Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3132392e302f32342d3234203d3e203532383634.roa
File:                     3136382e3139372e3132392e302f32342d3234203d3e203532383634.roa (raw, json)
Hash identifier:          GtMuU1pD7MiShwBANr5D1snmV2uYYnijOl+w6YcQe70=
Subject key identifier:   6C:5B:42:B2:FC:CF:0C:A4:40:7D:13:E0:62:AA:59:FE:B6:6E:D2:0D
Certificate issuer:       /CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
Certificate serial:       06CE98F676EC639372E9F14C2B8B880E5E1CE200
Authority key identifier: 3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3132392e302f32342d3234203d3e203532383634.roa
Signing time:             Mon 28 Oct 2024 14:41:45 +0000
ROA not before:           Mon 28 Oct 2024 14:36:45 +0000
ROA not after:            Mon 27 Oct 2025 14:41:45 +0000
asID:                     52864
IP address blocks:        168.197.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl
                          rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ce:98:f6:76:ec:63:93:72:e9:f1:4c:2b:8b:88:0e:5e:1c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
        Validity
            Not Before: Oct 28 14:36:45 2024 GMT
            Not After : Oct 27 14:41:45 2025 GMT
        Subject: CN=6C5B42B2FCCF0CA4407D13E062AA59FEB66ED20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:48:15:a6:bb:3c:04:4c:98:9b:01:a2:44:
                    a0:1c:95:d2:40:68:bf:95:39:84:2a:25:ae:f2:fe:
                    4e:a1:bc:09:63:90:74:78:d3:5d:97:58:f5:cb:3e:
                    7f:a5:09:19:e7:4b:c5:06:a3:ea:a1:15:f9:08:d8:
                    5e:21:08:c7:fa:02:23:48:8d:ff:0c:04:db:77:82:
                    8c:3a:1f:2c:0d:de:5d:ee:46:7a:4f:39:56:f7:92:
                    13:2d:5f:18:ea:5c:19:81:2e:94:ab:d2:83:9b:9b:
                    a0:d3:1e:69:c2:41:28:57:f6:ab:d1:e5:75:c2:38:
                    67:8a:f5:fc:95:df:f1:21:2b:5a:fb:10:12:0a:3f:
                    26:0a:4f:10:b0:c9:87:c3:43:57:7f:8f:b7:4b:99:
                    8e:e5:bc:2c:8e:9c:61:7b:34:83:b7:05:c5:5f:4d:
                    90:bf:a9:a9:f8:fa:f8:7a:f4:18:13:b4:6b:d3:1a:
                    de:74:2f:54:db:46:56:23:96:ed:b5:3b:3b:34:a3:
                    65:5e:12:5f:ca:3d:34:7b:77:2c:34:e0:d3:29:e0:
                    d2:30:6c:f9:bf:39:e5:b0:65:7f:f9:f0:73:36:1f:
                    1a:3f:55:13:0a:12:05:a7:8e:27:0c:e5:b1:72:d6:
                    ed:9a:38:64:a5:ab:21:55:5b:31:e8:80:ac:b9:29:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:42:B2:FC:CF:0C:A4:40:7D:13:E0:62:AA:59:FE:B6:6E:D2:0D
            X509v3 Authority Key Identifier:
                keyid:3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3132392e302f32342d3234203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:27:44:57:15:21:ba:96:9d:a6:84:f3:64:17:64:56:45:8e:
         39:cb:b4:09:a0:74:8a:7f:7d:8f:5a:20:2a:93:f7:3e:f4:61:
         6b:63:1f:76:60:cf:87:3d:27:38:f3:c6:bb:6e:0f:f2:35:97:
         4d:55:02:7c:1e:78:56:2b:c6:67:14:f9:5d:61:7e:07:6d:63:
         68:5f:db:02:66:3b:6b:8b:f5:9e:15:7e:c9:52:70:30:49:0e:
         93:e4:8f:65:a6:72:85:ac:e9:8c:f0:cf:70:15:6d:22:98:47:
         12:76:54:6e:88:1d:34:34:96:81:81:c9:78:9c:05:15:21:88:
         5b:29:e0:5c:2e:22:7b:95:37:85:19:97:a0:b7:d2:48:2e:c2:
         d3:c4:98:0f:28:cc:05:d6:df:a2:dd:96:2e:e1:38:ac:fe:69:
         f2:43:aa:a1:79:73:54:7f:68:5e:5e:4b:de:e2:09:cb:b1:89:
         64:d2:a9:1c:44:53:bc:b0:a4:48:b4:1d:2f:ea:0d:74:2e:b3:
         1e:05:dd:3e:35:c9:7c:c7:3c:20:45:82:b1:cc:ec:72:1e:b4:
         3a:a8:51:83:8c:7b:a1:e6:45:bd:c4:5f:b1:53:7f:9d:e3:6f:
         1a:96:1e:a9:63:b6:cf:56:45:79:ad:6b:89:e2:a0:85:b2:e1:
         4d:1e:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:01:58 2024 by rpki-client on console-ams.rpki-client.org