Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/3136382e3139352e3134342e302f32322d3234203d3e20323635323739.roa
File:                     3136382e3139352e3134342e302f32322d3234203d3e20323635323739.roa (raw, json)
Hash identifier:          9CqMexgUrtULVkHqUWo1qyNhDH36Lygx3NaYVuxChSY=
Subject key identifier:   56:1E:AB:2A:F7:28:6B:F9:B7:E0:FF:F3:D7:BF:89:CB:CC:66:D6:2C
Certificate issuer:       /CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
Certificate serial:       56E88AA69C56581D781D389F48B5A58ABE61E7C8
Authority key identifier: 23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/3136382e3139352e3134342e302f32322d3234203d3e20323635323739.roa
Signing time:             Thu 04 Apr 2024 12:41:44 +0000
ROA not before:           Thu 04 Apr 2024 12:36:44 +0000
ROA not after:            Thu 03 Apr 2025 12:41:44 +0000
asID:                     265279
IP address blocks:        168.195.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl
                          rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e8:8a:a6:9c:56:58:1d:78:1d:38:9f:48:b5:a5:8a:be:61:e7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
        Validity
            Not Before: Apr  4 12:36:44 2024 GMT
            Not After : Apr  3 12:41:44 2025 GMT
        Subject: CN=561EAB2AF7286BF9B7E0FFF3D7BF89CBCC66D62C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:3d:42:cb:2a:da:39:8d:ce:a7:13:0d:04:
                    fe:1f:11:0e:ca:d2:de:26:20:b9:2d:49:61:35:da:
                    44:a5:c9:4f:48:0f:9f:86:9b:ed:aa:c5:c8:8f:f2:
                    4f:57:87:06:7c:a3:60:15:a4:ec:08:ca:d2:94:d9:
                    4f:91:e1:54:2f:38:8a:a4:38:1b:4a:f3:73:9d:5f:
                    dd:e8:8f:17:5e:cb:a8:6c:3d:85:c3:78:c1:57:38:
                    7e:99:5d:a5:38:a5:0d:23:64:93:bc:2e:b8:af:12:
                    2a:9f:5e:35:14:d7:d3:f1:a5:ec:4f:32:7c:c1:7e:
                    8a:c3:5f:77:1f:62:4d:68:24:5a:4c:55:a1:09:ce:
                    8e:06:80:15:80:d7:c1:b5:92:21:cf:68:26:6c:3f:
                    e1:69:2f:4e:f5:c4:b0:9e:9f:b0:1e:96:6b:af:22:
                    dd:24:34:ce:4b:a0:33:f4:95:52:8f:0c:91:b4:85:
                    9d:7a:fd:e4:ef:8a:53:fb:1e:44:38:4a:0c:40:02:
                    bd:d4:6a:87:8b:bc:40:e7:9a:3d:22:18:6c:bb:c5:
                    2d:60:29:c6:90:a9:90:95:bb:ba:65:a6:22:26:ba:
                    3a:58:b2:f2:29:5c:ae:27:96:d9:78:d6:5f:89:49:
                    f4:47:18:d5:67:8b:0f:01:a4:d4:22:6a:0e:ba:86:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1E:AB:2A:F7:28:6B:F9:B7:E0:FF:F3:D7:BF:89:CB:CC:66:D6:2C
            X509v3 Authority Key Identifier:
                keyid:23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/3136382e3139352e3134342e302f32322d3234203d3e20323635323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:3d:16:50:93:56:22:12:16:e3:18:ab:44:f9:3f:6f:05:45:
         55:d1:bb:ae:ab:0d:36:d4:d8:b1:1f:4c:a6:93:17:c2:7b:7e:
         7f:f8:4d:bf:89:4a:7e:3b:70:9a:fe:45:3b:9e:c4:dc:3b:ae:
         ea:2a:08:3f:d7:9e:77:8a:f8:c1:29:52:18:19:0a:b2:6d:4b:
         d7:95:1b:d4:23:e3:3b:8d:c1:27:83:48:41:39:98:57:04:32:
         67:41:84:10:03:ff:bb:38:a6:29:ee:50:46:94:bd:af:55:f7:
         b8:30:ea:84:5c:e5:6a:ee:1d:e2:22:ae:5c:a2:4f:ed:15:4a:
         e9:3c:6c:9c:3c:7b:77:9a:bd:fa:f6:8c:dc:09:36:42:d0:c0:
         13:da:fe:44:05:bc:61:73:08:ae:8e:47:ee:fc:1d:98:43:5a:
         6e:94:c0:7c:7e:95:89:d3:05:de:2d:c1:c0:75:7b:6b:96:e6:
         cc:f9:78:51:11:63:fa:dd:8c:51:11:b7:eb:1c:cd:da:9e:dc:
         82:3a:0f:8b:06:71:8f:e0:ef:2e:a8:de:70:71:7f:d7:73:e6:
         f7:76:eb:74:ff:4f:eb:ff:56:f4:28:bd:cd:01:b4:77:10:d0:
         91:4e:33:fc:ec:4d:e1:fa:05:db:45:18:74:cc:99:eb:e8:4b:
         3c:bf:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org