Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa
File:                     3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          YgptHzBqVYhNktaTEC33uj5emUTNCSNbymulXzwGTos=
Subject key identifier:   40:6B:8B:9B:C6:42:41:C1:87:26:3B:8F:12:36:A4:4A:38:A5:AC:30
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       70FEE2EDD405CA64F2A27E9AE6C1A0555AE69953
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:07:00 +0000
ROA not before:           Thu 04 Apr 2024 11:02:00 +0000
ROA not after:            Thu 03 Apr 2025 11:07:00 +0000
asID:                     262868
IP address blocks:        164.163.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fe:e2:ed:d4:05:ca:64:f2:a2:7e:9a:e6:c1:a0:55:5a:e6:99:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:02:00 2024 GMT
            Not After : Apr  3 11:07:00 2025 GMT
        Subject: CN=406B8B9BC64241C187263B8F1236A44A38A5AC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:5a:4e:28:a2:dc:ae:ac:aa:fb:8f:cf:0a:
                    ba:09:fa:7c:b6:b5:08:c3:7f:69:b1:1a:45:2b:bd:
                    a6:f3:ff:fc:26:57:c5:53:d9:71:2c:0b:d3:2d:68:
                    c2:9f:20:c7:0c:57:0c:8c:65:a0:fc:df:65:fa:67:
                    09:ee:cb:2a:13:40:a4:15:fb:b6:3e:68:31:b0:56:
                    3e:dc:63:b3:b9:59:82:87:a0:6a:71:67:f5:6f:32:
                    62:12:61:63:0d:30:63:85:27:22:7e:8c:db:52:f3:
                    ae:3e:99:03:bb:c1:bb:21:fd:58:8b:45:77:59:2e:
                    75:fd:7a:55:db:7b:31:ea:62:60:3a:3d:0b:79:d7:
                    f9:38:4c:cb:b0:c1:a3:b3:c7:d9:f8:06:56:1d:41:
                    86:5d:fa:26:08:f2:88:15:a7:bc:35:51:e0:8a:da:
                    95:95:0d:9d:da:fc:ca:a3:f4:ad:75:19:92:01:65:
                    93:27:9a:b8:9e:0e:2f:c4:34:8f:10:30:65:a2:b9:
                    8e:58:8e:49:8b:a4:44:28:4d:7c:ba:17:64:60:32:
                    aa:1e:f9:4e:a1:cb:7c:10:af:9c:01:be:e6:37:0c:
                    8b:bf:84:42:97:76:37:6a:30:33:12:e9:e8:aa:0e:
                    96:9a:f4:74:7c:07:92:4d:cf:14:c3:89:09:1d:a4:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6B:8B:9B:C6:42:41:C1:87:26:3B:8F:12:36:A4:4A:38:A5:AC:30
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:17:95:21:ae:fb:99:6b:e5:4b:bb:ae:1d:cf:05:4b:2c:
         61:70:07:33:70:72:44:9c:ff:b6:62:0f:4c:b0:0b:f3:fa:fe:
         4f:9f:12:65:33:c8:82:ca:73:a2:8c:e0:5d:ce:c4:af:04:13:
         c6:e5:94:32:ac:8e:e5:e3:0d:ca:22:c4:47:67:55:8c:42:d3:
         46:91:e9:45:49:16:d2:fd:9b:4b:2d:85:61:b3:0c:f2:0a:e8:
         fc:97:bf:05:e9:cd:df:a2:e4:0e:ca:51:c0:60:97:cb:bf:23:
         e9:12:c0:d2:b5:60:e5:ad:8c:3e:12:08:50:cd:a8:d8:e3:03:
         7a:b4:03:c8:fc:ab:ba:c3:79:58:70:d5:78:3c:61:da:84:7e:
         65:59:4a:27:c6:c1:ff:c2:24:4b:f9:2d:ea:79:3f:ba:58:1d:
         81:82:f3:7b:e3:b7:80:f8:61:77:07:5b:92:ce:de:45:6d:35:
         d1:0c:c8:37:28:c8:bc:68:40:2f:8b:0a:9f:e7:4e:ad:0e:4f:
         d2:45:22:d0:23:12:88:50:94:45:bc:7a:92:9f:02:14:78:93:
         67:fe:59:f5:59:a3:d6:64:cb:ba:ce:3b:2e:79:ce:19:d9:04:
         be:eb:ea:75:6e:24:14:f7:f3:c1:c9:5e:bb:fb:07:c3:99:16:
         dd:3b:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org