Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3232203d3e203238313238.roa
File:                     3136382e3139352e33322e302f32322d3232203d3e203238313238.roa (raw, json)
Hash identifier:          2agZZbrWIvvDsdY7zCMqe8Rq4nuWojTYHL1IvFxMuiI=
Subject key identifier:   5C:F1:E4:CE:F1:53:81:49:9F:30:63:B7:7B:DD:63:B5:44:07:D8:B9
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       3DBFE8AD01AD181379E2B3E2DA678304CB16DB21
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3232203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:06:51 +0000
ROA not before:           Tue 20 Aug 2024 18:01:51 +0000
ROA not after:            Tue 19 Aug 2025 18:06:51 +0000
asID:                     28128
IP address blocks:        168.195.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bf:e8:ad:01:ad:18:13:79:e2:b3:e2:da:67:83:04:cb:16:db:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:01:51 2024 GMT
            Not After : Aug 19 18:06:51 2025 GMT
        Subject: CN=5CF1E4CEF15381499F3063B77BDD63B54407D8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:4a:66:30:ea:82:2a:41:f5:be:53:89:53:
                    35:48:5c:57:44:ae:e6:db:a6:8c:4f:46:ce:e0:79:
                    6c:dc:6c:48:96:f7:89:e3:f3:87:8b:a7:76:f7:af:
                    d6:46:eb:dc:98:0e:14:3e:1e:0a:b3:a8:37:b1:84:
                    24:fa:00:ec:1f:b6:dc:06:ed:4a:6c:39:9c:d5:07:
                    08:c2:1d:2a:76:20:13:f6:10:f9:ca:d1:cc:26:08:
                    b6:57:cf:33:e7:cb:ac:a1:cc:9e:6f:fe:78:ff:e9:
                    7a:93:86:04:7b:92:ca:1a:e1:5a:d5:4d:cd:d2:4d:
                    b0:3f:9e:28:5e:3c:c1:51:59:46:fe:e9:ce:7c:3e:
                    30:79:5e:9c:7e:93:21:51:72:f3:60:60:0a:ab:c5:
                    8c:1e:e5:e8:7e:94:f4:e8:a8:ab:81:92:77:1f:9a:
                    c3:33:3b:00:67:70:87:b5:42:e4:61:5d:46:01:3c:
                    35:bd:9a:41:40:34:0f:54:68:e1:fd:1a:79:0e:9d:
                    84:47:d4:e8:1f:6b:d4:66:da:a7:1b:fd:dd:cc:de:
                    4b:af:a3:62:18:28:ec:ac:fe:26:87:72:a0:a5:77:
                    25:70:97:b1:9e:e4:72:1b:b4:eb:8c:8d:99:b3:ed:
                    49:de:bd:01:9e:73:8c:7d:96:b0:5a:86:d4:dd:96:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F1:E4:CE:F1:53:81:49:9F:30:63:B7:7B:DD:63:B5:44:07:D8:B9
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3232203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:85:71:f6:fb:9f:36:df:65:21:6f:3c:b3:cb:09:69:e1:87:
         8c:9f:1b:ec:95:bc:a6:fb:b3:91:69:76:8c:2f:3b:0a:2b:bf:
         ea:16:33:66:e2:aa:31:2a:9c:fa:de:88:8f:17:d6:87:e6:71:
         59:21:cc:01:82:8b:36:3b:d1:4b:de:a4:ba:13:b9:de:5a:fa:
         72:b9:e6:97:7a:9c:63:41:59:d6:78:34:fb:fd:41:c8:a5:a9:
         2e:d9:67:ac:a7:59:20:f8:9b:ef:12:59:aa:85:90:f0:e9:06:
         55:08:0f:92:7c:55:ea:3d:71:5f:44:f4:af:f4:68:f8:55:0b:
         83:a2:61:a5:a6:57:24:b3:96:7b:ef:34:20:c6:c8:4e:e7:f4:
         a2:f6:a9:3a:85:82:82:31:35:7b:bb:45:48:59:91:6f:e0:84:
         90:2e:cf:23:d9:26:ad:e3:6b:a7:cd:9d:71:dd:55:3e:77:39:
         6d:0d:db:a1:3b:f9:12:62:d9:94:80:f5:54:96:cf:d6:39:b4:
         8f:e8:34:bd:58:25:8c:18:0d:cb:11:0f:36:ea:49:8d:ff:d6:
         45:f7:2e:f3:8f:72:02:be:73:da:6e:32:de:47:25:48:10:be:
         d6:ce:75:29:f1:09:6c:81:26:a4:06:63:bc:c1:ed:28:63:42:
         93:78:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org