Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33332e302f32342d3234203d3e203238313238.roa
File:                     3136382e3139352e33332e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          w98NfLXlayF6PivkQA2rh1FhgthCu/xHD6tWqPXGius=
Subject key identifier:   B7:F5:AC:12:40:35:B9:95:2B:F7:38:2D:B3:15:14:5E:AF:F0:40:21
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       5A777AC1CC09E36399F4AC27472A19867E30E8CE
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33332e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:07 +0000
ROA not before:           Tue 20 Aug 2024 18:02:07 +0000
ROA not after:            Tue 19 Aug 2025 18:07:07 +0000
asID:                     28128
IP address blocks:        168.195.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:77:7a:c1:cc:09:e3:63:99:f4:ac:27:47:2a:19:86:7e:30:e8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:07 2024 GMT
            Not After : Aug 19 18:07:07 2025 GMT
        Subject: CN=B7F5AC124035B9952BF7382DB315145EAFF04021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:8c:14:bd:d7:9f:50:91:4a:1d:8a:83:93:
                    f2:db:7e:8b:55:59:22:70:9c:d2:6c:8d:2b:91:23:
                    fa:ea:25:f1:62:20:97:dc:cf:11:da:cd:ac:6f:14:
                    c2:27:ee:35:a1:b9:34:e8:1f:a8:1a:19:24:74:48:
                    12:98:02:2d:c5:84:ca:58:71:18:77:bc:6a:24:24:
                    a6:94:88:3d:89:a1:a2:28:b9:ff:25:25:3e:b9:3d:
                    03:ae:86:d3:93:34:2b:f1:ef:b3:6d:75:0a:c4:88:
                    b5:82:00:5d:eb:6d:e2:f4:06:6a:71:70:c5:7b:9e:
                    06:02:1c:93:c3:b8:c2:84:83:23:86:17:65:5e:bf:
                    fc:63:82:75:5a:7c:0d:75:89:19:c2:03:b6:54:0c:
                    ba:b7:b4:6b:f8:70:85:87:89:7f:e9:10:8a:d0:51:
                    04:fd:9c:ff:be:70:cf:90:fe:1d:7b:30:18:1e:ed:
                    57:6d:c0:49:e8:7f:45:e9:d0:8b:05:06:36:fe:b7:
                    d0:0c:6d:35:ff:26:92:74:36:b4:dd:48:81:31:4e:
                    0e:58:ae:ef:08:15:e8:5a:33:34:ee:f4:f6:74:3a:
                    5f:9d:1e:05:c3:45:04:60:7a:04:39:e7:c4:40:1f:
                    4f:a4:4f:9b:2b:fa:61:dd:c0:af:25:30:e3:d4:20:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F5:AC:12:40:35:B9:95:2B:F7:38:2D:B3:15:14:5E:AF:F0:40:21
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33332e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7e:69:e8:67:aa:8b:fc:5a:a2:93:8c:99:54:f9:2a:6c:eb:
         2b:91:6c:c0:6d:b9:4c:9b:a3:34:94:df:f5:67:45:42:96:26:
         e2:cf:5f:58:cd:14:dc:0b:1b:80:03:f9:8e:7e:86:9e:5e:2e:
         8c:9e:47:85:d4:7f:c4:ad:c0:1a:89:34:ad:92:6c:b9:f3:02:
         2c:92:77:ca:c4:7f:80:80:49:17:e9:b3:1a:5d:77:75:1b:35:
         97:0b:63:12:81:44:c9:3c:c2:cf:c3:62:e5:19:1e:f6:d0:ef:
         0d:11:47:72:12:74:be:ef:a3:33:99:a0:98:1a:d6:26:9f:07:
         73:7b:fb:6c:b5:dd:d6:8b:3c:18:19:e3:45:8b:b1:d8:5d:01:
         6c:7c:fb:5c:49:d3:19:b8:9d:2f:4d:b8:6d:d1:b7:fd:a0:23:
         47:a5:80:00:88:85:68:90:96:21:5f:6b:21:ef:d5:6a:d0:79:
         e7:0a:67:b8:70:df:4c:ad:d2:3c:9f:c5:60:fc:0f:b3:0d:06:
         a8:cf:ab:79:0b:35:47:4c:98:ae:c3:7a:59:83:55:73:17:a5:
         33:35:51:4e:a9:83:52:4e:b8:61:b2:6a:62:04:8c:ad:08:24:
         78:2d:b0:16:b7:f9:90:dc:fd:0f:57:e2:30:86:7d:54:61:e1:
         02:da:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org