Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132362e302f32342d3234203d3e20323633363631.roa
File:                     3136382e3230352e3132362e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          oa8GmlAHFsND0iF+p0/p6SPQLAg1qWE5I93LryvY59E=
Subject key identifier:   2F:DC:F3:33:1D:24:69:CD:AE:8C:2B:91:7A:A1:A0:BC:00:7A:05:E5
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       0C437F5E6BA518C8F762D91500EB76E8E6EA0902
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132362e302f32342d3234203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:32 +0000
ROA not before:           Thu 04 Apr 2024 01:33:32 +0000
ROA not after:            Thu 03 Apr 2025 01:38:32 +0000
asID:                     263661
IP address blocks:        168.205.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:43:7f:5e:6b:a5:18:c8:f7:62:d9:15:00:eb:76:e8:e6:ea:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:32 2024 GMT
            Not After : Apr  3 01:38:32 2025 GMT
        Subject: CN=2FDCF3331D2469CDAE8C2B917AA1A0BC007A05E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:5c:fc:6e:97:1e:0a:f7:9c:59:8d:51:b9:
                    49:d7:d4:ee:c0:3b:ea:97:cc:d6:34:06:22:43:04:
                    25:1f:77:2c:c6:f7:db:21:eb:c6:17:2d:3c:c5:6c:
                    0d:3e:f1:a1:9e:91:67:f4:88:a6:37:8e:e3:cf:10:
                    c3:dc:43:9c:da:1c:6c:68:99:04:6c:09:a3:67:1b:
                    b0:7d:12:b5:d6:fe:2d:99:df:cf:a7:84:12:b8:d0:
                    60:c6:3b:2c:4a:b2:69:7d:ce:b0:04:1e:f2:c7:40:
                    be:e6:53:f1:cc:ce:b0:ab:61:05:95:5f:57:ea:23:
                    27:22:b2:2c:81:9b:d9:21:41:c4:cd:0d:a6:bc:7e:
                    ad:00:8a:c8:5b:ef:82:a4:02:89:bf:ff:e4:21:83:
                    4f:f6:91:c5:b0:39:1f:40:b2:0e:50:65:9a:1c:d5:
                    b8:cb:72:40:9e:7b:c6:1c:3b:40:09:ae:d8:8d:f6:
                    40:6a:2a:d3:5d:0f:9a:01:0b:52:69:d3:c9:40:63:
                    16:3a:ef:9a:e0:8e:b2:e7:6e:dd:80:43:21:2d:e1:
                    43:9d:f4:37:30:95:a2:f8:b6:71:0c:53:68:e8:13:
                    86:91:d2:16:fe:2e:ba:49:f1:63:ea:43:c4:48:b8:
                    e9:12:69:a5:f1:3e:6c:68:bb:ba:b9:da:71:2d:54:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DC:F3:33:1D:24:69:CD:AE:8C:2B:91:7A:A1:A0:BC:00:7A:05:E5
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132362e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:91:f9:02:d3:4e:cc:1f:a4:b0:e0:b9:ec:a9:0b:e0:70:f6:
         1a:56:b3:a1:de:5a:be:73:da:6b:ad:c3:16:3d:d8:25:8c:86:
         8e:fa:28:01:19:5e:66:c9:30:44:0a:a9:f9:ba:44:3f:3a:2e:
         19:3a:b2:cf:01:73:d4:03:ca:40:3f:b7:5e:9f:3e:b1:68:86:
         83:2d:11:35:db:1a:e6:63:27:99:90:66:da:26:f5:d6:34:3b:
         18:fb:03:37:4f:7c:2e:55:24:97:b7:34:09:2c:e5:89:43:97:
         0f:05:39:af:72:a5:7f:95:80:b4:a9:52:e8:3e:2d:f2:2e:1e:
         b5:85:e0:3a:2e:33:80:08:e3:c3:1c:c6:96:e1:53:eb:37:b5:
         5b:eb:21:03:3f:55:d5:75:04:eb:f3:44:0a:b0:04:79:8d:96:
         1d:39:71:ef:08:4f:f3:95:06:52:d3:3a:2c:4d:fb:80:55:d0:
         d3:5d:67:26:14:64:4e:f7:fd:f8:94:a9:74:d9:fc:99:13:7c:
         f4:a1:50:7f:07:4b:d6:2b:63:ce:3a:ca:99:19:f5:a5:ea:64:
         f5:d7:86:ab:91:8d:7c:7c:29:76:a5:74:eb:c4:b1:49:93:85:
         9f:0d:d8:8f:16:90:63:19:a3:1f:53:e6:56:7d:ba:9e:a1:aa:
         a1:a2:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:41 2024 by rpki-client on console-ams.rpki-client.org