Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/3136382e3132312e32382e302f32322d3234203d3e20323635333036.roa
File:                     3136382e3132312e32382e302f32322d3234203d3e20323635333036.roa (raw, json)
Hash identifier:          TL4oROp4WMEhnOBBN+c/bq1jEFZPVVQXN5S3ub0cY8E=
Subject key identifier:   44:FB:0F:5D:A2:25:5A:C1:93:19:BC:EF:C9:31:54:5A:F4:18:E4:7D
Certificate issuer:       /CN=B6BED81A275EBA830D2F2882B605540F9C45CED5
Certificate serial:       047FF20002542E49AF4B918EDFD1FABD4191C65E
Authority key identifier: B6:BE:D8:1A:27:5E:BA:83:0D:2F:28:82:B6:05:54:0F:9C:45:CE:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/3136382e3132312e32382e302f32322d3234203d3e20323635333036.roa
Signing time:             Tue 05 Nov 2024 18:18:44 +0000
ROA not before:           Tue 05 Nov 2024 18:13:44 +0000
ROA not after:            Tue 04 Nov 2025 18:18:44 +0000
asID:                     265306
IP address blocks:        168.121.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.crl
                          rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:f2:00:02:54:2e:49:af:4b:91:8e:df:d1:fa:bd:41:91:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BED81A275EBA830D2F2882B605540F9C45CED5
        Validity
            Not Before: Nov  5 18:13:44 2024 GMT
            Not After : Nov  4 18:18:44 2025 GMT
        Subject: CN=44FB0F5DA2255AC19319BCEFC931545AF418E47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:69:3d:09:68:59:ea:e5:9d:42:d6:e9:ed:
                    92:32:90:c0:27:6e:51:ac:b6:28:3f:04:7a:56:85:
                    ad:de:33:b9:c9:fa:0a:0c:f4:b9:cf:b5:07:94:9c:
                    d5:ed:19:34:88:f7:aa:aa:59:05:72:4b:85:be:09:
                    40:9b:1d:65:24:61:7e:b6:78:29:79:35:7c:77:6a:
                    7b:d8:ec:1b:57:e2:d9:53:2c:c7:74:ac:ab:70:21:
                    8f:b5:21:80:6a:66:12:0f:96:60:67:32:4c:b1:24:
                    23:e3:47:3e:fa:cf:cd:b5:34:c9:8c:65:e6:77:8f:
                    bc:f8:70:f8:ba:a0:7a:61:a0:a1:62:92:ab:44:e7:
                    37:d3:c8:ff:d5:e3:bb:41:62:17:6c:ca:ac:85:76:
                    e2:f0:d3:92:17:b6:2f:01:b6:5b:b6:75:24:73:0d:
                    21:b2:d5:9d:19:ee:80:42:6d:46:c7:d5:2d:7d:48:
                    ea:f9:a5:58:1a:8f:8f:6d:ee:11:17:9b:24:d2:1a:
                    11:6e:a3:14:1a:08:24:ad:aa:15:ae:d7:75:8f:bf:
                    28:9d:c2:1c:18:4d:32:f5:64:3c:96:5d:dc:35:be:
                    c7:a4:a2:08:43:99:70:f1:45:b0:5c:42:1f:13:34:
                    ea:a0:a9:c3:4e:1c:ea:60:3f:ad:82:1b:57:fc:19:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FB:0F:5D:A2:25:5A:C1:93:19:BC:EF:C9:31:54:5A:F4:18:E4:7D
            X509v3 Authority Key Identifier:
                keyid:B6:BE:D8:1A:27:5E:BA:83:0D:2F:28:82:B6:05:54:0F:9C:45:CE:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/3136382e3132312e32382e302f32322d3234203d3e20323635333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:2a:99:20:86:32:94:46:7e:0c:a1:57:f4:5f:34:87:f6:
         e6:ab:6d:28:b7:e1:8b:3e:6d:90:50:b4:d7:ea:f8:a1:be:c7:
         8f:f1:c4:cf:ed:bb:77:14:4f:72:66:b6:0f:cd:f4:d1:ea:be:
         23:b5:9b:88:b4:8a:a0:73:dd:a1:c2:4f:b0:e8:97:b5:87:e0:
         e6:94:00:1d:53:1f:13:ea:99:50:ec:99:c1:08:ac:a4:68:e0:
         51:b7:b1:6c:00:63:9d:e9:2a:3a:39:85:7c:d4:d1:4a:bd:64:
         6b:16:22:de:5e:c1:69:2a:54:dd:5f:b3:82:26:03:1f:8b:19:
         84:fb:7f:b1:17:08:a2:20:eb:22:e4:16:2d:c3:dc:3e:79:64:
         78:5c:41:14:13:d8:66:d1:77:7b:82:93:5a:de:ec:5f:70:e8:
         ce:b7:db:2f:b6:c8:ac:4f:7d:08:1e:68:e3:08:a5:97:1b:73:
         f9:d1:51:fb:fb:38:3f:cf:0d:10:50:01:91:4d:a3:3f:5f:6b:
         55:4f:57:84:52:ff:f5:dc:42:63:27:b8:de:48:75:54:f3:6e:
         4e:c2:5e:44:dc:33:eb:eb:9a:8c:47:fa:f8:5b:fd:30:8b:2d:
         57:3c:88:06:b5:04:24:e6:f3:b9:e3:17:76:ae:19:fe:78:ac:
         9a:1e:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:43 2024 by rpki-client on console-ams.rpki-client.org