Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34362e302f32332d3233203d3e20323635333738.roa
File:                     3136382e3139342e34362e302f32332d3233203d3e20323635333738.roa (raw, json)
Hash identifier:          8FfV5Nv9G4Uld6LHM76kEoCFsLcFeZM8YzFUGns1p3U=
Subject key identifier:   5E:39:3A:6C:43:23:7C:CD:83:5C:85:30:32:23:0D:2D:84:0A:F0:0A
Certificate issuer:       /CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
Certificate serial:       7EF079A7DF10E87ADB715FF35B196FD75996F5B0
Authority key identifier: AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34362e302f32332d3233203d3e20323635333738.roa
Signing time:             Thu 04 Apr 2024 05:43:12 +0000
ROA not before:           Thu 04 Apr 2024 05:38:12 +0000
ROA not after:            Thu 03 Apr 2025 05:43:12 +0000
asID:                     265378
IP address blocks:        168.194.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl
                          rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f0:79:a7:df:10:e8:7a:db:71:5f:f3:5b:19:6f:d7:59:96:f5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
        Validity
            Not Before: Apr  4 05:38:12 2024 GMT
            Not After : Apr  3 05:43:12 2025 GMT
        Subject: CN=5E393A6C43237CCD835C853032230D2D840AF00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:62:85:4e:96:1a:75:5c:f7:71:30:bb:a9:
                    3c:27:6d:9d:dd:c8:02:5c:86:a5:31:6f:fc:a9:29:
                    ea:60:ee:39:90:e5:ea:1c:ec:5d:42:ed:7d:ea:0d:
                    86:2f:86:dc:a1:58:5d:aa:67:f8:a9:4a:4e:f1:36:
                    82:d4:13:4d:bb:41:5f:4b:e4:3a:70:42:3f:13:18:
                    ea:e8:4a:0f:d5:bd:c9:79:41:80:d0:8f:64:6b:ec:
                    3e:0d:ec:a6:9d:74:26:4d:54:e9:b3:21:20:f9:a2:
                    33:fc:96:b0:87:b6:9b:b5:78:79:2d:4d:c1:41:e4:
                    c5:1a:c9:b9:76:ec:19:b6:31:dc:50:6b:88:a7:4e:
                    87:c2:06:44:6b:20:cf:b7:cf:b1:0c:a9:fb:c4:78:
                    e6:24:db:14:ea:e4:2a:cc:18:8a:63:ca:1a:af:f5:
                    4f:be:70:09:25:14:60:da:c8:fd:0f:c3:f2:0e:3d:
                    ee:dc:af:38:e8:84:cd:ad:5a:5d:86:0f:e5:98:55:
                    cb:39:2f:f4:db:5f:fc:1f:01:72:3c:27:ce:3e:ad:
                    aa:11:4d:06:5d:59:d6:20:d1:5e:ef:0a:c6:94:fa:
                    76:2a:df:17:1e:8a:80:eb:30:a8:43:29:2c:38:e8:
                    ad:aa:d6:07:7e:3d:bd:d9:76:21:23:6a:c2:3c:36:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:3A:6C:43:23:7C:CD:83:5C:85:30:32:23:0D:2D:84:0A:F0:0A
            X509v3 Authority Key Identifier:
                keyid:AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34362e302f32332d3233203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:1f:fa:94:1e:18:b7:50:a2:db:31:c6:92:85:65:04:2a:83:
         7f:d2:6f:2a:87:d0:ec:40:04:e0:b8:61:7c:f2:54:eb:29:52:
         de:ce:e8:b6:eb:17:71:d4:6b:b8:e3:3f:73:0f:12:6b:20:52:
         98:79:f7:47:ec:0e:a3:5f:0d:be:7f:9e:c6:ad:17:f3:a5:92:
         e9:e7:66:78:9e:d5:c5:48:fa:0b:e7:8b:26:25:0d:d1:07:5c:
         83:88:33:06:c8:f0:ec:91:69:1c:48:c3:a0:5d:e7:8e:b7:7a:
         7e:f0:37:e7:f0:db:76:4f:fe:c5:06:7f:3d:97:ba:05:9d:b2:
         cb:90:74:fb:da:36:da:11:2b:81:0b:88:ff:ca:86:2d:2f:ba:
         47:9b:5b:e1:4b:0a:b4:c7:d0:2e:68:d1:7e:e5:a5:70:a3:8e:
         72:a0:32:c7:da:76:6d:14:a6:89:c1:a0:28:a1:e1:15:de:ca:
         26:ea:fa:2a:9f:c0:0a:2a:7d:bb:b6:25:9d:c8:89:17:0b:64:
         4f:3e:ae:4a:b2:56:26:20:73:dc:02:28:75:e9:63:e6:5d:5f:
         f1:00:a8:8f:63:9f:63:d2:70:16:54:96:2f:3c:bb:1e:89:6d:
         b5:a4:b6:9c:90:75:c6:0d:4b:15:85:8b:96:10:4e:20:36:ad:
         b5:70:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:41 2024 by rpki-client on console-ams.rpki-client.org