Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3136382e3232372e35322e302f32322d3234203d3e20323634303735.roa
File:                     3136382e3232372e35322e302f32322d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          ya0Am1OCppe/fWAnJxg1/Qe812zzv+lUS0miANrGRaU=
Subject key identifier:   C6:3E:6F:87:3A:A6:7B:AB:75:0C:1E:B8:3C:07:96:34:A2:14:09:5A
Certificate issuer:       /CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
Certificate serial:       7C3FA871BA1124876F66C53CDE3863CE5BA23747
Authority key identifier: 3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3136382e3232372e35322e302f32322d3234203d3e20323634303735.roa
Signing time:             Thu 04 Apr 2024 08:59:26 +0000
ROA not before:           Thu 04 Apr 2024 08:54:26 +0000
ROA not after:            Thu 03 Apr 2025 08:59:26 +0000
asID:                     264075
IP address blocks:        168.227.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3f:a8:71:ba:11:24:87:6f:66:c5:3c:de:38:63:ce:5b:a2:37:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
        Validity
            Not Before: Apr  4 08:54:26 2024 GMT
            Not After : Apr  3 08:59:26 2025 GMT
        Subject: CN=C63E6F873AA67BAB750C1EB83C079634A214095A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:6e:e2:91:84:a9:cf:57:96:f1:9b:d9:1a:
                    f9:40:78:75:2d:ed:e0:0e:e7:b9:a2:c7:ef:c4:8d:
                    3a:3e:51:cd:70:0d:04:63:25:11:c5:fa:7d:4f:1c:
                    4a:89:78:6a:15:ca:55:59:fd:ff:2a:82:33:49:c7:
                    61:7c:13:09:df:9b:f5:22:d7:69:9c:66:82:ec:b0:
                    3c:d1:fe:1c:5c:1d:0d:ec:cb:70:7c:f3:8e:3f:c6:
                    3b:91:5b:c1:09:28:2d:13:31:75:84:49:24:e7:1d:
                    fa:ee:ea:b0:e3:37:4b:af:f2:47:ce:54:2e:d8:1e:
                    4f:b7:63:ed:32:ab:b7:cd:79:13:06:3b:d6:ba:ef:
                    32:2f:70:ed:1d:2b:2f:7a:3f:1a:d1:b2:43:ec:20:
                    27:ad:84:59:7e:40:fc:38:b7:61:64:bf:b6:70:6d:
                    71:79:4b:4a:9a:c6:c4:e1:16:18:ea:a9:16:43:99:
                    7a:19:95:c4:c2:10:f9:02:67:00:dd:af:03:89:2f:
                    06:f1:05:9f:48:be:68:f4:61:a3:f4:b4:ca:a2:e3:
                    52:b2:55:e5:d7:dd:67:03:b7:1b:2a:76:d6:a6:8f:
                    9c:b3:71:69:5f:72:40:4b:dd:9e:2b:b5:d8:f8:cb:
                    d0:7d:30:82:e4:53:fe:63:46:67:3a:70:8e:7e:d5:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:6F:87:3A:A6:7B:AB:75:0C:1E:B8:3C:07:96:34:A2:14:09:5A
            X509v3 Authority Key Identifier:
                keyid:3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3136382e3232372e35322e302f32322d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:b7:49:9f:cf:4d:c7:a7:3d:af:05:dc:d1:4a:9e:ce:4f:
         a5:bd:45:ee:96:6e:8e:f4:dc:47:7f:9e:7d:5d:c6:d1:d6:0d:
         aa:d2:b8:27:6e:ba:49:b9:8b:2a:c8:a3:a2:70:27:3f:d3:83:
         e7:fb:b9:0a:be:94:db:5b:6b:1a:1c:f5:ff:88:6e:11:e0:e0:
         51:df:25:53:84:9a:88:53:a1:94:b4:ee:fd:d7:f9:8c:5e:31:
         b3:c2:71:81:4f:f2:57:31:0b:30:20:33:c5:fc:c7:1e:ef:83:
         4a:a3:75:02:37:2c:1d:1a:56:35:7b:94:27:ea:bb:9b:09:6e:
         ab:c4:c3:bc:ff:9f:cb:51:aa:22:db:3c:53:cb:a8:c6:ce:35:
         e9:0b:93:f7:b1:ab:f3:62:83:12:22:8c:d8:8c:19:04:f8:4f:
         5d:d0:63:1d:66:fa:81:50:19:d0:13:06:d6:cf:63:05:ab:e2:
         91:46:4c:17:f6:95:4a:87:09:92:21:ea:29:42:47:91:a0:ad:
         29:3e:3a:fe:2d:47:df:70:5f:d4:80:0a:92:41:15:0b:56:9c:
         1d:b1:23:6e:81:2f:da:f1:5e:87:71:ec:df:ef:fd:db:d5:25:
         f5:c6:32:33:63:b9:ac:c8:d9:3b:e2:de:bb:01:42:30:0e:5d:
         92:1c:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org