Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa
File:                     3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa (raw, json)
Hash identifier:          Ub6kPIofQjzdFckxOHNau09SW9VEYmEzA4TwhWxJGrw=
Subject key identifier:   60:32:1E:39:DE:ED:2E:F3:02:D7:C0:D8:1A:B5:D1:73:79:0E:94:D6
Certificate issuer:       /CN=F519D15386DA423A1E940A04F10CC7E07C4554F8
Certificate serial:       21466F100A382DEDA4509619D704A1F65A01AF06
Authority key identifier: F5:19:D1:53:86:DA:42:3A:1E:94:0A:04:F1:0C:C7:E0:7C:45:54:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa
Signing time:             Thu 04 Apr 2024 11:00:31 +0000
ROA not before:           Thu 04 Apr 2024 10:55:31 +0000
ROA not after:            Thu 03 Apr 2025 11:00:31 +0000
asID:                     264872
IP address blocks:        168.227.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.crl
                          rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:46:6f:10:0a:38:2d:ed:a4:50:96:19:d7:04:a1:f6:5a:01:af:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F519D15386DA423A1E940A04F10CC7E07C4554F8
        Validity
            Not Before: Apr  4 10:55:31 2024 GMT
            Not After : Apr  3 11:00:31 2025 GMT
        Subject: CN=60321E39DEED2EF302D7C0D81AB5D173790E94D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:52:01:34:8b:10:f6:90:1c:40:52:da:77:
                    ba:79:87:58:ff:df:b9:8b:5e:4c:59:ed:c8:2d:45:
                    93:3a:7a:8c:5b:c1:57:4e:64:e7:b0:a7:5c:a0:db:
                    76:07:1c:9e:b0:e9:00:4c:63:74:51:c2:8b:4e:3f:
                    e3:cd:9b:e3:7b:90:80:24:50:94:76:8b:39:84:81:
                    28:1d:ba:87:26:eb:15:1a:a7:e7:09:ce:df:3f:c6:
                    11:74:b1:65:3f:7d:70:6a:cc:f0:06:19:f3:3d:af:
                    3d:8d:21:de:8d:34:c0:91:29:5e:3b:8d:6c:dd:a6:
                    84:d4:35:6c:1a:ca:03:7a:6d:0a:2c:87:0c:25:6e:
                    e0:e0:15:3b:20:e9:e9:ea:54:37:dd:f9:83:ff:bd:
                    aa:65:5d:15:c8:23:6e:e5:ff:c8:52:9e:15:3d:b9:
                    93:ca:8c:9a:ab:dd:76:05:e7:1e:47:91:90:ab:b0:
                    37:67:03:ae:c9:ad:b1:61:84:03:a1:22:4e:69:db:
                    24:1a:37:57:6d:83:62:67:b6:97:7f:c7:69:c5:43:
                    d2:48:e3:e9:60:2f:85:d2:25:d3:87:9d:30:94:64:
                    4f:27:0a:06:b3:0c:23:92:35:f2:9e:f8:2b:df:ac:
                    82:a2:d1:c6:50:52:87:5b:fe:95:26:3c:b1:73:70:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:1E:39:DE:ED:2E:F3:02:D7:C0:D8:1A:B5:D1:73:79:0E:94:D6
            X509v3 Authority Key Identifier:
                keyid:F5:19:D1:53:86:DA:42:3A:1E:94:0A:04:F1:0C:C7:E0:7C:45:54:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:42:b1:95:7d:32:7e:67:f0:a3:4a:7d:b8:da:9b:47:c9:d7:
         12:71:0a:45:c2:f5:a8:aa:4f:50:a1:31:ba:d8:88:8f:f0:07:
         34:6b:f2:e1:6f:2a:28:1a:d9:37:9a:8b:19:af:54:92:a5:66:
         87:8c:51:02:b9:24:5c:f0:59:15:75:07:d0:fa:dc:46:d2:40:
         76:d2:c3:e0:40:01:94:d0:9d:c7:94:12:4f:a2:ff:25:63:b5:
         fe:b3:f7:e2:21:ab:a1:35:7b:06:2a:68:db:84:c0:a9:a9:c9:
         a9:2b:24:ff:dc:ff:41:e6:4a:7c:bf:3f:a9:56:ed:10:7e:e6:
         d7:2a:92:69:92:53:a4:ca:80:6f:aa:55:c7:83:37:de:ad:8b:
         47:95:8c:76:d0:46:90:f8:53:32:d0:b8:45:19:30:40:18:7a:
         95:6f:b1:e0:8e:55:f8:53:60:66:2b:e6:46:d1:48:60:dd:d8:
         1b:7d:f6:f2:44:76:a6:c9:c9:0a:66:e8:f3:db:18:f5:21:c4:
         de:54:6a:0e:56:12:41:3a:45:95:c0:2b:ca:5a:30:c7:77:97:
         27:b2:55:b1:83:c3:e4:2e:85:99:27:4e:1b:f6:e1:01:7b:e6:
         c5:e1:c3:19:a0:37:87:50:6f:34:71:ef:2d:a7:7a:52:29:d7:
         82:86:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org