Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
File:                     AS265427.roa (raw, json)
Hash identifier:          99ZnTPlESkCRbab1epre3MgGUx4VlKiLOPy0XL9kWII=
Subject key identifier:   9E:5D:A9:43:05:3E:54:14:96:A6:CD:E7:B3:2B:01:5D:70:7F:E4:30
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       6FA8F2F0737349C95835C7D10F5BE59D84F8F46E
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
Signing time:             Thu 18 Apr 2024 13:30:04 +0000
ROA not before:           Thu 18 Apr 2024 13:25:04 +0000
ROA not after:            Thu 17 Apr 2025 13:30:04 +0000
asID:                     265427
IP address blocks:        168.195.192.0/22 maxlen: 24
                          2804:33f4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a8:f2:f0:73:73:49:c9:58:35:c7:d1:0f:5b:e5:9d:84:f8:f4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Apr 18 13:25:04 2024 GMT
            Not After : Apr 17 13:30:04 2025 GMT
        Subject: CN=9E5DA943053E541496A6CDE7B32B015D707FE430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:d9:7d:69:97:7f:e1:3b:59:23:52:0b:41:
                    4e:db:34:3d:e2:23:53:7a:4f:5a:55:98:f4:32:04:
                    04:1c:da:db:65:b3:ab:7f:f0:89:37:0f:de:88:53:
                    c5:78:0f:ec:16:22:f0:1c:91:70:ec:e2:b0:e3:96:
                    61:bb:a1:6a:1d:96:5c:7e:a0:fc:b2:ae:bc:ba:0b:
                    e6:40:39:b9:35:cc:0a:ef:b9:39:81:30:04:f7:9b:
                    87:d0:7b:e6:08:bc:a3:26:34:b8:39:ed:98:23:cf:
                    dc:31:30:9e:4c:12:8d:71:d8:9f:2e:3f:9d:e7:47:
                    1c:c9:aa:c2:3e:11:76:16:22:a9:25:67:4e:a3:a7:
                    5e:e7:ef:ef:51:3f:60:3f:37:d1:f6:83:4c:72:ff:
                    21:e6:fa:ac:ca:ed:aa:b2:86:00:c1:71:df:5f:97:
                    dd:f9:a3:7b:03:e5:bc:2c:2f:54:0b:7f:de:09:96:
                    bf:30:fa:d6:04:6a:a2:33:63:24:41:9c:64:33:da:
                    4d:c0:e0:01:f3:f5:78:a8:a2:77:e9:ea:0c:eb:a0:
                    14:24:1c:cb:fb:76:e4:c9:37:39:ad:14:78:aa:f4:
                    8f:2d:43:5d:0c:b1:ae:fa:55:dc:3d:8d:93:70:67:
                    35:85:41:c7:e8:05:27:8e:ba:5a:fe:fb:ee:35:92:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:A9:43:05:3E:54:14:96:A6:CD:E7:B3:2B:01:5D:70:7F:E4:30
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.192.0/22
                IPv6:
                  2804:33f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:9e:e0:2c:94:48:aa:4f:ab:75:3b:dd:ee:74:11:96:f7:
         a7:a5:c1:93:4b:c2:e3:2d:b1:fb:16:e6:18:a5:7e:5f:38:3a:
         71:19:b4:c3:8c:0c:f7:96:91:44:9b:f1:ae:26:93:c4:03:e3:
         be:30:fe:db:54:be:80:6e:10:be:41:5c:6c:ed:2c:ca:59:6c:
         89:7c:7a:27:f2:62:a4:a5:55:51:62:89:2a:ea:e6:50:8f:a9:
         fa:2f:de:2d:0c:f0:cf:92:ed:86:b0:91:8b:7a:95:dd:5c:90:
         87:b9:47:38:a3:fb:6b:99:65:a0:2a:88:05:68:57:90:da:e4:
         05:ba:c1:98:23:0b:08:ef:ad:df:ed:b4:bc:6c:38:b5:13:d4:
         66:5f:86:53:01:35:0b:f3:3f:7d:a8:b9:73:97:2d:82:fb:9b:
         fd:a5:a3:8d:e4:5a:23:98:24:76:e9:d1:f7:2e:5e:23:f0:9e:
         61:cb:2c:90:30:a3:9d:ae:d4:91:9f:35:e6:66:d5:9a:e9:0e:
         30:9a:8c:b4:e6:c3:f0:fa:24:d7:d3:37:d1:d2:ac:78:94:30:
         6e:4b:cd:9b:41:c9:40:94:b0:6e:94:79:f5:a2:13:5e:1d:3f:
         33:f9:ff:39:18:b3:14:9a:79:44:bc:d9:00:c2:7b:8e:56:9d:
         7b:e8:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org