Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3132382e302f32342d3234203d3e203532383634.roa
File:                     3136382e3139372e3132382e302f32342d3234203d3e203532383634.roa (raw, json)
Hash identifier:          B8RkMgRjaRbozgE87D2U7WfxrhKK7tKeFwstrX7ZLck=
Subject key identifier:   26:90:5E:5B:46:56:66:8B:6C:C4:F2:96:8E:BF:8E:98:17:5D:DA:85
Certificate issuer:       /CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
Certificate serial:       3E84E17850DD7DB7ABED50E1684A442C2EC59BE3
Authority key identifier: 3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3132382e302f32342d3234203d3e203532383634.roa
Signing time:             Mon 28 Oct 2024 14:41:42 +0000
ROA not before:           Mon 28 Oct 2024 14:36:42 +0000
ROA not after:            Mon 27 Oct 2025 14:41:42 +0000
asID:                     52864
IP address blocks:        168.197.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl
                          rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:84:e1:78:50:dd:7d:b7:ab:ed:50:e1:68:4a:44:2c:2e:c5:9b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
        Validity
            Not Before: Oct 28 14:36:42 2024 GMT
            Not After : Oct 27 14:41:42 2025 GMT
        Subject: CN=26905E5B4656668B6CC4F2968EBF8E98175DDA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:ae:5a:23:db:72:ce:3e:e7:17:0a:3a:15:
                    fc:1c:4b:29:dd:17:ac:a0:6f:06:36:76:78:c6:a4:
                    d2:bb:1e:aa:55:38:a2:b4:34:d4:b9:44:49:60:8b:
                    0f:63:f4:4f:4a:d0:b9:32:50:d8:3c:50:17:73:7f:
                    f0:2b:bc:de:a3:b0:60:b6:f6:8f:b3:ba:1b:91:d2:
                    45:84:e4:9b:56:66:b4:39:62:21:9b:c2:88:b2:12:
                    69:cc:de:17:12:12:ce:ee:bd:2f:d1:5c:e0:17:50:
                    76:1c:62:9d:09:e7:0c:c6:3f:8b:79:57:ed:00:3f:
                    e9:c6:ff:c6:d0:a7:fb:72:2e:c2:f8:47:12:7d:c2:
                    ad:b5:89:d6:e6:b3:e8:3c:d9:5d:c0:c6:ee:5c:9e:
                    a3:9e:1b:b9:3e:0e:e7:89:62:e6:40:4d:9e:96:34:
                    6f:b6:33:e4:15:7a:60:e9:ef:87:4a:e3:29:58:4d:
                    3c:1d:f0:91:ba:4d:b6:3b:41:b8:d5:50:f2:0b:66:
                    ed:c8:c1:0a:e2:07:49:3a:b5:e6:db:b7:8d:d2:f5:
                    dd:d4:c3:66:c9:b5:77:4d:bb:00:ae:a0:2b:8b:f7:
                    a9:15:42:5f:49:8d:66:71:6c:5e:41:b7:99:39:0e:
                    6c:41:13:be:5b:34:9f:01:d8:e6:12:84:c0:f2:fa:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:5E:5B:46:56:66:8B:6C:C4:F2:96:8E:BF:8E:98:17:5D:DA:85
            X509v3 Authority Key Identifier:
                keyid:3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3132382e302f32342d3234203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:15:90:91:b9:ff:72:c4:db:6b:45:ee:a6:2d:f3:fe:ae:0d:
         a8:da:c7:71:63:4e:74:34:31:37:d7:6d:fa:de:d6:6a:f6:77:
         4f:01:46:e2:02:6d:c3:06:82:e4:1b:6e:3f:7b:1e:b7:97:5d:
         9d:54:26:0c:b6:9a:69:4e:72:79:0c:d4:ee:49:50:4b:aa:23:
         5d:55:26:57:3d:9c:a8:4f:59:d5:fe:0e:b9:24:10:b7:79:d7:
         ac:86:aa:96:ae:fa:db:69:32:7d:f4:e2:14:4c:4a:e1:f6:40:
         a9:5a:22:6d:54:89:aa:0e:57:11:03:de:63:1a:a0:5b:47:96:
         18:21:0f:99:ec:7f:24:4a:b7:c5:ca:13:08:3d:35:79:4b:27:
         12:67:ac:3a:22:a0:64:c6:b0:7b:39:40:d2:58:ba:4a:13:d9:
         80:5f:29:13:44:5c:cb:fb:64:3e:88:6b:b6:3d:75:be:0b:c0:
         87:4a:0b:4c:f6:2e:4a:b6:f9:f2:4c:a4:93:5f:49:83:98:e4:
         ac:7a:10:b6:5f:51:e4:8d:c7:f9:03:b8:72:b5:6d:dc:67:e8:
         9f:bf:49:d8:eb:a4:d8:81:0d:56:54:49:d0:26:c2:a2:0a:e3:
         5e:bc:94:04:95:77:7e:0b:8c:41:a9:a4:63:2b:65:cd:77:a0:
         c4:45:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org