Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa
File:                     3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (raw, json)
Hash identifier:          PEAFJkvscmhxSv8lXirGTkV+5qwjdLnclEb6BNDhupY=
Subject key identifier:   52:70:91:48:A0:A2:07:81:9B:EF:4A:11:95:4F:C1:F4:D5:C3:77:F1
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       0255BB59FFE10E4BE87A6353AE4023A4CEDD6C88
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa
Signing time:             Wed 03 Apr 2024 18:32:06 +0000
ROA not before:           Wed 03 Apr 2024 18:27:06 +0000
ROA not after:            Wed 02 Apr 2025 18:32:06 +0000
asID:                     265938
IP address blocks:        164.163.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:55:bb:59:ff:e1:0e:4b:e8:7a:63:53:ae:40:23:a4:ce:dd:6c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Apr  3 18:27:06 2024 GMT
            Not After : Apr  2 18:32:06 2025 GMT
        Subject: CN=52709148A0A207819BEF4A11954FC1F4D5C377F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:a2:13:e5:be:60:5c:59:fa:18:97:fb:00:
                    b6:0a:05:f3:25:22:af:f3:d4:93:21:7b:60:1e:7f:
                    65:29:c7:97:02:6f:8c:53:ae:bd:d5:3c:5e:81:0e:
                    5a:79:22:04:26:4e:b0:b3:95:6c:c1:13:74:9c:52:
                    b6:aa:b2:c4:b0:06:0b:a4:d5:a8:91:18:95:05:bb:
                    6d:50:4e:94:23:2e:58:76:10:be:9e:35:c2:20:d8:
                    c6:c9:b5:b3:e6:5a:80:8a:d8:8a:b4:35:32:63:d1:
                    8b:35:8a:8e:9a:8e:a9:11:a2:eb:88:07:d2:97:4a:
                    5b:6d:79:e0:95:02:91:80:5a:cf:88:1b:b8:9f:68:
                    7f:6a:f5:d1:1e:15:92:08:f1:d1:63:13:ed:c6:d6:
                    e9:56:74:bf:48:26:49:2c:1b:98:1b:b5:eb:46:ae:
                    e7:e2:aa:95:d1:3d:5f:f5:e6:bb:ae:99:00:62:e3:
                    ab:75:c0:e9:c9:24:6f:00:0c:00:2c:49:ae:b4:5a:
                    12:ec:65:5c:af:d5:a9:2a:07:35:4a:a1:d5:37:60:
                    54:0b:7d:c3:65:26:32:3f:ac:f0:be:d5:5f:88:c5:
                    13:34:a5:82:d1:dc:0f:40:44:db:e8:ca:79:6d:36:
                    ca:73:da:6e:b3:d9:05:b9:6f:b0:eb:80:f2:4e:ab:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:70:91:48:A0:A2:07:81:9B:EF:4A:11:95:4F:C1:F4:D5:C3:77:F1
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:e1:84:46:a7:d5:d3:6d:1f:b9:39:79:23:94:58:1e:34:98:
         35:e4:d2:00:0d:a5:88:23:0f:3a:b2:ca:ae:3e:fc:3e:e9:51:
         0f:01:6e:c7:d8:a3:d9:ca:24:13:f3:8e:ac:32:36:c6:8c:70:
         e9:f8:5c:56:e1:89:d0:4d:dc:56:a0:4c:16:db:fb:ea:02:7d:
         c6:60:9c:fa:d5:21:9f:bf:a3:bb:a6:88:3a:3e:ad:dd:1d:85:
         20:31:02:93:1a:f5:25:9e:d9:13:d1:3a:81:34:58:71:a2:d1:
         8d:5f:9a:38:b6:8b:38:e3:80:20:04:64:dc:15:2f:9e:f3:53:
         86:f1:5c:4e:7c:81:f7:56:31:9f:60:9c:dd:47:bb:cc:56:4a:
         84:34:7b:d9:f8:57:a9:11:58:87:fa:a7:10:0c:42:c6:bb:43:
         ce:89:4a:82:83:98:6e:7c:cc:75:75:0f:53:67:ab:28:69:dd:
         8c:77:3a:43:fa:22:89:30:0b:c3:05:ec:57:72:d7:aa:13:03:
         66:e2:d1:d8:8c:8f:23:75:6c:fc:f8:9c:ef:90:0f:1e:03:65:
         cb:54:42:96:eb:c1:52:6d:93:ac:16:d3:97:95:49:f1:7a:91:
         44:12:4d:41:9d:b9:5d:99:7b:61:fe:0a:a9:ed:79:97:11:6e:
         51:06:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org