Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
File:                     3136382e302e3233362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier:          CYDeJPd/xNz6dYgI4US5cdobdU6fyRYz+sh4Ofvw45M=
Subject key identifier:   3F:78:CC:75:8A:6F:25:3E:DF:7E:5B:51:B8:18:E4:E1:56:54:8F:0A
Certificate issuer:       /CN=57BA365DA248977C04993DB489E366A6AF739D9F
Certificate serial:       6E8A149C4EE222B89E1DBA64D4CA88E465E9BB01
Authority key identifier: 57:BA:36:5D:A2:48:97:7C:04:99:3D:B4:89:E3:66:A6:AF:73:9D:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
Signing time:             Mon 28 Oct 2024 14:37:54 +0000
ROA not before:           Mon 28 Oct 2024 14:32:54 +0000
ROA not after:            Mon 27 Oct 2025 14:37:54 +0000
asID:                     52872
IP address blocks:        168.0.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8a:14:9c:4e:e2:22:b8:9e:1d:ba:64:d4:ca:88:e4:65:e9:bb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BA365DA248977C04993DB489E366A6AF739D9F
        Validity
            Not Before: Oct 28 14:32:54 2024 GMT
            Not After : Oct 27 14:37:54 2025 GMT
        Subject: CN=3F78CC758A6F253EDF7E5B51B818E4E156548F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:66:db:57:1d:2f:bf:80:b4:ff:64:c5:fd:
                    a7:55:f1:58:cd:7e:61:4c:69:f8:8a:8f:9a:60:71:
                    d0:99:b7:3b:17:7e:b4:96:9e:62:66:30:17:3c:76:
                    3d:36:bf:c0:fc:7c:72:dd:21:bc:c2:ac:d7:01:f2:
                    2f:c9:45:92:8b:02:58:49:d2:fd:7d:87:27:e1:60:
                    7b:1a:bf:8f:ed:0a:a8:fe:7c:a2:b6:ed:d3:9d:54:
                    3d:c6:b4:52:a2:eb:6b:40:22:ad:da:f9:17:81:46:
                    de:b3:ad:56:c5:93:0d:84:74:fb:32:3c:a4:85:af:
                    03:1f:ba:88:8e:ba:93:0f:d2:17:3d:1b:4a:b5:c2:
                    51:46:24:b4:b6:54:2b:e3:6b:e4:b8:a6:0d:38:47:
                    a7:67:67:36:27:74:30:b0:92:1a:8a:89:ce:fd:5a:
                    a4:47:e3:b9:2f:20:08:6d:61:7c:2f:8b:d3:4d:36:
                    62:df:61:90:b1:46:ab:30:fe:86:ae:80:a7:75:d9:
                    a5:a5:28:59:6f:52:2c:3b:82:de:ba:7b:91:28:e6:
                    1d:5f:2a:ee:6b:2f:64:78:bb:94:e0:9e:f4:02:38:
                    64:96:21:e2:26:7c:08:0b:03:1e:b8:31:45:5a:00:
                    0c:46:5e:59:71:38:64:d2:6c:e4:de:57:81:a0:64:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:CC:75:8A:6F:25:3E:DF:7E:5B:51:B8:18:E4:E1:56:54:8F:0A
            X509v3 Authority Key Identifier:
                keyid:57:BA:36:5D:A2:48:97:7C:04:99:3D:B4:89:E3:66:A6:AF:73:9D:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:80:ad:a4:eb:a0:79:a9:72:12:d3:c6:1a:08:b7:75:da:7b:
         cf:1f:d3:5d:59:fa:81:6a:60:b1:f0:3e:4d:bb:5f:c9:4a:ff:
         dc:8b:07:9e:d8:3c:70:1d:9a:7c:ba:47:45:f0:0d:a2:7b:95:
         8c:d8:72:2b:98:1c:ee:25:a1:1e:4e:16:02:13:cf:35:95:1f:
         54:85:91:fd:32:b7:05:1b:48:bb:59:a9:2a:80:48:6f:2d:8a:
         66:bf:d4:4e:43:c5:f0:2d:f1:3a:a9:40:7a:80:33:fc:f0:5a:
         24:df:d6:a7:4f:a7:47:35:02:1e:3f:b7:ad:00:ce:bd:3c:06:
         c4:6c:18:32:30:5f:14:dd:3b:eb:00:dc:d4:6e:b8:a7:0a:e2:
         68:a8:ba:3c:c1:0e:86:dd:4c:14:e9:81:a0:32:63:5c:f2:fc:
         73:58:bb:01:49:77:8c:a4:70:cf:b3:f6:74:69:5c:fc:e6:40:
         06:6a:27:a2:bd:4d:d3:e0:81:15:ef:9e:82:cb:de:73:e7:e2:
         54:06:a5:e7:4e:43:53:83:fb:45:db:d0:dd:89:b5:73:67:d4:
         f1:2b:40:9c:b8:3f:5f:15:d9:b8:3f:7e:8d:5b:18:21:12:7b:
         2b:02:36:44:d5:bd:12:f0:07:e7:54:ca:a8:9c:35:60:a4:1d:
         c3:32:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:51 2024 by rpki-client on console-fra.rpki-client.org