Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (raw, json)
Hash identifier:          g3xCeLXWmAtgHHuuzyoe1SCvqvS1cUZO0RIruZNP0O8=
Subject key identifier:   00:E8:3C:21:72:0E:F6:C2:14:11:61:D1:C7:F8:00:58:6A:7A:69:17
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       646F8E18144DAA7B2630066CCBC005E6880B5946
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa
Signing time:             Wed 03 Apr 2024 18:31:03 +0000
ROA not before:           Wed 03 Apr 2024 18:26:03 +0000
ROA not after:            Wed 02 Apr 2025 18:31:03 +0000
asID:                     265425
IP address blocks:        168.195.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6f:8e:18:14:4d:aa:7b:26:30:06:6c:cb:c0:05:e6:88:0b:59:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr  3 18:26:03 2024 GMT
            Not After : Apr  2 18:31:03 2025 GMT
        Subject: CN=00E83C21720EF6C2141161D1C7F800586A7A6917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:b0:58:54:38:d9:c7:59:28:35:1b:7c:e0:
                    3c:22:d7:c6:14:91:41:be:18:be:e8:9c:19:99:40:
                    45:f8:f6:1f:6f:ba:5c:9d:5c:28:ef:32:86:fc:d1:
                    5e:cd:e7:ea:e7:42:06:9b:0b:83:6d:3f:51:47:a8:
                    b7:6b:66:06:61:a7:e9:4e:ca:8d:c0:4f:16:aa:c8:
                    4b:6f:15:08:a4:61:fa:82:55:6c:ac:b9:c6:bb:d4:
                    76:f1:23:86:df:ba:3d:2f:e5:06:dc:4d:ac:91:45:
                    b0:51:66:19:9d:a7:06:f8:1c:7b:a5:8d:b1:bf:86:
                    fd:bd:15:21:a0:8c:02:2c:0d:33:c8:1e:16:ac:b7:
                    4f:ea:a3:89:30:f6:6a:de:6b:f6:25:01:fc:b3:f1:
                    33:ba:a5:d4:c4:64:e9:6b:2c:ab:86:84:fb:d1:59:
                    c4:06:15:2d:a2:67:ff:11:01:90:57:27:ce:d3:78:
                    58:a8:3a:64:96:9d:44:ac:b2:67:0a:f6:78:8b:eb:
                    8f:b8:92:40:d2:6d:0a:d6:4a:d3:f1:1e:95:1b:30:
                    44:0b:86:02:39:97:8d:69:31:25:7c:da:f0:bd:92:
                    2b:d5:53:30:2b:68:5f:dc:2e:1a:06:2f:8b:19:0c:
                    a9:ee:24:8a:9c:1d:36:89:22:ed:8e:cf:77:b8:5a:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E8:3C:21:72:0E:F6:C2:14:11:61:D1:C7:F8:00:58:6A:7A:69:17
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:ed:16:63:99:ae:52:8e:d1:d7:78:34:e0:5f:cc:e1:bf:
         6e:42:05:b2:e4:8f:25:d2:3c:19:19:9e:a0:ff:9b:f2:05:cc:
         4d:35:39:80:40:9d:5f:2b:c9:6d:70:c5:e8:0a:a5:58:1c:ae:
         59:83:13:15:47:86:db:51:17:00:c7:18:c6:7c:e8:e5:67:d4:
         68:7f:02:e2:fb:71:c8:6b:2d:db:37:40:de:45:4e:ae:ae:09:
         11:11:2c:fc:fc:da:eb:8e:1e:7c:80:8f:29:71:28:ad:1a:e2:
         c5:7c:14:e4:8a:85:cf:ff:ae:f5:71:0c:5b:fb:fa:e8:59:9b:
         c5:25:57:c6:0e:4b:69:53:61:d0:c3:31:5b:1a:00:b6:96:20:
         3b:de:30:40:f2:32:42:78:d5:7f:78:2f:52:19:76:e8:30:19:
         b6:fc:53:f1:1d:af:34:b4:11:8c:be:96:41:5b:6b:17:9a:97:
         e4:99:88:31:6a:42:80:6e:da:9b:d9:90:4d:8b:5d:8d:88:ca:
         4c:31:f5:34:36:ef:6b:1c:7b:75:50:89:99:e6:df:3e:83:5d:
         aa:87:3a:68:bc:5b:49:9f:ff:ce:f7:78:d5:d4:87:15:99:81:
         63:12:ea:72:40:6b:c2:e5:f0:29:2d:12:a8:67:eb:58:29:3f:
         00:21:da:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org