Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
File:                     3136382e302e39362e302f32322d3234203d3e20323635323334.roa (raw, json)
Hash identifier:          ktRroli4DC3kwMPtXmjEFJhjt4i56LrUNokNoJBMEyU=
Subject key identifier:   07:10:AC:FF:20:D8:39:88:37:7A:7F:97:9B:83:EE:2A:D0:5A:B3:0C
Certificate issuer:       /CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Certificate serial:       16AC081B762FB3FEB0F1A4B8B628C420AA79940B
Authority key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     265234
IP address blocks:        168.0.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl
                          rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ac:08:1b:76:2f:b3:fe:b0:f1:a4:b8:b6:28:c4:20:aa:79:94:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:bb:74:4a:20:af:a8:d5:da:6e:b1:90:67:
                    cd:2f:fc:3d:75:3c:5c:2d:e4:58:00:c6:5b:fc:cd:
                    3b:43:a6:54:64:10:9a:d6:8c:24:e3:e6:88:19:bb:
                    41:53:fb:27:74:5a:ee:57:7a:f8:de:21:4a:46:d1:
                    c5:b9:81:da:fe:71:dc:67:f4:c9:59:d7:a2:a3:b7:
                    d2:36:ff:eb:99:db:ee:58:d3:c8:a9:2d:13:45:dd:
                    5f:07:d1:1f:38:ee:a8:42:dd:56:71:ee:75:1f:0c:
                    9f:fc:c4:8b:20:b6:2e:01:94:b4:54:9c:24:70:c1:
                    b0:f1:fa:b4:79:aa:c9:fa:7e:8b:e4:92:17:9d:ae:
                    f9:69:9b:81:86:99:a5:87:52:e8:8d:99:f2:32:4f:
                    04:28:59:b9:32:50:0c:72:88:31:3e:14:df:04:4b:
                    f0:58:73:83:59:15:c4:6a:d5:8d:45:a0:7c:c7:a2:
                    68:1a:ed:fc:46:9b:64:8a:d1:4c:b5:95:ea:70:89:
                    46:a4:97:39:05:7a:13:c3:e1:34:f6:8b:ca:2b:29:
                    53:8a:9f:a5:ad:dc:a0:fd:6f:e8:97:30:43:db:88:
                    17:5a:6a:a9:a3:93:6f:cc:89:6c:ca:d7:f3:4a:03:
                    07:32:cd:65:e2:b9:5f:f6:e1:05:77:9c:ac:c1:32:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:AC:FF:20:D8:39:88:37:7A:7F:97:9B:83:EE:2A:D0:5A:B3:0C
            X509v3 Authority Key Identifier:
                keyid:FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e8:ce:98:2d:63:c1:45:3b:75:5d:cf:65:7b:b4:de:3d:c3:d6:
         0d:9b:83:74:61:0a:5c:66:db:68:bd:93:a0:f3:df:f3:0b:0f:
         76:91:8f:14:10:14:73:12:b7:05:0b:6e:d5:09:ee:2c:f4:b5:
         61:79:89:89:b7:4e:8e:0e:9e:df:af:53:96:8c:59:cb:71:8c:
         97:4a:ba:fa:9d:b0:99:c7:fe:23:79:2a:fa:60:67:ba:be:52:
         fb:2e:ff:a2:53:f8:18:dc:bf:f1:2d:a6:4f:fe:69:a4:29:dd:
         cb:05:e4:9b:32:d8:0b:2a:cd:54:36:d2:ef:52:c5:d3:72:54:
         7d:3c:89:b5:c0:63:dd:27:88:19:bb:54:66:48:12:c9:14:05:
         42:d0:a3:c1:a9:f2:b0:18:fb:4b:9a:ef:f7:9a:b7:24:a0:00:
         f4:35:ca:43:9c:1a:a5:ec:cd:4b:c0:a7:88:6f:9c:e8:5c:c0:
         8f:cf:2e:af:81:ac:e0:fd:ad:8a:27:9c:ef:22:2c:dd:6d:32:
         e5:65:5b:2e:9f:6b:4b:53:04:03:ae:4d:9b:11:2d:e2:19:12:
         55:4c:15:d1:be:fe:77:85:fe:5f:cd:a5:b1:3c:c4:0d:2a:bf:
         88:94:26:23:04:7e:8a:56:db:ae:66:d1:96:6a:80:79:e4:e8:
         16:fc:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org