Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa
File:                     3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          VFXSPyPxc6AaTsGhcaBVB01cN6fy2CiZ4xqRDXJrf3I=
Subject key identifier:   68:F7:63:52:A5:74:58:DD:92:29:CC:D1:5C:8B:35:69:64:A0:38:87
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       57D5305BF8992485BCAF6E40C38ABC7159036313
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:28 +0000
ROA not before:           Thu 04 Apr 2024 01:33:28 +0000
ROA not after:            Thu 03 Apr 2025 01:38:28 +0000
asID:                     263661
IP address blocks:        168.205.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d5:30:5b:f8:99:24:85:bc:af:6e:40:c3:8a:bc:71:59:03:63:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:28 2024 GMT
            Not After : Apr  3 01:38:28 2025 GMT
        Subject: CN=68F76352A57458DD9229CCD15C8B356964A03887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:1c:43:18:d9:41:46:01:fc:c5:ca:68:62:
                    3e:af:09:95:fb:75:a4:e8:5c:ef:2c:d0:a6:f4:b8:
                    b6:22:21:05:4d:db:04:4a:71:0b:fa:fe:7b:be:69:
                    eb:a0:42:aa:27:63:9d:6b:f2:a5:37:40:a8:9e:47:
                    7a:47:23:44:3b:39:b9:3c:3a:02:e0:54:44:50:52:
                    96:43:83:25:b9:29:bd:b9:01:d8:39:fb:56:12:44:
                    1f:32:bc:2d:37:8c:bf:f1:d3:e9:80:2a:5b:9c:1b:
                    b6:36:52:38:57:f3:87:9e:96:76:f6:5e:1a:f5:f3:
                    16:4f:81:f4:93:00:d6:5b:a0:90:d8:b9:ff:68:77:
                    11:d7:cd:95:6c:3f:80:01:d9:de:bb:70:71:e9:66:
                    c5:ed:96:f6:74:5c:ee:3c:6b:3e:55:1c:9b:b8:07:
                    64:5b:8d:6c:e9:70:da:e0:ac:e4:13:63:83:b0:d2:
                    60:a4:0e:1a:ab:e6:ef:c6:91:47:ef:78:d1:0e:b3:
                    06:2a:88:c7:f4:0d:b4:41:53:e9:65:6f:cb:e1:89:
                    5c:54:b6:b1:98:f0:d3:89:8f:c2:d8:a0:ef:08:e1:
                    25:99:d1:83:f9:1f:23:8a:23:b4:af:32:de:9c:11:
                    b2:bf:99:cc:5d:68:2a:38:d6:07:70:d8:a2:5a:f4:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F7:63:52:A5:74:58:DD:92:29:CC:D1:5C:8B:35:69:64:A0:38:87
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132342e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:a9:f9:0c:2c:77:be:64:8d:2b:08:7e:40:42:f8:b8:e9:
         ff:54:04:a8:77:51:0b:44:d7:eb:8b:bc:b9:29:51:42:b1:a4:
         1f:f9:87:e0:30:8a:fe:ab:c7:c5:64:dc:d9:b5:24:67:07:1f:
         1c:23:0a:a6:f3:6f:2d:f1:da:18:19:64:20:7e:e0:ca:3b:64:
         9e:70:d8:d6:74:ac:32:54:81:5f:56:0d:ce:aa:2e:47:6b:71:
         58:c1:23:65:ed:28:69:53:55:4a:92:62:58:ba:2b:d2:08:6c:
         1d:24:16:d8:ab:a1:03:ca:6b:1e:da:0b:6f:6c:b7:6b:46:ab:
         33:39:ad:ac:62:47:ee:9b:d4:a0:c6:a5:c6:70:a0:9d:a7:ee:
         52:b7:a9:f0:1a:67:d5:1c:2a:c8:57:89:09:17:5b:68:2e:34:
         9f:de:96:34:6b:94:e5:68:62:6d:af:d0:45:bb:77:16:37:85:
         ff:7b:d3:72:10:c2:1d:be:17:a7:e5:02:c4:6e:56:7b:40:dd:
         e4:4e:ee:39:7c:76:fe:74:5e:7a:1c:7b:d8:19:8b:27:c5:f1:
         90:97:eb:12:26:03:35:f4:54:4e:36:a5:3c:d0:1f:ca:16:c6:
         eb:80:a4:38:ed:81:62:11:c0:ff:89:bc:d1:0e:b9:f8:a2:51:
         c2:31:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org