Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32322d3232203d3e20323634393532.roa
File:                     3136382e3233322e3234302e302f32322d3232203d3e20323634393532.roa (raw, json)
Hash identifier:          6CDXZPoxvb3Tqg0uhYc0zh5kGBU/m6M14qM2iPYxLTk=
Subject key identifier:   AF:4B:97:61:49:0F:4B:72:AB:6D:3B:AE:4D:E4:A0:BE:EB:E5:28:C5
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       3D5D653E08FD3FF58B78EE779292A271CEB3330D
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32322d3232203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:13:14 +0000
ROA not before:           Tue 30 Apr 2024 15:08:14 +0000
ROA not after:            Tue 29 Apr 2025 15:13:14 +0000
asID:                     264952
IP address blocks:        168.232.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 00:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5d:65:3e:08:fd:3f:f5:8b:78:ee:77:92:92:a2:71:ce:b3:33:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:08:14 2024 GMT
            Not After : Apr 29 15:13:14 2025 GMT
        Subject: CN=AF4B9761490F4B72AB6D3BAE4DE4A0BEEBE528C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:0c:df:d8:f6:e9:4a:c9:04:34:19:db:ae:
                    f6:8d:31:3e:f9:03:9a:11:22:77:80:66:96:1d:47:
                    45:3a:11:96:49:ca:d8:11:f6:f6:b0:aa:09:aa:ee:
                    7e:4a:b5:2c:5e:3e:4f:47:88:a8:fe:2a:61:c5:76:
                    18:ea:37:75:97:04:e6:f4:bb:12:ec:7d:05:09:3b:
                    1b:45:4f:98:25:c6:ea:35:2b:ce:eb:d2:c5:cd:82:
                    31:7a:4b:b7:04:be:b0:51:ba:78:31:ff:d9:e8:ca:
                    d4:1d:33:04:04:fb:53:0d:9c:b6:12:1b:9e:97:d4:
                    7a:fa:10:4e:df:c0:1c:c5:bd:4a:57:0a:8c:02:9f:
                    15:5e:92:5a:c8:84:47:c7:d5:78:5d:4d:bc:0c:3c:
                    a1:f4:91:71:93:75:35:6a:fd:f5:04:ea:fd:ad:f1:
                    49:47:fe:f1:f0:3d:fc:eb:e8:74:f2:bd:8d:cb:da:
                    9f:a0:c8:c0:b8:bb:bc:26:68:b0:1d:85:54:c6:66:
                    76:3c:11:ce:d7:67:b4:28:84:7f:e8:eb:cb:16:31:
                    00:25:1a:18:32:e3:98:da:e6:56:2d:55:9e:84:5a:
                    9b:c4:f4:a1:c0:9e:f7:7f:cf:fc:81:df:49:0f:a8:
                    2c:e4:08:e9:d0:9a:ce:ae:61:71:90:a5:a2:fc:a5:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4B:97:61:49:0F:4B:72:AB:6D:3B:AE:4D:E4:A0:BE:EB:E5:28:C5
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32322d3232203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:d8:be:e6:36:1d:07:fb:a6:78:d8:9f:b4:eb:9b:54:da:
         3a:5a:a6:b4:91:be:77:83:ea:53:43:2a:49:82:2a:0b:a3:28:
         bc:bf:12:01:c1:39:ae:5a:98:5b:52:51:4a:35:5e:ab:91:21:
         a0:df:9f:92:ad:e5:96:c4:53:f3:f0:3e:06:c9:8c:2e:10:8c:
         62:5a:30:03:7b:73:5c:9b:ae:f4:91:e8:53:e6:1f:b7:92:cc:
         98:79:08:98:ab:9f:de:54:d4:b5:af:8f:62:11:a4:b6:35:b8:
         ee:f2:f0:64:fb:bc:14:57:7f:b4:cb:d0:62:4b:b3:8d:a3:9d:
         59:e7:8e:6c:4f:b5:60:39:c2:db:2d:e4:ca:a5:53:03:8b:c3:
         ee:3d:4a:a3:47:77:e0:78:a6:76:ff:ab:e5:b5:95:11:13:de:
         3a:ef:8f:ab:f5:7b:71:b1:c4:43:53:e4:46:dd:61:d7:4f:44:
         61:b6:4d:f3:88:d6:9a:ef:65:83:7a:1f:64:23:f3:e3:30:44:
         9d:36:93:e0:0c:5f:44:a7:86:51:b4:47:8c:57:21:23:78:b1:
         ae:b9:8b:b6:78:e9:c5:68:c2:f2:94:bc:98:92:ee:64:32:60:
         ce:b3:b4:08:8b:62:43:07:b0:a9:ef:81:6a:be:47:d8:9e:02:
         d1:0f:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:49 2024 by rpki-client on console-fra.rpki-client.org