Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3133302e302f32332d3233203d3e203532383634.roa
File:                     3136382e3139372e3133302e302f32332d3233203d3e203532383634.roa (raw, json)
Hash identifier:          qZ3ViauQoXqipp0FKkxhofHjuk+rag15LjC99cvPlXM=
Subject key identifier:   6F:25:BF:E8:03:19:41:DB:73:83:32:4B:E0:00:25:D4:CF:9A:AD:40
Certificate issuer:       /CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
Certificate serial:       5738632003962EBB9861A9F7A305C8FD6B9D4981
Authority key identifier: 3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3133302e302f32332d3233203d3e203532383634.roa
Signing time:             Mon 28 Oct 2024 14:41:48 +0000
ROA not before:           Mon 28 Oct 2024 14:36:48 +0000
ROA not after:            Mon 27 Oct 2025 14:41:48 +0000
asID:                     52864
IP address blocks:        168.197.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl
                          rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:63:20:03:96:2e:bb:98:61:a9:f7:a3:05:c8:fd:6b:9d:49:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
        Validity
            Not Before: Oct 28 14:36:48 2024 GMT
            Not After : Oct 27 14:41:48 2025 GMT
        Subject: CN=6F25BFE8031941DB7383324BE00025D4CF9AAD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:0e:1e:a2:b7:d8:50:c9:38:c4:c1:dc:22:
                    4d:63:43:93:61:9f:e8:58:29:5a:95:7d:87:75:8f:
                    82:6d:36:93:22:6c:ef:82:ae:c8:b0:b8:30:ab:55:
                    6c:f1:35:1e:58:dd:3b:70:25:59:a3:05:1a:fe:96:
                    d8:f7:eb:3a:18:df:a3:37:ff:ed:b4:fa:1d:20:a5:
                    7c:98:cc:85:b0:4a:77:a9:69:83:2a:83:0b:bd:43:
                    36:ad:9f:f6:7a:63:9d:a6:99:c8:bc:23:07:18:3b:
                    51:5c:86:d6:14:4a:67:a8:6a:81:69:f3:50:be:aa:
                    0b:61:ab:be:26:2e:1f:6c:20:97:f5:1b:36:d6:36:
                    ba:a7:9b:68:17:00:15:93:1c:de:c8:da:c1:0e:af:
                    60:67:7d:69:14:ae:47:bf:60:dc:da:b9:04:95:a9:
                    f3:31:8a:17:e1:92:bd:26:09:09:19:27:66:bd:02:
                    82:d1:f1:ca:91:ec:ad:60:6d:b4:dd:72:72:e0:a1:
                    4a:a1:42:68:92:67:aa:bd:8d:7a:34:31:a0:d1:ad:
                    dd:26:51:6b:fe:30:c0:99:6a:98:3d:ad:dd:74:8b:
                    9e:fb:63:83:95:af:68:1c:60:55:af:6d:b0:0f:8b:
                    6b:9c:ca:24:7f:e2:b6:3b:b1:7f:88:0a:f3:66:0b:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:BF:E8:03:19:41:DB:73:83:32:4B:E0:00:25:D4:CF:9A:AD:40
            X509v3 Authority Key Identifier:
                keyid:3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e3139372e3133302e302f32332d3233203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:43:31:98:8f:83:bd:63:69:97:72:cf:16:d2:87:b2:0a:3a:
         53:98:ef:77:3b:db:da:b8:22:f9:06:9a:ec:77:c2:89:13:be:
         6b:cf:ff:9c:aa:e8:7c:f5:e4:3a:8f:0d:96:4d:ac:1b:4e:da:
         f9:aa:3f:8b:66:c3:c1:f9:27:b7:01:84:30:6d:67:4a:9c:7d:
         80:90:b8:5b:b3:c4:48:a6:b2:1d:a9:74:6b:9c:a0:be:28:ea:
         6e:2a:c3:dd:52:79:76:8b:35:f3:a4:06:31:76:12:d3:eb:fa:
         4e:d4:b0:20:27:ac:da:76:df:64:66:5c:92:86:dd:05:7f:60:
         95:6c:e7:3e:38:41:6a:9c:30:c7:55:c4:50:a7:de:98:6a:a8:
         4f:20:ef:84:e8:68:44:22:67:c4:6b:68:10:c8:12:df:6b:1b:
         e2:ec:f9:55:3e:27:65:a5:1a:dd:36:81:d1:f9:9e:06:00:92:
         ee:9e:27:24:64:48:e3:42:aa:82:10:a1:8c:5a:2f:f9:8c:0c:
         c5:6b:06:ec:c7:32:bc:e4:53:84:5f:33:63:ed:50:6d:49:c4:
         6c:99:3d:70:82:9b:71:17:0f:76:cd:ef:d8:ec:92:9d:23:7f:
         5c:e1:2d:7f:ce:36:0f:3d:77:f3:81:d2:bd:2e:08:84:b1:43:
         8b:62:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:12 2024 by rpki-client on console-ams.rpki-client.org