Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa
File:                     3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa (raw, json)
Hash identifier:          3Kv5sQmIi02cI5/WugxNA6vCdq6pWgK8m6cZeyuHmZg=
Subject key identifier:   96:EA:DE:C0:78:BB:14:0C:A7:E4:DD:9D:9D:1A:BE:2C:4F:40:E8:2B
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       20E168F066FCB09EEAAE474290D61216B7057AC6
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa
Signing time:             Thu 04 Apr 2024 04:14:00 +0000
ROA not before:           Thu 04 Apr 2024 04:09:00 +0000
ROA not after:            Thu 03 Apr 2025 04:14:00 +0000
asID:                     264913
IP address blocks:        168.228.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e1:68:f0:66:fc:b0:9e:ea:ae:47:42:90:d6:12:16:b7:05:7a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Apr  4 04:09:00 2024 GMT
            Not After : Apr  3 04:14:00 2025 GMT
        Subject: CN=96EADEC078BB140CA7E4DD9D9D1ABE2C4F40E82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:06:ae:06:8f:aa:13:ab:1f:ed:61:1a:1a:
                    7d:e9:68:29:3a:5f:68:76:65:d5:99:15:08:eb:d2:
                    b6:48:66:b7:ac:03:ac:e9:0f:53:33:8b:3f:0e:39:
                    c7:81:8d:6b:91:d5:16:d5:28:2d:8e:af:0f:53:f3:
                    16:f9:03:b6:cd:db:c0:fe:43:83:67:c4:d5:2c:89:
                    a4:eb:74:0d:1f:79:98:29:67:09:c2:0c:99:26:76:
                    da:71:10:72:b7:a0:94:e7:a7:08:6d:70:ac:7a:94:
                    3f:55:bc:39:a0:92:36:30:02:33:27:01:5c:99:a3:
                    8f:b0:ed:02:da:e4:21:6d:ed:d4:5a:6c:f3:0f:41:
                    1b:4b:d0:9c:b3:2d:7a:97:6b:94:09:16:13:16:16:
                    d5:fa:13:ea:fc:b8:3b:c4:02:0b:05:cf:af:83:b9:
                    99:0b:46:d2:68:f5:d9:58:f5:50:d4:d1:f4:90:9c:
                    10:73:f6:75:91:87:9f:b7:d5:8c:79:44:d0:0f:1f:
                    ea:b0:7b:be:85:71:a1:ea:3e:d7:6a:51:c9:01:85:
                    11:8a:3e:cc:06:44:9b:4f:72:1f:b3:19:c0:e4:61:
                    61:97:aa:bf:ff:fd:7d:e3:a2:1f:0e:51:90:66:0f:
                    ea:92:27:73:b9:5b:a8:53:e3:96:cf:06:4f:3e:65:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EA:DE:C0:78:BB:14:0C:A7:E4:DD:9D:9D:1A:BE:2C:4F:40:E8:2B
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:70:0b:a5:bf:45:49:f8:da:ec:5c:0c:d2:61:b1:e5:05:21:
         de:f5:32:c1:2c:2c:ed:26:71:26:51:cb:04:96:1d:99:3d:77:
         fe:be:68:12:de:7c:bb:56:8e:c5:76:2c:47:46:8a:59:a8:60:
         52:09:90:37:92:f1:d1:18:d1:4c:16:76:72:d5:d0:b2:74:03:
         91:32:71:4e:f5:fd:bc:fc:5d:10:77:f0:ff:28:1d:0b:f5:7c:
         2d:c9:1b:d5:42:28:97:e6:72:8c:2a:8e:b2:64:48:bf:1a:ab:
         7c:9e:5c:09:06:4f:54:79:06:84:96:23:ab:fa:73:b5:88:34:
         70:d3:39:db:8b:94:a4:ab:c9:fd:fd:1d:64:a4:26:f5:a1:d9:
         f6:32:8e:0e:b2:0f:05:d9:1e:0d:10:1b:20:ee:a0:1c:16:d0:
         c2:91:3c:34:d4:b2:c6:34:e8:33:85:24:6b:d6:bb:46:5c:b8:
         1c:68:de:80:0f:2d:33:93:1f:9c:69:86:87:5b:b0:a4:f0:0d:
         7f:b6:3f:4d:9c:5f:a9:8b:89:63:ad:21:cc:c3:7b:25:9d:d8:
         24:e9:ce:f5:33:56:28:61:46:7a:2c:4e:aa:bc:74:a3:f7:a5:
         b7:5d:0a:6b:80:c5:85:31:ed:86:30:47:6f:ad:35:a0:40:3d:
         68:84:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org