Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa
File:                     3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (raw, json)
Hash identifier:          42TGlYXeMrZ3WBUUNo0RJ+/tI4ezgtKMlfJ0GWow9f0=
Subject key identifier:   D8:68:48:DC:7C:EE:11:C2:2D:04:69:9B:6F:37:4F:37:A6:13:1E:07
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       61563D3FC2E0E4D92EDB669B6D6C71168893615C
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa
Signing time:             Wed 03 Apr 2024 18:32:06 +0000
ROA not before:           Wed 03 Apr 2024 18:27:06 +0000
ROA not after:            Wed 02 Apr 2025 18:32:06 +0000
asID:                     265938
IP address blocks:        164.163.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:56:3d:3f:c2:e0:e4:d9:2e:db:66:9b:6d:6c:71:16:88:93:61:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Apr  3 18:27:06 2024 GMT
            Not After : Apr  2 18:32:06 2025 GMT
        Subject: CN=D86848DC7CEE11C22D04699B6F374F37A6131E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:b4:f0:f8:cf:a6:2e:bd:ab:6e:78:8b:61:
                    ea:4f:bd:a3:41:71:f7:77:7e:16:18:b3:0a:df:f4:
                    27:63:64:34:bb:94:68:7a:60:75:fe:92:96:80:16:
                    ed:7f:4b:8f:8b:42:8e:d4:46:2f:7b:d1:ef:1f:2c:
                    6c:c7:5a:9a:87:1e:93:99:33:6a:b1:24:b5:ef:58:
                    7c:56:de:91:0e:e7:61:63:78:44:b4:3c:44:61:45:
                    05:fb:f2:e8:57:5d:bb:ec:52:a2:8c:6e:64:3f:c4:
                    ba:6f:ae:07:47:1f:38:34:58:d6:d5:47:ce:75:71:
                    1f:95:3d:7d:ca:ac:35:a0:87:31:80:ae:73:eb:09:
                    8e:08:e3:88:86:25:a8:6c:1a:0d:08:d0:a7:44:6e:
                    29:6f:d2:d9:84:69:55:56:54:61:4a:8b:1c:e1:fe:
                    44:b9:ac:d2:28:b7:8b:51:46:90:16:21:ac:ab:a9:
                    aa:d3:61:fd:af:73:34:12:6f:9c:7f:51:83:ae:4b:
                    8f:77:95:b9:d9:4f:62:5a:c8:ed:1a:92:ef:94:15:
                    9c:10:cf:8a:63:89:1e:fb:39:45:4d:21:db:51:e8:
                    b2:2d:63:3f:6d:f2:f9:53:6d:b9:c9:03:48:1b:6a:
                    c6:17:9f:0f:ab:2a:7f:a7:3d:14:ea:45:9a:5d:86:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:68:48:DC:7C:EE:11:C2:2D:04:69:9B:6F:37:4F:37:A6:13:1E:07
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:bb:1c:a5:ce:f0:6e:1a:25:6f:ee:b4:f6:f0:65:a6:3a:
         e0:04:46:c8:86:ab:6c:50:83:b0:67:11:f0:ff:90:cd:13:ba:
         5d:84:1a:0c:a1:af:46:c2:30:6f:a2:f4:8c:42:27:29:75:82:
         58:47:f8:00:01:2f:4c:8c:37:68:ee:64:52:c2:4c:bf:b0:bc:
         a5:b4:77:96:1c:b3:de:c8:c3:4f:2c:5f:ad:46:44:a6:f9:ea:
         b8:5c:f6:a3:22:6c:18:05:b3:d8:b1:2c:aa:05:29:aa:36:66:
         db:cb:3d:e3:fb:9b:2a:71:bf:b9:79:00:d1:dc:e5:4f:f0:97:
         8e:8b:e0:57:38:db:42:40:84:4d:2b:7f:e7:ba:8c:53:e5:33:
         95:ce:be:19:5f:3e:18:14:34:b5:b4:af:47:df:a8:0f:16:55:
         7b:1c:44:28:49:2f:4d:ec:f1:c2:6e:91:ec:b8:42:e7:9b:0c:
         8d:68:d7:23:6f:a8:c0:69:29:bf:65:cb:ef:0f:3f:36:b8:d8:
         1e:38:95:79:a2:e1:e6:cb:bc:c4:4e:ae:24:13:38:cc:5c:52:
         0a:33:a5:c9:83:73:ab:96:cc:a8:8e:12:84:6a:4f:eb:a7:ff:
         64:2e:59:a8:90:6e:3e:31:01:92:5d:41:1b:f8:68:ca:ab:9a:
         89:d8:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org