Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
File:                     3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier:          06/csJHNRS5X47Vc+xLF1mIMDqEVkXSg9HNwBXU96B0=
Subject key identifier:   E3:1E:DF:43:F6:5E:8E:21:0C:3B:CD:35:44:FE:6D:58:FD:D7:0F:1F
Certificate issuer:       /CN=57BA365DA248977C04993DB489E366A6AF739D9F
Certificate serial:       1C5531E593E085629E217324B8B8429E489056E4
Authority key identifier: 57:BA:36:5D:A2:48:97:7C:04:99:3D:B4:89:E3:66:A6:AF:73:9D:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
Signing time:             Mon 28 Oct 2024 14:38:01 +0000
ROA not before:           Mon 28 Oct 2024 14:33:01 +0000
ROA not after:            Mon 27 Oct 2025 14:38:01 +0000
asID:                     52872
IP address blocks:        168.197.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:55:31:e5:93:e0:85:62:9e:21:73:24:b8:b8:42:9e:48:90:56:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BA365DA248977C04993DB489E366A6AF739D9F
        Validity
            Not Before: Oct 28 14:33:01 2024 GMT
            Not After : Oct 27 14:38:01 2025 GMT
        Subject: CN=E31EDF43F65E8E210C3BCD3544FE6D58FDD70F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:df:6b:b3:41:78:11:8a:14:43:31:db:70:
                    5e:52:e3:aa:11:ef:22:0f:59:4f:5d:05:cf:3e:30:
                    59:30:e4:13:f8:d9:15:8f:2a:a3:d9:46:fc:71:24:
                    93:68:bb:e0:2c:25:a1:39:da:4f:58:64:af:05:9a:
                    69:3c:7b:6f:c3:10:0f:93:ef:ec:83:d6:59:77:da:
                    24:51:0b:8b:0e:c9:28:f1:3a:50:f5:ed:1e:9c:ed:
                    e6:d4:f2:91:7a:df:98:a3:a3:5d:c7:49:39:1d:b2:
                    62:9b:81:31:ab:e8:eb:a2:7e:81:82:0b:3e:ce:20:
                    a5:34:3f:bf:29:5b:2c:f1:dd:cf:7f:88:87:d5:52:
                    6b:ab:67:37:54:9a:63:d8:cb:75:5f:a5:78:da:06:
                    c4:be:52:16:c1:a0:15:81:01:e5:e9:28:25:00:27:
                    e5:c2:eb:38:ad:b8:f2:75:a6:07:4e:98:63:fc:a5:
                    32:54:86:94:b6:7d:7e:04:99:0d:d4:27:3b:1f:46:
                    68:18:a9:39:57:be:55:73:b1:eb:33:dd:9d:66:00:
                    48:98:49:c0:07:a1:ef:ba:40:ad:38:aa:fa:23:b3:
                    36:8d:82:4c:08:8e:67:1e:a7:d2:36:1e:07:6c:be:
                    93:89:36:b4:5c:f0:a0:97:9d:ab:4c:14:1e:8e:94:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:DF:43:F6:5E:8E:21:0C:3B:CD:35:44:FE:6D:58:FD:D7:0F:1F
            X509v3 Authority Key Identifier:
                keyid:57:BA:36:5D:A2:48:97:7C:04:99:3D:B4:89:E3:66:A6:AF:73:9D:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/57BA365DA248977C04993DB489E366A6AF739D9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BA365DA248977C04993DB489E366A6AF739D9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:20:67:f0:1c:a9:e6:27:30:58:a7:a7:c9:90:8e:6e:a9:
         96:a9:85:74:54:50:5b:ee:62:3b:96:fa:7c:68:d2:c5:90:a8:
         a5:db:d4:bf:c9:6d:9a:be:ca:85:ac:d9:ab:75:a7:00:3d:47:
         e1:98:85:58:f0:2b:0b:6e:59:92:ba:c1:50:9e:7e:3d:08:09:
         40:e5:5d:74:6b:07:d9:dd:8a:b7:4a:3c:6d:fe:4d:8e:68:11:
         07:8f:78:89:6e:4b:9f:c3:1a:fc:72:17:b7:5b:b4:88:40:1f:
         47:7d:6b:56:c5:26:b7:96:08:f0:80:ff:11:b1:77:3b:2f:38:
         a6:54:c0:0f:51:af:31:9b:b0:24:8a:70:f0:6c:65:77:47:a5:
         0a:d6:50:52:e7:d2:51:68:39:2d:7a:14:85:01:73:a7:0b:8a:
         1b:09:f4:98:af:33:6d:46:39:69:b5:67:c0:e1:79:12:59:ee:
         40:35:74:e9:8e:69:3f:fe:8b:ee:bd:d9:40:b5:c8:c3:b1:98:
         50:4e:8a:62:5e:ed:5b:49:35:97:64:87:ef:9e:aa:c8:d6:54:
         e5:38:e3:58:03:ca:e2:61:c5:86:6f:16:76:60:80:b1:fd:a7:
         37:ef:2d:fe:1c:1d:16:cf:e0:1e:f1:78:7a:81:2a:42:81:68:
         f5:1e:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:14 2024 by rpki-client on console-ams.rpki-client.org