Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32322d3232203d3e20323633303738.roa
File:                     3138362e3233332e3136382e302f32322d3232203d3e20323633303738.roa (raw, json)
Hash identifier:          LQfhWaRow0wqAeU8bvdsay/COC+aeqMIwZh5NemY284=
Subject key identifier:   DF:8F:C4:B0:BC:7B:54:BC:99:05:6B:78:6B:9C:06:37:09:65:E2:7A
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       2DD82840BA63D019264F6F21985F61882D4F2F24
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32322d3232203d3e20323633303738.roa
Signing time:             Thu 04 Apr 2024 17:56:43 +0000
ROA not before:           Thu 04 Apr 2024 17:51:43 +0000
ROA not after:            Thu 03 Apr 2025 17:56:43 +0000
asID:                     263078
IP address blocks:        186.233.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d8:28:40:ba:63:d0:19:26:4f:6f:21:98:5f:61:88:2d:4f:2f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Apr  4 17:51:43 2024 GMT
            Not After : Apr  3 17:56:43 2025 GMT
        Subject: CN=DF8FC4B0BC7B54BC99056B786B9C06370965E27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:3d:14:a9:5a:bb:fa:c4:bf:fb:2d:f2:ce:
                    7f:21:60:27:06:0e:cc:e9:23:e5:75:28:ee:4d:f1:
                    13:f1:32:82:59:15:74:91:49:0a:0d:65:eb:ac:37:
                    74:67:5a:b2:6f:04:cb:ae:35:8f:dd:fe:50:bf:a7:
                    41:7d:08:4b:8a:97:4d:9f:8b:ce:cb:fd:86:25:f1:
                    27:2e:20:b3:bf:13:66:ec:7c:4f:3f:0d:e2:b3:54:
                    8e:3a:99:6c:d7:65:25:72:eb:9f:18:4d:81:a2:0e:
                    01:94:f3:9c:62:11:cb:42:2c:ec:0a:35:d9:fd:74:
                    e2:7d:bf:3a:f3:15:b3:d8:7b:86:d8:d9:b4:16:a5:
                    0f:b7:19:0d:d5:1a:d5:b4:46:10:5e:60:c0:07:c1:
                    d6:fa:9e:61:d3:7f:cd:b2:0f:5f:be:55:fd:5a:5d:
                    77:96:c7:d9:ad:6d:56:31:ff:b0:81:9e:ef:38:77:
                    88:23:f9:5f:5f:ed:c7:0c:da:72:cd:da:8c:6d:6e:
                    10:3f:4e:c8:0e:c4:67:ff:45:16:d9:f7:0c:8a:eb:
                    5f:32:4e:74:16:60:d7:73:49:2a:55:35:10:29:a3:
                    2c:4e:b1:ea:a6:e7:5f:0d:16:6e:f6:37:06:42:2b:
                    55:37:1b:02:87:5b:60:96:16:59:99:31:43:cd:ee:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8F:C4:B0:BC:7B:54:BC:99:05:6B:78:6B:9C:06:37:09:65:E2:7A
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32322d3232203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:2b:37:d7:f4:e4:ca:e7:24:ba:44:20:4b:c9:ca:d7:3e:
         45:9e:8f:3a:f5:b7:df:74:99:3f:cd:4f:67:c3:26:61:a3:29:
         9e:ab:b9:f5:64:be:24:79:0f:7b:4b:ea:3a:0b:b8:6f:13:c2:
         6a:b6:c3:98:48:ab:9d:23:aa:22:52:8f:1f:6a:72:58:14:8b:
         f6:53:f0:0d:5a:7d:d6:76:30:e9:45:01:55:35:13:c0:4f:1c:
         ca:b1:d6:e8:5e:8f:68:36:24:4d:62:76:68:23:6a:3c:0e:11:
         96:6a:fc:df:ff:3e:e9:7d:e6:c2:f0:a6:c3:f2:0b:43:82:9e:
         e2:d0:47:7d:49:88:f7:84:36:f3:b5:7b:98:7e:7f:66:b7:ff:
         ac:7d:12:bc:9b:84:43:b2:16:b1:5b:c6:55:0e:da:64:6e:80:
         8c:83:88:99:cd:0a:71:41:28:29:44:d5:d5:44:2e:7e:df:91:
         a6:59:5f:dc:0a:34:c4:7f:24:98:bc:e9:f3:56:c6:32:25:12:
         7f:b9:51:61:17:44:c7:f7:e0:8f:eb:d8:b7:89:d1:0a:fd:ce:
         98:a1:bf:4b:a8:e6:ba:ac:07:03:03:7b:53:1a:c9:4c:53:80:
         9f:f1:c7:3a:5d:4a:46:c6:02:87:a6:0f:e0:46:bc:67:49:fa:
         12:be:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org