:43:12 2025 GMT
        Subject: CN=3B61AAA9B43702E1294CAD435CDCA67177801ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:c1:a2:4b:1f:89:cc:43:d6:59:59:3d:bf:
                    29:77:1e:99:5a:36:cf:4b:19:9b:ba:5b:5c:40:bb:
                    e2:2b:55:f4:7c:ca:c5:43:f4:d6:7f:a1:69:7f:6a:
                    7c:77:64:f6:7b:7a:e7:15:08:55:03:28:03:18:b8:
                    c3:99:1d:ec:6f:51:3b:7f:ed:df:0c:84:1f:0f:da:
                    f0:7c:f1:62:da:7f:7c:25:73:af:f9:c3:f1:31:ef:
                    9a:2d:da:8b:76:0a:57:2c:61:d6:75:51:0a:55:1a:
                    70:fc:4a:c0:88:cd:ae:7c:cb:00:fa:f4:d5:5d:38:
                    b4:2c:f6:71:b2:ed:0a:b5:63:a0:ba:19:22:f5:d2:
                    cc:bc:ed:85:32:a7:02:44:20:e7:02:4b:4b:03:af:
                    ce:96:86:fa:44:ab:36:6a:e5:65:4e:b8:e7:1b:f6:
                    99:da:16:c9:d6:63:28:5a:13:81:87:14:39:c3:26:
                    a9:5c:ed:fd:5b:be:d9:00:f6:c7:e0:9e:da:04:cb:
                    b7:88:e7:ae:4b:8d:cf:47:39:78:81:91:88:2d:fb:
                    24:8f:01:c5:88:b4:09:b5:e5:29:68:46:37:1c:08:
                    65:e8:65:90:43:97:e3:61:3b:e9:e4:ac:9b:80:bf:
                    b4:67:a2:da:76:c6:b7:d7:98:20:30:52:0c:73:e3:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:61:AA:A9:B4:37:02:E1:29:4C:AD:43:5C:DC:A6:71:77:80:1A:DB
            X509v3 Authority Key Identifier:
                keyid:EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:5a:0f:1b:14:9e:83:e8:10:9d:e7:19:fe:ae:29:ef:78:35:
         9d:fe:d0:2a:e0:3f:77:85:4d:fb:10:b5:fc:4e:44:2a:e5:3a:
         42:c1:96:5c:7a:fc:ba:d7:a6:63:15:e6:48:62:60:85:a8:4e:
         72:63:ae:30:84:88:70:2f:5b:c8:b7:3c:c9:d2:e8:50:70:df:
         29:fa:9e:aa:d8:bc:5e:d6:d3:5b:9c:49:02:93:f1:51:c2:9b:
         7d:69:aa:e1:99:62:01:b3:e4:92:8b:e5:f9:9d:02:b0:f1:7a:
         c5:76:0b:ed:ed:cc:0b:5d:3a:e6:a7:e8:c3:f0:d2:ab:51:e7:
         dd:50:6b:eb:7a:3f:8d:f7:8d:b1:85:6d:05:3b:14:6b:02:a0:
         59:90:6c:2d:ba:e4:ca:c5:62:a1:93:09:67:b5:a9:dd:66:60:
         68:e6:58:f6:56:c9:2a:f3:53:8f:73:7d:d4:01:6e:b2:e5:46:
         7a:b1:5f:ec:a4:d1:1e:21:76:97:44:16:52:56:67:48:a8:9c:
         63:cc:48:f8:c1:42:74:60:e8:02:b6:aa:e4:eb:5e:34:a2:b3:
         8e:cb:5b:95:f4:5e:80:75:e8:f5:6c:24:62:d0:d6:b2:1f:a8:
         7e:13:f8:c3:1e:32:93:92:5f:57:8a:34:81:35:8b:12:f3:bd:
         e6:f4:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org