Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34362e302f32332d3233203d3e20323634393439.roa
File:                     3136382e3233322e34362e302f32332d3233203d3e20323634393439.roa (raw, json)
Hash identifier:          Y5KQ493AMlT0r57jLFJnqODRAFbiD71Re4GXk/IBQZw=
Subject key identifier:   52:AF:04:2F:C2:6E:25:CB:08:7B:1D:CA:4A:88:E9:C4:2B:AB:C9:18
Certificate issuer:       /CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
Certificate serial:       61618852D175A0E1B2945305FA732ED1E5E39C9E
Authority key identifier: E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34362e302f32332d3233203d3e20323634393439.roa
Signing time:             Thu 04 Apr 2024 04:32:22 +0000
ROA not before:           Thu 04 Apr 2024 04:27:22 +0000
ROA not after:            Thu 03 Apr 2025 04:32:22 +0000
asID:                     264949
IP address blocks:        168.232.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:61:88:52:d1:75:a0:e1:b2:94:53:05:fa:73:2e:d1:e5:e3:9c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
        Validity
            Not Before: Apr  4 04:27:22 2024 GMT
            Not After : Apr  3 04:32:22 2025 GMT
        Subject: CN=52AF042FC26E25CB087B1DCA4A88E9C42BABC918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:49:fe:ff:48:92:a8:4c:45:d1:b3:bc:cb:
                    a8:80:0c:c1:5d:19:a1:13:4a:c2:67:13:5c:d9:30:
                    ba:39:7d:36:c0:27:9c:0c:9e:7c:ee:94:e3:c8:71:
                    71:35:16:fd:66:c4:7c:49:ff:4a:b2:d6:96:da:28:
                    97:61:54:76:26:c1:97:39:3e:57:0d:0e:45:c6:e0:
                    10:24:42:5a:8b:bc:a8:d9:82:90:d2:fd:81:75:d7:
                    c8:ee:aa:4c:16:d5:82:aa:53:47:61:70:ee:b5:96:
                    d8:52:ee:97:83:df:4d:9b:e8:d3:53:32:bf:ad:89:
                    21:8a:ef:3b:d4:ad:ca:e6:55:97:e1:ac:30:27:96:
                    85:40:ec:37:8b:cf:95:97:c4:94:8f:49:84:bb:a5:
                    ae:72:22:40:3f:6a:8b:95:cc:76:d1:79:32:41:a7:
                    ef:93:f4:35:ff:7d:74:54:64:e8:4b:7a:21:b2:c3:
                    fd:23:30:9f:73:ba:8e:e6:ac:d0:0d:82:e7:40:22:
                    65:2b:b1:62:dc:3c:86:17:6d:14:3f:3b:9a:6b:ae:
                    61:56:36:9d:62:d0:e1:9b:d3:a1:6b:11:23:db:5b:
                    96:b4:52:3b:b5:45:da:0d:6b:ad:ea:64:09:ea:c5:
                    8c:f8:4b:a2:ad:29:c2:ff:ac:9c:a9:98:bd:88:01:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:04:2F:C2:6E:25:CB:08:7B:1D:CA:4A:88:E9:C4:2B:AB:C9:18
            X509v3 Authority Key Identifier:
                keyid:E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34362e302f32332d3233203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:67:b5:a6:2f:3c:0a:e0:c5:d6:be:5b:94:87:a6:cc:78:e0:
         6c:5b:38:0c:8e:20:cc:04:9e:6f:26:d0:2e:39:18:52:fc:a9:
         47:80:b6:d7:b7:b3:cb:cc:a9:4d:e4:8b:34:84:c0:44:f2:87:
         75:4b:5d:c7:e4:6c:06:cb:03:78:e3:ca:28:09:d2:c1:06:fe:
         a9:d1:a6:00:da:30:f2:8b:99:f1:5d:21:f9:e5:29:af:c7:e1:
         cf:7e:50:62:d0:64:a7:1e:8f:1d:ac:72:59:76:5a:98:03:7d:
         07:5b:59:9a:b4:d2:b6:89:fe:98:7c:35:98:ee:56:53:d1:91:
         d5:19:dd:d1:00:14:bb:9f:a5:fa:75:ad:73:85:bb:8a:8e:ae:
         08:d3:42:23:44:db:73:89:cf:26:9c:c4:2e:05:89:49:6d:80:
         40:22:16:ca:8b:09:ff:24:ee:50:01:6b:5b:77:19:c0:d3:25:
         33:6f:1a:77:22:8a:71:3b:7e:21:11:06:00:42:7a:99:a5:56:
         ab:0b:4f:83:36:a0:7a:2d:1c:f6:a5:c8:60:1c:7e:60:76:2a:
         37:e4:12:23:f1:3b:88:ad:9e:f4:d8:8e:b9:b0:d2:c7:16:a8:
         06:46:d8:43:7e:ad:36:79:c4:36:95:1a:b7:5f:06:68:8f:20:
         f1:ed:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org