Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa
File:                     3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier:          XRdaYBIkZInh7q9JRP8lEC+62de2mSsYxYYTcBL2RkY=
Subject key identifier:   1D:37:8C:B2:E2:9E:E3:A1:8E:42:05:1E:6E:3A:19:2E:38:11:22:AA
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       2517FD14E34B6485501C2A0F5F79BFB1E5528E14
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa
Signing time:             Sat 09 Nov 2024 13:34:30 +0000
ROA not before:           Sat 09 Nov 2024 13:29:30 +0000
ROA not after:            Sat 08 Nov 2025 13:34:30 +0000
asID:                     264444
IP address blocks:        168.195.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:fd:14:e3:4b:64:85:50:1c:2a:0f:5f:79:bf:b1:e5:52:8e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: Nov  9 13:29:30 2024 GMT
            Not After : Nov  8 13:34:30 2025 GMT
        Subject: CN=1D378CB2E29EE3A18E42051E6E3A192E381122AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:bd:2c:dc:d8:a5:2c:69:05:20:cd:c6:6f:
                    39:f1:74:f4:37:d4:2b:bb:01:8a:eb:ab:92:0c:78:
                    cd:78:b3:56:5c:fc:b7:d5:77:c6:53:36:e7:79:2b:
                    c1:d2:40:45:f1:e9:8e:dc:26:0d:40:a0:46:2f:df:
                    02:4a:3b:8d:47:f0:06:77:70:1e:4c:d0:12:2a:db:
                    97:a1:d5:24:af:c6:bd:2f:5a:3c:19:74:3b:0c:ed:
                    f1:64:6f:b9:ce:5f:ea:4c:e1:e3:49:db:85:e3:65:
                    a8:b0:8d:04:94:82:39:9d:7f:ba:55:ef:86:59:48:
                    66:96:e2:da:19:65:24:15:cd:c7:02:58:6a:03:1a:
                    07:a6:54:52:c2:63:dc:7c:41:78:7c:5a:b1:29:97:
                    4a:bb:49:87:73:53:8b:bf:50:ab:2e:5f:59:e4:af:
                    ba:ce:02:1a:ea:5c:d1:e1:22:a2:08:e4:8c:cf:12:
                    35:b9:9a:42:29:7b:b0:a6:2d:b8:c0:e4:7f:11:d3:
                    db:99:13:d6:6c:61:76:24:a1:de:27:29:af:58:67:
                    4a:5c:55:0d:5e:68:6e:c7:fe:e2:64:ab:ae:b5:11:
                    8e:31:4f:20:fd:21:8d:f1:05:89:5c:71:c6:41:80:
                    33:35:f8:ca:c5:c0:ef:39:e4:74:c4:b5:c3:49:9f:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:8C:B2:E2:9E:E3:A1:8E:42:05:1E:6E:3A:19:2E:38:11:22:AA
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:6b:3c:22:8d:94:9a:ed:96:4f:20:88:4a:24:19:4c:38:3c:
         52:2c:1d:44:98:68:cd:f2:47:6d:36:a8:47:10:ed:ea:3b:4b:
         dc:06:47:36:8c:a3:85:58:a6:95:bf:cc:68:02:b5:f8:d7:f6:
         bc:a6:19:ff:59:d4:2c:a9:d4:87:eb:36:82:ca:09:5a:e1:8b:
         37:89:0e:f6:cd:3f:5a:5e:aa:26:fa:d0:ab:4f:37:ff:cd:f5:
         3e:c7:f2:a1:ff:af:be:8f:12:82:cb:4d:aa:0d:de:2b:a0:15:
         74:00:8b:29:bc:08:6e:37:c6:9a:67:1f:cd:06:bf:a2:65:be:
         c3:09:80:6a:d2:c5:bd:43:0e:8f:79:1f:f3:1c:d9:bb:b5:16:
         ac:04:24:f5:7e:0e:36:85:88:38:99:d2:53:5b:41:1c:11:67:
         21:46:e1:c3:74:d2:ee:40:9d:c5:b6:85:f5:b7:45:46:88:b2:
         ae:46:ad:74:ed:8c:9e:6e:3a:49:7a:95:06:ab:4b:74:d5:0f:
         07:b7:76:41:9b:f4:c7:43:90:9e:52:35:3f:7b:e7:9d:56:ba:
         a0:de:75:86:e8:13:ca:c1:8b:1b:3d:88:9b:fc:88:e8:58:14:
         3c:84:84:30:22:8c:8b:9f:31:2a:21:60:0c:48:e4:5e:c9:89:
         90:29:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:55 2024 by rpki-client on console-fra.rpki-client.org