Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32322d3232203d3e203532373830.roa
File:                     3136382e3230352e38342e302f32322d3232203d3e203532373830.roa (raw, json)
Hash identifier:          AqGpNbzWgW+evWfbBS7aqg1pqjaOfQH7LeYjgBohwmM=
Subject key identifier:   AB:E7:19:11:49:57:08:F2:F8:03:69:51:F1:51:1C:7E:15:67:84:4E
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       5DEF5DDE091597ECBDDD22F13B37959492953DC7
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32322d3232203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:23 +0000
ROA not before:           Thu 04 Apr 2024 14:51:23 +0000
ROA not after:            Thu 03 Apr 2025 14:56:23 +0000
asID:                     52780
IP address blocks:        168.205.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ef:5d:de:09:15:97:ec:bd:dd:22:f1:3b:37:95:94:92:95:3d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:23 2024 GMT
            Not After : Apr  3 14:56:23 2025 GMT
        Subject: CN=ABE71911495708F2F8036951F1511C7E1567844E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:83:d2:a2:73:f3:f1:6a:d5:5f:17:9f:58:
                    76:6f:e6:83:ef:27:e8:c9:6c:b1:96:af:81:8d:f2:
                    a3:17:c4:4b:0c:cc:c6:77:6c:50:e9:5e:f6:9e:a3:
                    00:0d:32:60:ae:f2:a9:bf:2a:45:bd:27:ec:27:39:
                    b7:76:f8:c3:d3:94:b4:49:56:9e:bb:01:4f:47:0b:
                    32:97:a0:7e:28:91:10:41:17:72:8f:af:a3:47:b4:
                    db:dc:5b:8b:9e:6f:73:47:f2:5c:a4:fe:e9:7e:42:
                    9d:a8:2a:9b:47:38:c5:7a:c2:4e:15:f7:3e:52:4b:
                    c6:55:61:44:25:be:53:1e:78:32:e0:61:39:d5:0b:
                    67:b7:9b:0a:c4:1d:e9:ec:a1:4d:55:7f:1d:e5:4d:
                    eb:e4:e9:e2:e5:70:db:e2:5f:4f:fc:8a:44:55:40:
                    26:c7:be:3e:c2:35:45:21:9b:16:42:86:9a:64:2e:
                    0e:a5:86:81:f5:71:5a:ea:97:0c:36:6c:b3:01:50:
                    e6:73:08:f9:8e:67:1f:ce:9a:d3:a9:99:53:5b:ab:
                    7d:26:5c:a2:2c:83:ea:2f:79:39:68:17:96:f2:ca:
                    65:32:39:38:fc:d3:48:f5:3c:7b:53:69:f8:72:4b:
                    19:02:75:a5:d3:fd:c6:01:4a:e1:59:03:f4:50:0b:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:19:11:49:57:08:F2:F8:03:69:51:F1:51:1C:7E:15:67:84:4E
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38342e302f32322d3232203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:27:a0:0a:05:26:25:1d:5f:55:1e:35:64:45:7c:11:82:37:
         b6:c4:54:68:90:a3:ce:6e:ba:e5:d6:18:15:aa:63:dd:27:11:
         c9:25:00:38:52:16:19:55:aa:52:fa:c4:b3:5f:d6:bc:2a:b4:
         d4:29:dd:39:51:ae:92:f4:71:42:60:11:4c:ca:e3:ec:b5:13:
         77:94:fb:b1:ba:53:f9:a9:2b:d0:12:30:01:27:e9:5f:2d:d2:
         b7:41:a8:3f:a7:4f:d6:58:c7:c8:39:bc:c2:3e:44:06:ab:4e:
         8f:e1:a0:af:5c:e8:73:92:83:b5:c5:5e:f6:16:47:b3:6e:33:
         35:56:45:c2:32:4d:c8:79:92:7b:d1:4e:37:d8:c8:ba:9f:f6:
         35:70:8c:22:32:c2:d0:98:d5:81:79:a3:a6:42:bd:b1:ab:fb:
         03:c4:75:50:32:68:9e:62:e0:e9:35:15:f7:76:ba:d1:50:7d:
         90:78:4d:4f:11:dd:23:05:47:36:69:8a:76:ee:73:99:b7:f8:
         ef:c5:18:f0:2c:13:ca:b6:56:40:a0:f3:24:5a:05:fc:e1:c4:
         17:1f:a4:ca:6c:3e:87:87:1f:3d:80:5b:d4:9d:3f:00:dd:33:
         8e:0b:86:d3:91:81:93:9e:a3:7b:15:a0:3d:1a:37:f3:a3:5d:
         bb:39:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org