Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
File:                     3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (raw, json)
Hash identifier:          apj7iu4/kIUArDa8fmZGeq0Q5bqaXW6C8fcXlPYz/NU=
Subject key identifier:   A5:4A:24:E2:94:2D:36:68:DD:4C:9A:F3:22:14:C8:FF:BD:A9:E2:90
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       757FDD597F4B9322E165A05720E21CE5CE14D4B7
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
Signing time:             Thu 04 Apr 2024 18:45:14 +0000
ROA not before:           Thu 04 Apr 2024 18:40:14 +0000
ROA not after:            Thu 03 Apr 2025 18:45:14 +0000
asID:                     265421
IP address blocks:        168.195.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:dd:59:7f:4b:93:22:e1:65:a0:57:20:e2:1c:e5:ce:14:d4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Apr  4 18:40:14 2024 GMT
            Not After : Apr  3 18:45:14 2025 GMT
        Subject: CN=A54A24E2942D3668DD4C9AF32214C8FFBDA9E290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:80:ea:cf:5f:fd:bc:48:3a:a2:c7:03:b8:
                    7f:67:20:fb:56:96:d8:ed:1d:fa:4d:e9:aa:a9:59:
                    19:3a:40:e6:42:2c:c8:31:c1:72:b4:79:1e:17:d9:
                    92:4b:a8:ba:d7:88:f0:4d:67:4e:53:95:36:c8:f2:
                    08:9c:24:80:1a:68:be:51:12:b5:3a:d3:3b:4a:0b:
                    60:ee:89:f4:76:88:0e:70:70:e9:39:f8:57:2d:64:
                    9c:17:47:2a:65:0f:35:52:41:70:5b:ec:b8:8b:5e:
                    c2:85:e0:59:51:41:ca:84:d8:a7:7e:4e:bd:be:10:
                    e8:33:c1:a4:31:3d:e9:bd:f6:5e:31:39:46:7e:da:
                    17:36:eb:f6:20:e2:9b:a8:e7:48:ed:c7:61:e2:54:
                    05:2e:4a:a5:82:74:03:b4:e9:b7:73:12:b9:46:d2:
                    84:a2:a6:b6:8e:4d:56:ef:38:fc:dc:c2:04:2a:2f:
                    f4:16:11:09:c0:46:4a:69:53:de:75:35:d9:38:63:
                    a2:78:90:db:b7:39:7b:2c:fd:e2:db:7e:16:39:17:
                    e7:36:9c:4f:f2:b0:2e:84:34:85:9f:3e:2c:ed:65:
                    5d:c6:d5:11:18:55:14:a4:ad:14:49:d1:10:af:5e:
                    88:6a:7f:fa:5f:c3:70:65:bd:2d:e7:be:57:26:22:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:24:E2:94:2D:36:68:DD:4C:9A:F3:22:14:C8:FF:BD:A9:E2:90
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:f7:89:49:7e:e0:1b:87:bb:75:ae:60:97:4c:40:e0:b3:
         0b:38:e7:3c:41:0b:00:d5:8a:58:1c:0e:34:f7:b0:e0:90:ac:
         66:fe:ed:de:30:87:fa:0a:e2:c2:2c:bc:ee:4b:0f:4e:ce:e0:
         f7:e8:da:f8:72:7a:33:b5:6d:8e:eb:a9:35:1f:3b:ec:ff:66:
         48:44:08:1e:2a:94:4d:e0:95:67:7b:8a:74:38:18:44:cc:88:
         fd:03:9d:bf:40:1b:b0:11:bc:a3:57:25:e2:c7:ac:6e:17:86:
         63:83:98:8d:46:34:f5:ab:86:50:4c:ea:06:88:33:92:56:67:
         b4:4a:72:31:81:80:6a:9c:c5:ed:cd:44:22:a4:77:2f:f9:2e:
         5c:7b:76:93:28:03:d6:34:47:d8:d5:86:49:01:40:d8:90:65:
         77:97:ee:58:95:d9:42:72:f7:f0:13:75:cb:6d:34:35:46:58:
         c7:db:75:f9:ea:5d:f2:41:75:e8:ba:f1:31:13:5a:22:27:ef:
         f6:b3:3b:d1:29:05:bd:88:ad:0f:ba:a4:76:fe:94:93:66:2f:
         1b:43:d8:26:c1:26:72:45:e6:d5:9b:21:28:67:df:d9:6a:63:
         83:84:cb:bf:c2:0d:34:2c:fb:cc:16:fd:d1:84:6a:e7:28:47:
         c6:03:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:32 2024 by rpki-client on console-fra.rpki-client.org