Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
File:                     3135302e3136352e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          rwdsf7CFNPwqBvjWc9momubnHUWeAaSvAbTzYJOSMuo=
Subject key identifier:   89:31:DD:A3:B1:E4:36:2E:16:54:02:25:8C:EB:F4:8A:B2:07:1D:9F
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       520AA7BB4D3E1714C026DA0B6BA020E8BB37D1B7
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:31 +0000
ROA not before:           Wed 26 Jun 2024 20:41:31 +0000
ROA not after:            Wed 25 Jun 2025 20:46:31 +0000
asID:                     1916
IP address blocks:        150.165.0.0/16 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0a:a7:bb:4d:3e:17:14:c0:26:da:0b:6b:a0:20:e8:bb:37:d1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:31 2024 GMT
            Not After : Jun 25 20:46:31 2025 GMT
        Subject: CN=8931DDA3B1E4362E165402258CEBF48AB2071D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:b0:b7:5c:93:09:30:bb:3a:36:30:5e:5f:
                    7c:07:5c:72:12:3a:d7:7f:1f:7f:07:e0:2e:e9:ca:
                    c4:ec:cc:6a:bb:23:45:16:f3:16:8d:1c:cd:03:8e:
                    e1:be:96:f2:0e:f9:41:69:e1:34:c4:45:a0:5f:f3:
                    f4:52:23:06:b9:44:4e:a4:12:a9:c1:3f:22:93:7b:
                    7f:1f:61:92:90:9a:8d:3c:e8:93:44:4b:cd:b6:a2:
                    17:7d:42:c1:78:37:b8:44:d9:87:03:3e:27:8a:16:
                    76:26:e1:e8:ed:d1:5c:eb:76:29:9b:6f:95:f3:7a:
                    02:f9:55:22:c0:82:c8:cc:1d:f3:aa:62:fd:4d:fc:
                    67:3e:96:e4:97:22:b2:38:b5:c4:8c:ed:d4:ed:6d:
                    35:a1:fa:1c:e0:54:b7:ea:ec:36:1a:ca:43:e8:95:
                    44:ea:a3:f0:30:80:ea:ba:20:2d:e8:a1:b1:d4:f5:
                    a5:1c:7b:33:e7:88:f3:76:da:6e:de:c6:b2:81:d7:
                    b7:28:11:18:02:d1:30:ea:b3:cb:e8:25:bc:f7:09:
                    7b:76:d6:ec:70:05:c3:c6:37:f7:ca:a1:5c:f9:e9:
                    c8:f5:07:b0:dc:12:5a:5d:cd:38:c9:53:dc:2f:68:
                    f4:69:ef:0c:64:26:8f:f2:23:d4:7f:ce:28:3c:9c:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:DD:A3:B1:E4:36:2E:16:54:02:25:8C:EB:F4:8A:B2:07:1D:9F
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3135302e3136352e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:78:5e:5f:18:eb:ce:b2:d0:79:91:f2:de:fd:92:eb:57:fc:
         fa:a2:68:01:80:aa:8e:fc:62:ac:b1:e7:49:fc:77:31:5b:73:
         f3:6a:ec:84:aa:17:ec:6f:04:d9:96:c3:72:dd:4b:2c:93:17:
         70:0d:0e:bd:e3:73:1a:c9:cd:9d:ae:94:21:d8:1c:bb:c9:31:
         27:3d:74:1b:2a:fa:c7:d9:56:f6:11:4b:f6:30:c9:41:66:17:
         43:2f:3c:02:93:8d:b2:4a:ac:b6:4d:98:fa:1a:eb:38:a6:33:
         85:4b:9f:fa:89:90:e9:af:c9:9c:82:ab:bc:6e:45:3a:96:0f:
         93:21:ac:4b:ec:54:fe:76:30:5b:77:23:02:b9:a1:79:95:ce:
         34:3c:1c:a2:0b:2c:88:0d:d7:4c:4e:b7:04:02:1d:c5:0b:06:
         84:f4:91:01:4b:6e:7f:84:e8:ad:1b:e5:08:70:2f:f2:7a:1b:
         d2:67:4d:a2:5f:a5:02:e0:6e:32:22:c4:02:c7:2d:62:4d:3f:
         48:fb:7e:83:a8:bd:29:77:ed:fa:e4:8f:19:c6:94:e2:74:a6:
         17:61:23:f2:dd:bc:eb:f2:7e:8b:1b:e5:fe:dd:ab:a9:96:80:
         f5:1e:12:e9:9e:00:d0:98:2c:e9:05:8e:f2:d3:dd:49:85:4c:
         1f:df:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:09:01 2024 by rpki-client on console-ams.rpki-client.org