Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e39312e302f32342d3234203d3e20323634393133.roa
File:                     3136382e3232382e39312e302f32342d3234203d3e20323634393133.roa (raw, json)
Hash identifier:          smxOjJhK2L8j1e+A2lWaVIME+1pWRZgfzHycBektkiQ=
Subject key identifier:   1F:E2:9A:86:6F:E5:F1:EE:3A:DC:62:61:DE:93:5D:43:2F:05:40:0A
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       430AECB057B30B4196748C9A287A23ED999C7E9D
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e39312e302f32342d3234203d3e20323634393133.roa
Signing time:             Thu 04 Apr 2024 04:14:00 +0000
ROA not before:           Thu 04 Apr 2024 04:09:00 +0000
ROA not after:            Thu 03 Apr 2025 04:14:00 +0000
asID:                     264913
IP address blocks:        168.228.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0a:ec:b0:57:b3:0b:41:96:74:8c:9a:28:7a:23:ed:99:9c:7e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Apr  4 04:09:00 2024 GMT
            Not After : Apr  3 04:14:00 2025 GMT
        Subject: CN=1FE29A866FE5F1EE3ADC6261DE935D432F05400A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:99:33:c3:8a:ac:1f:6b:bc:a8:61:7f:e7:
                    48:98:81:01:61:e0:30:1c:84:a8:c7:4b:6a:cb:30:
                    ab:b5:07:40:8a:fb:4c:5f:66:94:ab:d6:6d:96:6b:
                    9f:fa:30:29:71:50:ce:a2:62:9a:08:93:1b:ba:66:
                    2c:a4:36:8f:5e:a3:1b:bd:a0:37:55:2e:28:d3:14:
                    8b:d2:6b:a2:2e:44:98:c1:93:12:ee:60:ef:46:17:
                    bf:eb:11:2d:7c:ca:5a:f4:f8:2f:f4:78:7f:20:d0:
                    37:55:42:79:44:82:3d:9b:74:97:79:23:2b:69:b2:
                    cd:d7:8f:09:7e:60:22:b8:9c:b3:c5:e6:f5:d3:9d:
                    de:2f:b0:b0:8e:89:df:77:21:d4:b3:4a:0b:fe:ff:
                    1e:0c:48:ac:99:2e:d9:f6:04:7f:b6:cd:41:08:6f:
                    4f:b2:dd:8e:e6:f2:c1:bf:89:c4:7d:eb:d3:88:6f:
                    fa:8b:17:d7:55:83:13:03:96:aa:db:fd:c7:81:98:
                    45:c8:b4:b1:eb:b8:ce:90:0d:a5:e5:e8:16:8f:a6:
                    56:14:42:61:63:c3:8d:e8:8b:44:08:2f:a7:da:90:
                    f0:df:da:a1:58:9b:94:7b:d8:76:19:ae:99:33:fc:
                    49:76:cd:7a:f2:d1:67:c2:94:de:4e:27:4c:e6:13:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E2:9A:86:6F:E5:F1:EE:3A:DC:62:61:DE:93:5D:43:2F:05:40:0A
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e39312e302f32342d3234203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:de:c1:a4:d7:b2:5c:4d:39:64:7e:65:5e:d4:34:29:bf:
         d7:2a:bd:72:7a:5a:73:29:77:ce:48:88:e2:c6:03:57:70:2c:
         f9:43:8c:88:51:7a:af:ce:7e:4c:e7:ab:18:cb:d7:a4:5b:84:
         99:a8:59:31:37:2c:77:97:fd:cf:c2:4a:90:d0:aa:0c:2e:86:
         6e:a0:83:ce:f9:da:08:c2:c4:12:28:8a:5b:e7:a1:6a:4a:fb:
         32:d0:01:4e:7e:e6:73:70:b0:78:ff:9d:2b:ee:62:09:e8:da:
         08:d3:13:cd:df:da:cc:06:84:2d:e5:2f:d5:9e:96:21:34:bd:
         6f:b8:7c:a2:b4:24:b8:1b:81:b3:c0:2a:45:32:cd:dc:42:8b:
         2e:1d:cb:1e:dd:a6:4c:a2:0b:55:30:99:f3:6b:4f:7b:24:fc:
         9b:f6:e1:52:0a:56:f3:5b:0a:ec:db:95:e8:73:55:3d:5d:cf:
         fd:81:cf:1c:4b:5e:79:77:1f:aa:b8:d2:79:f4:a1:06:e5:9e:
         f9:b0:83:a1:1f:8a:0b:a2:b7:d7:fd:e1:20:f3:cd:e3:09:a2:
         d8:da:33:f4:a8:38:5e:2e:c8:3e:8b:aa:bd:fc:ac:de:8c:31:
         69:a9:9b:63:ed:b6:5e:e6:6a:ba:28:fd:c5:6e:59:03:3d:de:
         fc:3b:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:46 2024 by rpki-client on console-ams.rpki-client.org