Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa
File:                     3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa (raw, json)
Hash identifier:          eP/dig1sxgaV5WF7+FJS7XZFpXz68AMComIWzyTLkG0=
Subject key identifier:   B4:3F:79:A9:33:DA:B2:05:AF:4C:3B:24:6B:1D:5D:31:C2:BD:76:44
Certificate issuer:       /CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
Certificate serial:       29F9C616CAEBFC1D1DC90C218B2F1BD4202191BA
Authority key identifier: BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa
Signing time:             Thu 04 Apr 2024 11:21:54 +0000
ROA not before:           Thu 04 Apr 2024 11:16:54 +0000
ROA not after:            Thu 03 Apr 2025 11:21:54 +0000
asID:                     265336
IP address blocks:        168.181.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl
                          rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:c6:16:ca:eb:fc:1d:1d:c9:0c:21:8b:2f:1b:d4:20:21:91:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
        Validity
            Not Before: Apr  4 11:16:54 2024 GMT
            Not After : Apr  3 11:21:54 2025 GMT
        Subject: CN=B43F79A933DAB205AF4C3B246B1D5D31C2BD7644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:fc:62:29:cc:45:67:15:bd:cd:58:1b:2e:
                    2b:43:cb:70:65:0d:a4:a3:e1:a4:60:d1:42:95:cf:
                    9a:cf:b1:2c:00:70:d0:de:1f:e8:94:8e:2c:bb:a5:
                    3f:7f:bd:a3:3f:18:b8:9b:49:04:dd:df:b1:53:ba:
                    0f:97:76:f5:8c:21:ce:52:fc:2c:ec:0e:04:07:78:
                    6f:ee:58:37:0c:85:09:dc:c9:d4:65:08:05:71:60:
                    b4:00:01:49:e5:96:07:13:d6:90:19:c6:43:94:59:
                    71:2b:35:62:33:25:37:87:79:b0:cf:30:ed:94:79:
                    ae:16:0e:98:23:2b:d5:a3:06:54:9f:2c:eb:97:84:
                    0f:0b:eb:9b:9a:05:b8:7a:9a:91:8f:7a:59:ef:8a:
                    19:b5:50:43:d8:d1:50:21:68:7c:5c:0e:b6:f1:f1:
                    1b:48:75:37:40:d8:5f:dc:ae:ab:e9:b3:dc:0a:5e:
                    3a:58:2e:0b:d4:f9:6f:a8:3a:8f:e0:18:6c:3e:8e:
                    cc:82:d9:5b:fa:9e:4c:f1:91:f7:c0:25:fc:25:86:
                    82:a2:4f:6c:21:d4:16:c4:e7:b1:73:6c:83:8b:a5:
                    2c:2a:60:d7:ad:33:a5:80:96:65:fd:14:ca:7c:d2:
                    61:61:72:84:e9:a1:7d:89:56:a5:d1:fe:7f:ad:32:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3F:79:A9:33:DA:B2:05:AF:4C:3B:24:6B:1D:5D:31:C2:BD:76:44
            X509v3 Authority Key Identifier:
                keyid:BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:8e:03:4b:62:28:80:8c:e6:bd:cb:8c:83:36:03:3b:e0:
         d0:59:6a:cd:ad:a4:bb:1a:9d:81:a2:dc:0f:83:89:6c:5d:f4:
         ab:35:30:6b:7d:b1:8a:1d:36:ea:bf:27:26:e3:44:b8:86:b1:
         f7:6c:52:f3:72:58:87:db:05:f8:d0:2e:da:61:cf:26:9a:78:
         ec:8a:cb:6f:28:2e:c8:b6:74:da:31:91:31:ed:09:e4:82:11:
         68:91:8f:ab:ed:48:e0:4a:65:3d:37:21:fc:72:5d:0e:75:81:
         b3:83:bd:fa:b0:83:04:a2:34:79:35:ae:a7:f3:f5:34:5e:4f:
         2d:48:5a:89:9b:9d:84:9a:82:28:00:ba:0a:15:2a:f5:de:02:
         c4:3f:6a:a2:30:08:bb:de:5d:5a:b5:97:9b:7a:20:90:c8:22:
         43:a4:67:21:90:3d:d7:97:cf:85:04:fc:10:b9:06:a6:3f:aa:
         71:56:e8:26:97:0f:d2:43:93:b7:81:06:ca:f5:65:60:de:96:
         02:db:9e:63:c2:0b:52:51:c5:b1:fe:de:a8:7e:6b:2f:c7:99:
         47:08:99:1d:71:18:fc:f8:e7:46:6e:73:cd:f7:c1:34:5b:5b:
         1a:92:76:fb:46:74:b3:60:2b:9b:b0:ca:c2:22:41:1e:a0:82:
         80:96:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org