Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa
File:                     3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (raw, json)
Hash identifier:          hwsl83wSIyJi6p8hiNLyxAZ4S/ObasMEbSH8yYHKQm0=
Subject key identifier:   BB:96:E4:8F:F3:40:12:FB:84:DB:12:45:35:1D:98:2D:B0:21:A0:8D
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       09847AC69151AE69E9E84E6981D0FC25FAC9271D
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa
Signing time:             Wed 03 Apr 2024 18:32:06 +0000
ROA not before:           Wed 03 Apr 2024 18:27:06 +0000
ROA not after:            Wed 02 Apr 2025 18:32:06 +0000
asID:                     265938
IP address blocks:        164.163.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:84:7a:c6:91:51:ae:69:e9:e8:4e:69:81:d0:fc:25:fa:c9:27:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Apr  3 18:27:06 2024 GMT
            Not After : Apr  2 18:32:06 2025 GMT
        Subject: CN=BB96E48FF34012FB84DB1245351D982DB021A08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:7f:e8:06:ca:cd:a8:6b:16:6b:25:7f:b1:
                    91:96:11:57:44:21:55:20:5d:4c:56:77:08:ad:d5:
                    67:d0:cf:b4:17:ba:ef:18:49:15:fe:c8:a9:65:68:
                    b7:b4:c4:a1:87:c5:e5:4a:86:32:9b:20:90:f8:6c:
                    75:ea:6f:5c:4a:ec:85:d2:0f:ea:9f:e4:20:77:29:
                    21:54:d7:d1:41:62:59:9d:67:2c:67:eb:6f:cc:4e:
                    f1:d7:fe:dc:52:b0:f1:ca:20:e0:19:fd:0d:8e:94:
                    f2:0e:9b:2e:fd:1f:a2:ae:00:01:5d:3c:4f:ea:a2:
                    61:fb:3f:2f:94:fb:b3:33:d5:91:b4:40:1d:7c:f1:
                    95:7c:30:23:c7:31:c7:95:a5:98:42:3d:3c:c2:5f:
                    6e:76:fa:36:35:c0:28:42:79:e0:a9:ce:39:2b:e2:
                    6c:72:db:76:30:7f:18:a4:62:4c:63:ec:3e:e1:7e:
                    c4:d2:a5:f5:07:23:08:a8:88:68:ea:f3:4b:b7:4a:
                    22:2e:5a:84:1d:88:4f:83:dd:c9:92:e4:97:3d:a3:
                    cf:0e:40:75:1e:1e:a9:3b:bd:a9:be:31:56:11:4f:
                    7e:fd:f2:a5:17:ff:5d:09:e2:f4:91:69:68:8a:ab:
                    cc:f5:18:2a:c4:3e:7f:46:b8:41:8b:93:31:e4:09:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:E4:8F:F3:40:12:FB:84:DB:12:45:35:1D:98:2D:B0:21:A0:8D
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:28:45:ce:9a:f6:e0:ce:62:eb:25:8d:82:3f:eb:01:6b:84:
         f3:f9:e6:00:29:20:8d:1a:f3:29:8c:6f:8a:a2:e9:89:04:a2:
         f3:08:26:32:06:28:d3:d9:01:b8:68:d9:b1:13:c0:f9:f4:37:
         c8:9b:ce:1d:e1:d9:bf:99:1d:5e:cc:51:86:69:7d:6b:d3:7b:
         23:1d:f1:8c:5d:c2:3a:37:87:73:73:ce:cc:43:b6:43:ed:1f:
         dd:5f:b7:91:8e:53:79:49:e4:ad:6e:0f:8b:81:dd:a3:4a:d0:
         80:cf:04:76:d1:6f:17:03:b3:a8:68:d5:b4:7a:28:55:ce:32:
         6c:0b:e7:a3:22:33:71:a9:58:6c:39:61:9e:80:24:c9:d4:a4:
         d7:c3:aa:69:6f:c8:0b:bd:5c:39:30:f9:7e:1d:04:4f:c1:73:
         37:10:a0:0c:31:42:23:d0:98:e4:3f:55:72:62:95:d2:5d:45:
         58:a8:ed:37:83:7f:df:f8:eb:df:7d:bc:f5:da:45:da:46:ef:
         1a:12:54:aa:0a:79:30:83:5d:10:3c:02:ad:1a:d9:02:f4:98:
         67:71:54:da:fb:8a:a5:05:3a:53:45:78:5a:c6:10:6c:7f:d2:
         21:63:8c:a9:cc:f7:75:22:af:48:56:fd:80:7b:48:89:e3:e2:
         62:8e:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org