Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa
File:                     3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa (raw, json)
Hash identifier:          jN0Xui0Z2QwwtPnPsO6wM6Qb4mp+LMKxFHff1q7DDZA=
Subject key identifier:   5F:98:39:63:54:D9:90:C1:D4:A5:AD:EE:87:1A:07:27:B3:4B:94:BE
Certificate issuer:       /CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
Certificate serial:       7B857C2579B70DBBE6FE3D3CD52F1D0DD2242477
Authority key identifier: 3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa
Signing time:             Mon 28 Oct 2024 11:02:35 +0000
ROA not before:           Mon 28 Oct 2024 10:57:35 +0000
ROA not after:            Mon 27 Oct 2025 11:02:35 +0000
asID:                     52864
IP address blocks:        177.124.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl
                          rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:85:7c:25:79:b7:0d:bb:e6:fe:3d:3c:d5:2f:1d:0d:d2:24:24:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
        Validity
            Not Before: Oct 28 10:57:35 2024 GMT
            Not After : Oct 27 11:02:35 2025 GMT
        Subject: CN=5F98396354D990C1D4A5ADEE871A0727B34B94BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:0c:1e:2d:c9:db:dc:14:c3:c3:e3:f9:fb:
                    76:d5:d6:3d:6f:62:10:05:1a:31:ac:cb:0b:db:75:
                    3c:88:05:de:21:36:1f:10:ce:46:d1:67:3f:10:23:
                    f1:03:da:88:4b:0a:38:a2:80:59:48:c2:91:13:76:
                    1e:19:36:01:cd:4c:bf:1e:97:46:eb:8e:30:a9:6a:
                    51:50:20:c7:c5:32:34:c6:fc:55:fc:d9:a1:a8:45:
                    d2:2d:7b:d4:45:5f:c4:d7:72:5b:3d:c1:cb:7d:01:
                    10:05:b6:49:e8:e0:81:9e:8a:90:b6:68:14:9e:c3:
                    ea:de:9e:c0:6b:4c:7d:e5:16:d9:57:3d:32:72:72:
                    41:ba:4f:f8:72:74:0a:e9:1f:b5:7a:97:c0:eb:b4:
                    45:f6:a9:b6:3d:05:74:1d:27:6c:64:09:b8:b6:72:
                    bd:79:fb:08:6f:50:b0:57:24:80:9d:97:65:27:63:
                    e0:9c:55:32:43:6e:51:74:69:ac:82:3d:67:f5:db:
                    73:3e:1c:fb:7f:18:10:f5:17:1c:3c:47:27:18:e8:
                    d7:6c:5a:62:82:c4:72:d6:ba:03:57:25:2e:a6:0e:
                    ae:27:a4:6e:9a:62:cb:cf:3a:30:7b:c1:1f:f1:86:
                    3d:a7:e2:7e:79:a3:ff:5e:70:3c:95:37:10:62:5c:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:39:63:54:D9:90:C1:D4:A5:AD:EE:87:1A:07:27:B3:4B:94:BE
            X509v3 Authority Key Identifier:
                keyid:3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3137372e3132342e3136302e302f32322d3234203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:7d:b3:74:be:91:3e:ca:a3:0d:0a:9b:0f:98:c2:16:5d:
         f0:09:8e:c8:55:8f:a3:63:0f:c4:8b:e0:ac:83:cc:c9:87:f2:
         bc:90:af:ec:ee:b2:39:9f:d6:7b:f6:17:ab:5a:1e:5b:8d:db:
         e6:b9:7a:2a:59:fb:59:0e:8f:6a:ae:14:04:72:0d:b4:f6:9a:
         a8:71:2c:3b:8e:cd:32:15:31:a4:70:f9:b1:7d:3c:db:7c:4e:
         9c:35:06:9b:14:b7:10:fb:f5:49:bb:37:0c:3a:94:9a:66:5c:
         38:60:e5:01:de:f6:68:0d:74:61:2b:d7:9d:5b:dd:1d:31:54:
         8f:4c:cd:80:94:9a:88:ac:e9:67:05:77:46:0d:83:2b:de:27:
         77:54:81:f6:2e:55:fe:d6:68:d3:16:b3:0c:71:21:f4:4a:28:
         9a:49:13:73:db:98:47:c7:c0:e7:34:a6:a5:89:6f:9b:f9:72:
         a9:eb:28:df:b6:03:f6:6d:21:3a:2f:be:01:14:4b:2a:69:6f:
         5f:fd:4a:0e:9b:6c:9d:96:be:08:72:da:2b:10:43:2d:97:b4:
         c1:96:65:ca:32:a4:64:3e:a2:10:f3:7f:cb:80:ea:7b:4e:23:
         51:ee:a7:e2:8d:28:0c:f8:94:c3:4e:e9:b1:40:a6:9f:a6:c3:
         60:b2:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org