Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          fzViHOTPMxUjOkR8Q+BdII1nEFRlY3ZtIZYs3zp6Ma8=
Subject key identifier:   66:29:40:0F:00:1A:F6:37:AE:07:5D:D4:A3:69:8C:51:14:FA:CE:86
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       35D74079A020DC5F9ED8D69A18FBE7E68AE8A775
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     265425
IP address blocks:        168.195.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:40:79:a0:20:dc:5f:9e:d8:d6:9a:18:fb:e7:e6:8a:e8:a7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject: CN=6629400F001AF637AE075DD4A3698C5114FACE86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0d:3e:38:a2:d9:99:19:c3:db:2b:dd:73:d8:
                    e3:f9:c4:f3:0d:3f:9f:b6:31:42:0e:81:e9:a3:90:
                    32:61:80:44:8b:0d:fc:62:8c:35:c1:07:b2:75:71:
                    39:e5:81:7d:f4:d6:2b:e6:a9:6d:8f:fc:26:1e:c1:
                    a7:74:aa:90:01:1e:53:81:ae:61:8a:b8:65:11:7d:
                    ea:62:91:44:8d:82:23:e8:3a:98:10:47:f2:b8:3a:
                    32:4c:48:42:f1:1c:85:c3:8d:1c:aa:f5:5d:d9:e2:
                    c6:9b:a1:0c:6b:0f:ff:50:41:43:cf:57:6b:7d:28:
                    d2:0e:fe:b8:ff:f4:eb:d8:14:7f:8e:9f:66:42:ce:
                    16:b1:30:38:4f:6e:70:85:13:7a:30:cd:a2:73:5f:
                    8b:f5:6a:a5:e9:11:2b:ef:cf:21:b5:eb:8f:95:39:
                    e3:d0:9d:31:c0:0c:dd:17:6d:66:fa:40:22:7f:12:
                    2c:91:b8:73:81:60:c2:44:5a:4c:59:87:a6:86:9d:
                    c6:ef:f7:0c:e1:83:09:13:af:c6:19:38:4c:96:95:
                    03:15:7b:f4:55:8d:6d:49:29:fe:8e:e4:a8:3a:ae:
                    ac:99:78:e1:9c:41:12:31:fa:56:9a:60:ce:e5:b2:
                    0d:f1:d1:71:0b:bb:45:48:ff:da:bb:94:13:2d:43:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:29:40:0F:00:1A:F6:37:AE:07:5D:D4:A3:69:8C:51:14:FA:CE:86
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:49:12:2f:b2:98:ab:10:3b:f6:0b:d9:6d:79:af:21:7b:c3:
         42:8d:3e:78:4d:9b:26:e8:15:a8:77:4c:2a:1a:52:ca:50:07:
         28:09:04:fe:3a:6d:e9:7d:1a:de:fb:35:07:08:19:64:ff:91:
         64:b5:1f:e1:6e:ed:fe:06:5e:9c:a1:b2:68:9c:37:e3:1b:77:
         ad:5e:e1:b1:e1:16:32:31:a3:68:10:43:03:34:29:eb:df:47:
         ec:78:9a:c2:46:ad:fa:5c:ca:1f:4d:6e:53:b4:2c:21:a5:e0:
         88:7b:28:d9:24:e9:95:5a:42:d4:be:a9:5f:ec:cc:98:65:97:
         bb:a5:9c:0d:ef:44:ae:e4:1b:46:c7:e6:60:4a:ca:34:03:25:
         66:a3:70:f1:ab:c6:fe:db:f2:06:c3:09:69:1f:87:db:f2:32:
         80:fc:28:e7:80:1d:46:54:78:1e:35:76:8e:14:38:bd:d2:82:
         eb:75:9e:55:5d:7e:ff:eb:91:c4:a2:95:28:0e:8f:6e:d3:63:
         3c:94:f5:83:06:3b:35:08:3e:15:ca:51:22:61:4d:21:85:a1:
         b2:30:39:1b:b7:ff:49:47:fc:f4:66:b3:a8:68:e4:f0:0e:99:
         1a:6a:5b:b4:8c:e2:5e:0a:63:6a:01:ca:7d:59:09:7d:46:f4:
         7e:b9:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org