Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
File:                     3136382e3230352e38362e302f32332d3234203d3e203532373830.roa (raw, json)
Hash identifier:          2SMWiboRXuqAc0l4xZLcydNLuU5DCZ1eiGkg5IGcn3o=
Subject key identifier:   76:24:47:47:DA:60:FE:C6:1E:81:93:3D:BB:1F:EE:F2:4C:0B:19:1F
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       2DD5A654D5E2305AFF3AD7D0B3880476E9238308
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
Signing time:             Thu 29 Aug 2024 13:03:13 +0000
ROA not before:           Thu 29 Aug 2024 12:58:13 +0000
ROA not after:            Thu 28 Aug 2025 13:03:13 +0000
asID:                     52780
IP address blocks:        168.205.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d5:a6:54:d5:e2:30:5a:ff:3a:d7:d0:b3:88:04:76:e9:23:83:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Aug 29 12:58:13 2024 GMT
            Not After : Aug 28 13:03:13 2025 GMT
        Subject: CN=76244747DA60FEC61E81933DBB1FEEF24C0B191F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:9a:26:6d:b2:18:06:0b:88:a5:1e:2a:ce:
                    00:f9:bb:9a:2b:1a:c4:91:3a:5d:89:00:c5:50:20:
                    3c:7d:a7:d4:1f:83:0c:ac:88:f3:64:2f:85:58:08:
                    bc:fa:b5:3e:17:46:3f:c9:b6:56:e2:5b:d7:3f:b5:
                    45:dd:f1:81:9c:ce:5f:25:f0:6a:4b:53:85:4a:57:
                    99:d4:20:e1:2d:b3:e1:4b:af:62:8e:33:bd:00:af:
                    cc:ce:07:1b:67:ba:a0:14:09:18:2b:03:6c:c4:76:
                    45:96:00:42:4d:f0:67:3b:e8:d5:d7:e9:a1:96:3f:
                    b6:f3:80:9e:ab:ce:4c:e9:07:68:d4:3c:71:15:2c:
                    29:70:ce:8a:f7:53:d2:88:fb:50:f8:89:a1:8d:74:
                    ed:20:04:8b:93:7c:9e:57:6b:aa:a7:7d:fd:00:89:
                    10:a9:36:32:8c:f0:5a:7f:d0:08:ff:4f:05:6d:08:
                    2b:c5:f2:1d:e6:fa:4b:e1:26:79:41:67:93:70:d3:
                    e4:d9:04:0b:b5:be:15:38:91:81:02:fa:36:72:d1:
                    5e:c5:a7:b8:cb:c4:02:29:fa:08:e4:b3:7e:fc:ff:
                    dc:7d:c3:03:1b:20:c8:fe:d2:06:db:d9:d2:db:03:
                    e7:5b:3f:07:dd:f2:e9:ab:ce:25:8e:6b:07:d2:24:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:24:47:47:DA:60:FE:C6:1E:81:93:3D:BB:1F:EE:F2:4C:0B:19:1F
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:fd:30:86:25:e5:e1:aa:99:8d:a4:ca:f1:e5:47:fb:f8:
         74:b6:31:f2:4b:4e:d0:15:8e:12:2a:5c:f0:b2:dd:1b:e5:5a:
         59:a3:3c:c5:39:c9:17:b2:bb:ae:23:6d:62:0a:77:7a:2a:19:
         ea:ae:6d:a6:b0:a0:02:70:88:24:5b:4c:dc:8b:af:58:03:bc:
         68:de:db:0a:0c:1d:7e:e3:8e:84:15:9b:1f:4e:db:9b:e8:6c:
         c2:87:7d:32:d7:00:ad:2a:7b:e3:53:8b:9d:6a:ab:99:21:b9:
         a0:d8:5e:14:17:78:e9:d4:5b:14:38:93:19:12:9a:8d:63:b6:
         38:04:7c:69:bb:be:5b:dc:36:e9:9e:c4:6d:14:a8:a9:ae:b9:
         38:26:5f:64:97:c7:00:3a:9a:db:8a:b5:f2:d5:27:44:d8:46:
         eb:d2:52:c5:87:b9:2c:55:4e:dd:be:d3:a5:a1:67:b7:e6:d9:
         ef:8f:00:15:ce:0d:1a:77:5c:ac:b5:d5:f3:d9:ae:39:7e:4c:
         84:0b:78:30:2a:55:52:b3:af:d7:7f:2f:f7:8f:1e:b0:6f:ee:
         b9:67:ea:63:06:45:46:f7:56:a2:15:ea:b8:85:15:c8:2a:01:
         7e:01:3c:a4:c4:27:18:fb:88:bb:68:ba:73:9c:4b:63:f2:a2:
         17:91:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org