Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          ZJstMgP4PFpCzUvv72rdZjDN0CD/9d8GF/sSAtnwSzc=
Subject key identifier:   A8:DB:32:FA:78:68:C6:0F:28:AE:0A:E1:01:E0:24:FB:FD:52:0D:C2
Certificate issuer:       /CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
Certificate serial:       CF53D56DC855C760A5E6FBEF4A5017371311FB
Authority key identifier: 19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
Signing time:             Mon 13 Jan 2025 13:13:55 +0000
ROA not before:           Mon 13 Jan 2025 13:08:55 +0000
ROA not after:            Mon 12 Jan 2026 13:13:55 +0000
asID:                     262765
IP address blocks:        168.232.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cf:53:d5:6d:c8:55:c7:60:a5:e6:fb:ef:4a:50:17:37:13:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
        Validity
            Not Before: Jan 13 13:08:55 2025 GMT
            Not After : Jan 12 13:13:55 2026 GMT
        Subject: CN=A8DB32FA7868C60F28AE0AE101E024FBFD520DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:c0:79:96:82:b6:02:b3:34:b6:e0:34:b8:
                    37:11:43:bd:5b:11:da:ef:fb:58:9d:9a:47:b9:7f:
                    96:d4:be:50:b3:4d:db:5f:d6:05:64:a6:73:85:ae:
                    fa:68:4f:00:dc:04:e1:bc:00:2d:c1:9c:c8:7b:3a:
                    6d:18:db:71:ca:bd:a2:5b:9b:cd:32:23:40:64:31:
                    5c:5c:e4:8e:65:04:f4:13:80:61:e1:56:05:93:42:
                    9d:ff:e5:45:ac:11:be:c8:82:fc:c1:67:5a:02:46:
                    ac:ff:91:10:22:f9:96:16:2f:ed:10:d7:eb:83:5e:
                    a7:9c:f9:e4:b9:ef:ff:7e:5d:b6:1a:76:f0:b9:04:
                    ec:84:46:38:84:79:9c:1d:c5:21:41:d9:4f:6b:c7:
                    c0:a1:31:0a:02:f2:03:4a:44:40:c1:0d:44:ca:67:
                    a6:8e:c5:69:56:87:8d:0c:8c:45:d1:f8:d2:7c:70:
                    b3:d8:80:3f:f9:89:4f:f0:cb:5a:17:e2:12:58:51:
                    65:07:4f:74:b9:97:00:13:e9:45:f9:d9:86:68:a8:
                    92:62:c4:b6:03:81:df:60:a5:e8:45:20:f2:8f:67:
                    26:12:10:c3:41:71:c9:4e:dc:b1:a4:67:a5:71:91:
                    d6:bc:3e:fa:34:38:07:9e:29:08:c8:1f:6a:1c:07:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:32:FA:78:68:C6:0F:28:AE:0A:E1:01:E0:24:FB:FD:52:0D:C2
            X509v3 Authority Key Identifier:
                keyid:19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:20:ee:71:2e:76:0e:da:88:67:1e:10:35:b9:77:31:1d:13:
         4d:1b:6e:3d:d3:24:f9:35:d9:13:d1:ac:d6:dc:7e:0b:11:18:
         6a:6c:75:32:3a:ec:8e:6f:6f:a0:05:09:6e:ef:3b:cf:7b:db:
         36:60:0a:90:01:20:e7:6d:36:fa:2e:99:a5:0d:ae:04:e6:84:
         82:da:28:4e:dc:ad:3b:6f:cb:8d:d3:9e:4f:ce:f0:be:d7:5c:
         ea:48:20:67:cc:45:d6:fc:d4:8d:38:8a:f5:ea:7d:96:7d:0b:
         21:3e:12:85:ba:c1:5a:a4:9b:cd:cc:ab:46:2c:04:a7:8f:5d:
         76:6e:19:a2:fb:3d:c5:4e:ec:fb:f4:af:13:62:32:78:b5:62:
         34:db:cb:d4:66:c4:b5:ad:86:47:7b:aa:6e:8b:b0:a8:e6:42:
         52:a5:47:9f:a4:5e:78:65:1d:65:e4:40:3b:49:4a:3f:ee:c2:
         c9:ee:b8:35:68:05:47:ae:4b:26:98:c5:e4:60:cf:25:ce:21:
         81:37:71:3a:65:41:ab:83:95:6d:b9:db:61:d9:1d:e7:9a:35:
         af:b4:48:53:63:84:26:cb:99:33:20:cf:39:2d:0f:20:ff:cc:
         b3:49:dd:1b:7b:fd:cb:a6:d0:fb:10:6b:ba:93:32:0f:53:53:
         be:46:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:35 2025 by rpki-client