Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa
File:                     3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa (raw, json)
Hash identifier:          +9iKCMaJY+H4nUxnus7Z1sYsoXgPACrVufChSZ5Krk4=
Subject key identifier:   15:9B:C6:45:E5:1A:F6:2D:12:46:AB:DD:C3:9B:28:06:F9:31:B8:EA
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       057CB6961FF2E40A8D144B03281FC02FDC8F75AD
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa
Signing time:             Thu 04 Apr 2024 04:14:00 +0000
ROA not before:           Thu 04 Apr 2024 04:09:00 +0000
ROA not after:            Thu 03 Apr 2025 04:14:00 +0000
asID:                     264913
IP address blocks:        168.228.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7c:b6:96:1f:f2:e4:0a:8d:14:4b:03:28:1f:c0:2f:dc:8f:75:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Apr  4 04:09:00 2024 GMT
            Not After : Apr  3 04:14:00 2025 GMT
        Subject: CN=159BC645E51AF62D1246ABDDC39B2806F931B8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:8d:17:8e:f9:b0:b8:81:a0:88:8b:71:e1:
                    55:6f:fd:ef:2a:c5:2f:b2:5d:b3:7f:41:19:0f:8f:
                    5a:bf:f5:eb:ea:61:5f:f9:49:e0:85:c1:e9:b0:b8:
                    c2:87:93:56:73:e3:e7:25:be:b5:8e:02:12:63:07:
                    61:4b:cc:78:49:6f:20:a7:15:f7:82:1b:a9:3c:c1:
                    3d:eb:8e:e8:13:97:65:06:b1:af:37:ae:2e:88:23:
                    f9:6f:4a:1b:cb:fa:29:fb:48:a8:76:37:cf:9f:51:
                    e8:9e:4c:5e:0d:6f:bf:62:7c:29:25:92:f5:58:ef:
                    25:f9:b2:19:23:50:fc:fe:ba:94:8b:79:10:c9:36:
                    f3:ef:48:e2:5d:1e:fc:01:49:92:cf:8b:95:46:cc:
                    24:8b:e1:d4:7b:99:7c:ba:25:96:27:ba:51:ba:ab:
                    23:54:f4:c1:b8:1e:56:99:f1:83:8f:9d:42:a3:e0:
                    64:a0:f0:b6:09:f1:22:84:8b:09:56:4b:d9:d3:bf:
                    01:46:af:df:bf:8e:c1:3f:b4:94:f2:53:e7:c4:16:
                    78:46:f1:f0:e6:36:97:07:b9:d0:f3:eb:63:ad:1a:
                    ba:17:75:62:09:bf:a2:2b:c8:c0:89:42:b5:10:e7:
                    95:94:07:f9:d8:e7:e8:4a:ab:c7:1b:21:fe:3d:6c:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:C6:45:E5:1A:F6:2D:12:46:AB:DD:C3:9B:28:06:F9:31:B8:EA
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:35:4d:3a:77:fa:b8:25:48:90:df:fa:c2:43:25:50:95:
         83:b4:45:ec:58:ba:4a:8f:a8:bc:29:87:1e:67:1f:0d:b1:29:
         9c:06:29:30:5b:2f:b5:0d:46:88:f6:f4:43:59:4d:2d:c0:6d:
         00:78:e8:d0:f3:ba:c2:28:c2:be:0c:f1:b1:de:4e:11:b3:d5:
         06:80:f9:30:45:32:a0:2f:0f:65:89:4d:f7:35:43:1f:2f:37:
         c1:ab:b5:4f:aa:6a:f7:89:27:4e:24:e5:73:66:27:a9:55:66:
         f0:41:a8:c9:fb:16:e7:ac:10:b0:21:e1:04:54:f9:df:7f:42:
         2b:9c:d3:81:9f:6a:a4:7a:4c:1d:45:d8:e8:d3:67:ab:38:dc:
         aa:cd:64:7b:2e:b7:56:51:06:77:46:15:ec:60:94:c6:cd:58:
         64:c1:d0:cf:65:9f:f8:67:0c:df:c6:46:4a:3e:95:a4:a3:77:
         60:c2:a1:63:fc:89:6f:99:9f:0e:e4:09:fc:02:82:b8:dc:1c:
         1f:bd:40:a0:47:3a:01:be:9d:9c:2c:99:95:69:53:ed:ab:ab:
         a2:a2:31:3d:5d:3c:6c:53:72:6d:6e:e1:c5:6c:ea:31:0e:e0:
         14:34:bb:b2:dc:49:d5:d0:a2:96:81:d2:05:ac:ba:88:94:f8:
         f2:4d:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org