Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3136382e3132312e3138382e302f32322d3234203d3e20323632373737.roa
File:                     3136382e3132312e3138382e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          SNZ/nr/jD/7ijQciFJyB4mXVBdCQlroxG6tCiBhZb9A=
Subject key identifier:   A9:C6:D7:89:69:D8:35:B0:3D:E3:88:85:C3:6E:F0:18:AE:04:A4:CA
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       3DB3B22FB98C2F90B3709B574EDB5C0FCD4863A4
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3136382e3132312e3138382e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 12 Dec 2024 15:11:59 +0000
ROA not before:           Thu 12 Dec 2024 15:06:59 +0000
ROA not after:            Thu 11 Dec 2025 15:11:59 +0000
asID:                     262777
IP address blocks:        168.121.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 22:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b3:b2:2f:b9:8c:2f:90:b3:70:9b:57:4e:db:5c:0f:cd:48:63:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Dec 12 15:06:59 2024 GMT
            Not After : Dec 11 15:11:59 2025 GMT
        Subject: CN=A9C6D78969D835B03DE38885C36EF018AE04A4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:4c:b6:6a:57:a3:a4:5b:41:90:5b:15:d2:
                    f4:38:a5:87:63:ee:46:db:22:56:74:61:61:e0:5e:
                    b0:87:29:f3:f8:ed:98:39:3f:41:0d:e0:8d:03:07:
                    34:3c:fb:7f:d2:dd:ae:40:63:c4:5e:51:52:e0:c2:
                    3e:d8:be:91:a1:16:96:14:25:d6:31:58:cb:d9:8d:
                    fd:7c:c1:50:99:fe:bd:c5:57:ee:ae:7c:b8:1f:52:
                    4b:35:ca:11:03:9f:01:bd:61:7d:a6:08:15:12:bd:
                    7b:07:a0:61:0a:f4:c7:a2:57:d3:a5:6b:0e:61:16:
                    87:27:e8:72:43:d9:98:50:55:d4:44:6b:d6:f8:cf:
                    33:2c:21:65:69:52:f3:6b:af:c0:c0:16:6c:d7:75:
                    66:11:b7:3e:2f:b9:72:82:d0:52:35:b1:d2:8e:29:
                    ff:ad:16:70:6d:0b:15:43:4e:62:0e:2a:97:45:88:
                    8f:ab:34:14:e4:f6:5d:4f:56:36:b5:8e:72:a5:8c:
                    7e:b6:1d:92:87:70:dd:ad:d2:ff:06:21:14:d5:59:
                    ed:6f:35:b2:76:e5:b6:05:20:4b:b6:d3:e9:fd:47:
                    90:24:f0:6b:e2:36:bc:d5:64:b0:34:a0:24:66:27:
                    b0:2a:3a:48:85:43:17:1f:2b:62:fa:c0:f2:62:50:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:D7:89:69:D8:35:B0:3D:E3:88:85:C3:6E:F0:18:AE:04:A4:CA
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3136382e3132312e3138382e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:83:32:46:1b:0d:d2:68:af:4e:70:6b:b0:f8:cf:bb:24:
         cc:d1:f9:0f:71:65:ad:c3:99:03:2d:0f:49:84:35:e8:82:72:
         c3:a8:a7:d7:9a:e6:30:d8:06:aa:0b:38:eb:5a:2d:52:59:4b:
         c3:af:d4:e3:8f:f7:17:30:4c:95:f3:07:5c:49:9a:65:27:07:
         17:70:06:ec:5c:d9:0b:ac:94:66:1c:50:6b:1c:9c:36:3f:41:
         da:85:69:54:3c:8d:b6:2f:3f:fd:4b:9a:5b:37:27:0b:6c:63:
         bd:e8:b0:69:65:6f:a8:8f:f7:06:45:0f:3f:5e:27:7f:6b:ea:
         47:81:ae:80:93:dd:33:64:53:10:66:25:87:e1:15:84:84:98:
         7b:65:c5:1f:f4:f5:54:e0:35:2f:41:6b:06:ea:3f:8f:02:24:
         4b:94:f6:bf:d0:0a:4c:11:5c:96:6a:65:4b:2b:2f:4b:70:ab:
         77:a4:b4:16:6f:4c:dc:55:d3:7d:ea:45:e8:b5:ed:bd:bf:27:
         79:39:81:e3:30:4c:eb:c1:8a:0a:03:73:a6:61:0b:34:3b:6a:
         d4:8b:d2:23:da:5e:15:24:fd:61:9b:72:70:b7:b4:3a:e1:a9:
         ca:32:b2:98:8e:9b:53:97:39:d0:17:f8:6e:84:c2:c6:5a:b4:
         b7:0a:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:43 2025 by rpki-client