Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33342e302f32342d3234203d3e203238313238.roa
File:                     3136382e3139352e33342e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          Quu+oQe2l1L2YzNpmNai7WNAgVatCGvDyo5d8YbRSrE=
Subject key identifier:   A1:0D:40:93:E3:E0:7E:42:E5:62:23:92:2E:68:74:E8:9B:8E:6E:FF
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       49E6662E04BCA685A3792EFA90C9F0C94F31448E
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33342e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:04 +0000
ROA not before:           Tue 20 Aug 2024 18:02:04 +0000
ROA not after:            Tue 19 Aug 2025 18:07:04 +0000
asID:                     28128
IP address blocks:        168.195.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e6:66:2e:04:bc:a6:85:a3:79:2e:fa:90:c9:f0:c9:4f:31:44:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:04 2024 GMT
            Not After : Aug 19 18:07:04 2025 GMT
        Subject: CN=A10D4093E3E07E42E56223922E6874E89B8E6EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:e7:09:91:5c:38:a3:7c:8c:3b:8b:50:92:
                    78:82:67:08:23:24:a5:5a:01:19:c9:5c:ce:6f:3e:
                    9b:1d:60:2f:c4:21:f6:bb:d5:3e:b7:84:95:1f:a3:
                    5c:47:08:d2:2b:b5:2f:d2:93:ce:8b:e1:98:65:b9:
                    60:37:81:2a:11:be:96:62:2e:72:2c:75:0c:57:0b:
                    a7:2d:b2:ec:d6:0d:bb:3c:11:5a:c2:f5:d7:e9:2f:
                    16:72:0d:c0:d2:64:6e:c8:67:c3:db:b4:d5:fa:e6:
                    00:13:7c:7d:5a:bd:1b:87:45:aa:9e:ba:10:77:1c:
                    26:3a:b9:e8:f7:02:c3:12:da:bc:ec:fe:32:c5:f2:
                    31:5b:c3:ef:07:c5:2f:31:6a:56:a8:09:95:53:7d:
                    e5:16:29:94:14:47:30:ac:0d:c6:a1:96:ee:41:87:
                    bd:fc:5d:1a:1f:df:ea:22:9a:e5:a8:70:f6:7e:62:
                    dd:79:32:c0:41:5a:2f:d3:cc:54:d5:85:d0:77:68:
                    92:3e:4e:0c:8f:45:b5:7b:ae:24:5a:59:ad:b6:73:
                    96:13:bd:06:b1:f7:e8:97:be:40:40:d7:fc:34:93:
                    27:26:fc:a0:8f:0d:bb:f8:70:ff:90:a7:26:11:db:
                    e4:ba:32:3d:3a:8d:29:33:cd:55:70:fa:a8:ff:94:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0D:40:93:E3:E0:7E:42:E5:62:23:92:2E:68:74:E8:9B:8E:6E:FF
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33342e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:cc:4c:1e:98:dc:6f:bb:1d:aa:8c:ca:ba:63:60:16:b2:
         ed:d8:ad:69:30:07:31:68:7b:0b:30:ae:e8:e4:05:3b:a8:31:
         df:d3:8b:2e:28:9b:31:fe:8f:00:97:a2:ae:79:9e:08:b6:8b:
         dd:8d:8e:7d:f9:b7:f5:2f:a4:e8:84:4f:20:2b:d8:10:93:68:
         f7:be:f2:2b:84:2a:a4:aa:c4:13:f2:b1:9c:ef:3f:d2:c4:65:
         a9:21:52:f7:61:f6:7c:93:1b:1d:3d:b0:dc:13:85:e0:4d:db:
         7c:77:92:60:ac:f5:7b:53:f5:01:63:6e:01:24:4d:33:87:69:
         70:29:ef:5f:c5:14:ae:e5:0b:7b:0a:6e:87:ae:89:e5:f9:49:
         f1:8b:ac:f8:5a:fa:0c:73:fc:ca:80:97:28:7d:47:72:a9:09:
         22:65:75:81:28:ba:0e:05:4d:bd:4f:e5:ca:62:27:30:5b:f9:
         e0:98:23:1e:d1:55:44:b4:a7:df:34:84:da:b2:6e:39:55:20:
         75:b5:77:69:53:f9:c5:56:e6:1d:f4:a6:be:a5:a0:54:b2:ca:
         72:1f:03:59:e9:08:f0:86:1b:7e:b9:31:e8:ac:a8:2b:15:03:
         bf:32:db:10:68:f2:5a:d9:70:95:83:0b:46:71:91:ee:d1:4f:
         de:99:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org