Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
File:                     3136312e3134382e302e302f31362d3234203d3e203130393534.roa (raw, json)
Hash identifier:          Q6se92U2rezzI1t0qWplkh6bWg85Gu8kWAMz21lMr7k=
Subject key identifier:   4A:76:78:B5:AA:D4:56:92:18:3E:91:4A:F2:EC:81:18:AA:A3:AF:D4
Certificate issuer:       /CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
Certificate serial:       34FD5C0B2CAF600AEA069B6BE26E194C94D8E3C8
Authority key identifier: A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
Signing time:             Thu 04 Apr 2024 13:51:10 +0000
ROA not before:           Thu 04 Apr 2024 13:46:10 +0000
ROA not after:            Thu 03 Apr 2025 13:51:10 +0000
asID:                     10954
IP address blocks:        161.148.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.crl
                          rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fd:5c:0b:2c:af:60:0a:ea:06:9b:6b:e2:6e:19:4c:94:d8:e3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
        Validity
            Not Before: Apr  4 13:46:10 2024 GMT
            Not After : Apr  3 13:51:10 2025 GMT
        Subject: CN=4A7678B5AAD45692183E914AF2EC8118AAA3AFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:cb:b6:b6:77:a3:07:6c:51:0b:90:f7:27:
                    c5:7d:88:46:66:09:89:93:90:4d:2e:9e:ef:d2:34:
                    c5:1b:6a:50:09:9b:98:8e:07:8e:da:42:9c:69:d4:
                    92:c8:9c:fd:cf:14:68:ba:4f:f4:3d:c9:3e:85:bf:
                    0c:00:80:12:bd:6d:d7:33:02:03:98:f1:31:cc:16:
                    5a:64:1e:42:c5:3f:78:81:b2:37:44:5e:5e:56:b3:
                    1d:1b:ce:70:66:5d:5e:cf:ce:cd:91:81:28:71:2a:
                    bd:4d:41:fb:60:15:08:e8:d7:90:6d:a7:7f:9b:09:
                    2a:cb:f5:99:20:92:c6:15:04:96:21:8e:11:0a:ee:
                    68:ba:69:c2:ec:a3:9b:32:20:0f:ac:7f:94:41:02:
                    c9:57:4a:1e:fa:aa:6b:72:c0:b4:65:ff:b3:7d:bf:
                    6b:b5:57:c4:43:d3:d3:48:c5:35:80:f7:f1:d5:ff:
                    32:4d:3c:24:60:8f:5b:34:78:82:95:a0:1a:dd:18:
                    48:1f:c3:32:4b:63:b1:69:d7:63:02:85:74:74:43:
                    3f:42:69:dd:86:92:17:5b:49:2a:6b:ca:c2:ed:79:
                    8b:1f:05:82:5b:2e:ef:b0:81:86:13:da:e3:4a:1c:
                    6d:5e:28:25:90:45:96:45:49:79:00:5c:0f:ef:82:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:78:B5:AA:D4:56:92:18:3E:91:4A:F2:EC:81:18:AA:A3:AF:D4
            X509v3 Authority Key Identifier:
                keyid:A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3136312e3134382e302e302f31362d3234203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:5f:e4:44:e3:12:65:1e:0c:a8:cd:98:02:0b:57:43:a9:
         98:d0:47:c7:62:a2:a0:a5:6e:07:f6:a1:0a:8e:45:84:b5:12:
         83:fa:9a:81:a9:8b:7d:72:61:c6:9c:c4:ee:c7:94:d1:7c:1d:
         7c:b9:86:93:e7:5b:f0:1b:db:dd:cb:8f:c5:4a:1b:88:6e:92:
         92:87:d3:fa:c8:59:37:ba:91:ae:0f:28:96:b0:5b:bb:32:25:
         d5:05:79:b5:f5:d9:b2:87:21:c6:e6:e1:f8:9a:c5:60:0a:7d:
         40:a3:04:a6:bc:04:9a:62:b7:34:ab:00:47:8e:eb:d8:b7:69:
         29:3e:e3:3f:16:7b:e0:6e:0c:98:1c:84:27:27:3c:06:cc:eb:
         7e:29:d8:ac:5b:f1:4d:4a:b7:c6:02:46:86:1b:ea:cc:69:d1:
         41:3c:76:4c:b5:49:44:84:d3:bb:a7:ae:d7:c6:a1:0e:47:e5:
         48:8b:2e:6c:e4:8b:19:64:11:96:49:93:4b:72:ba:25:25:fd:
         bb:96:54:17:21:b1:23:0f:7a:c0:d5:23:d1:f9:0d:56:ea:e1:
         5e:0e:bd:d0:99:a4:11:9f:8b:0d:5b:86:fb:5a:d8:0f:6d:55:
         9c:69:22:93:95:c1:ac:a1:28:bd:af:00:98:c8:1f:80:58:4d:
         63:7f:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:18 2024 by rpki-client on console-ams.rpki-client.org