Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa
File:                     3136382e302e3232342e302f32322d3234203d3e20323635323630.roa (raw, json)
Hash identifier:          4BOWc3RKep/Xui0sLAyS47VYuiR5FiDDuFZBEp9abA8=
Subject key identifier:   21:97:27:0A:97:16:97:28:0D:0D:3D:59:15:A4:3E:54:A3:2D:2D:6D
Certificate issuer:       /CN=C015B32C7C5158D42E33F7D1939172DB85380C54
Certificate serial:       540EFE2AC041B84AD6F9D346DC64B01F73CFF29B
Authority key identifier: C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa
Signing time:             Wed 03 Apr 2024 18:31:47 +0000
ROA not before:           Wed 03 Apr 2024 18:26:47 +0000
ROA not after:            Wed 02 Apr 2025 18:31:47 +0000
asID:                     265260
IP address blocks:        168.0.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl
                          rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:fe:2a:c0:41:b8:4a:d6:f9:d3:46:dc:64:b0:1f:73:cf:f2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C015B32C7C5158D42E33F7D1939172DB85380C54
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:b3:8d:ca:1a:2c:50:33:3a:f7:ff:28:f4:
                    5b:fb:cf:e2:4c:47:04:81:1e:d5:ea:3b:bb:32:10:
                    e4:7b:61:f8:e2:f3:1c:66:7e:7d:8b:74:eb:d4:1f:
                    e9:0f:da:05:35:d0:b8:37:e8:1a:ce:19:b0:f5:da:
                    39:4b:c8:a9:19:72:40:38:b4:e1:d9:91:92:3d:82:
                    9a:65:32:9c:28:41:db:d9:5a:3d:7d:bb:ec:f6:63:
                    fa:f9:a2:5b:3e:64:a3:47:2d:5e:dd:4a:29:b8:79:
                    88:2d:7d:aa:ba:fd:ac:bf:28:88:c9:42:b4:05:55:
                    5f:93:8b:c8:10:d0:6b:86:80:ed:27:7a:52:d9:77:
                    6b:29:65:fc:ae:1d:e3:aa:d1:e4:9f:bd:1a:e0:7b:
                    9f:d6:a8:ac:2a:0b:0f:e6:74:c1:fa:8d:ee:70:53:
                    ea:8b:ea:b2:41:84:52:f3:5d:9d:1e:63:18:f4:ce:
                    3f:8f:04:8e:23:d5:b5:cf:0e:04:e9:1b:d6:7d:fd:
                    2f:40:67:99:c4:fe:6d:6a:2c:32:09:54:5d:92:51:
                    0b:10:40:8b:dd:e1:0a:3d:6e:0a:ff:aa:8f:aa:a5:
                    80:c9:88:e7:77:f3:2d:7a:f5:53:a4:1e:41:27:35:
                    2c:15:b3:87:f4:0b:39:18:cc:cc:e9:f9:4a:50:a7:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:97:27:0A:97:16:97:28:0D:0D:3D:59:15:A4:3E:54:A3:2D:2D:6D
            X509v3 Authority Key Identifier:
                keyid:C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:0c:35:27:61:56:7a:75:39:a6:6d:87:37:f5:03:7e:a1:
         c3:2e:60:87:47:44:06:c4:72:6a:92:a2:98:92:99:16:16:99:
         62:45:e8:d1:74:99:46:50:92:6e:6c:e4:b3:23:a8:3c:1f:f9:
         31:c0:96:d2:ea:b4:e2:4b:e8:26:47:14:1f:df:c4:a9:fc:50:
         af:ed:d4:76:74:16:ac:ee:c3:18:67:23:34:28:a3:b3:ba:f8:
         99:47:03:c3:5f:a5:0d:19:57:8c:77:43:b8:57:ff:3e:b2:d4:
         db:81:ed:40:63:a3:bf:8c:f7:21:24:5a:4d:23:12:84:a9:ab:
         1a:3b:15:c1:bb:e6:5f:60:ba:cf:13:32:60:09:c9:27:b7:ef:
         ca:d9:bf:ca:c3:7a:1c:7f:98:44:69:ed:e1:ff:76:5d:f0:87:
         8f:f1:16:37:5c:ff:53:8e:1d:4b:20:0f:fc:2c:9b:24:62:96:
         68:61:07:3a:8f:5a:a6:90:35:be:2b:6b:38:a5:c8:78:86:db:
         ee:32:e8:e3:d3:3e:52:8a:3e:f8:56:24:fd:1d:c6:44:a4:a1:
         f8:0f:0c:2c:32:47:0d:f3:00:f1:2f:e7:33:60:c1:0a:f8:b6:
         5d:df:5c:8f:7b:57:1b:bf:5e:bb:3f:73:b5:6d:ec:93:cf:1f:
         4c:c0:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:58:44 2024 by rpki-client on console-fra.rpki-client.org