Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa
File:                     3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa (raw, json)
Hash identifier:          PRT15rdNHkuZFSdMyoATugIaRvGzD4j95kml888MhHo=
Subject key identifier:   2E:81:5A:A2:1A:5F:39:46:49:D0:09:9C:2E:31:AB:FA:A9:8D:9D:64
Certificate issuer:       /CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
Certificate serial:       53AE5FF5BBDF0B19DDB0B1FE74A566AD23D02F14
Authority key identifier: AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa
Signing time:             Wed 05 Jun 2024 19:22:38 +0000
ROA not before:           Wed 05 Jun 2024 19:17:38 +0000
ROA not after:            Wed 04 Jun 2025 19:22:38 +0000
asID:                     265482
IP address blocks:        168.197.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ae:5f:f5:bb:df:0b:19:dd:b0:b1:fe:74:a5:66:ad:23:d0:2f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
        Validity
            Not Before: Jun  5 19:17:38 2024 GMT
            Not After : Jun  4 19:22:38 2025 GMT
        Subject: CN=2E815AA21A5F394649D0099C2E31ABFAA98D9D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:67:02:04:0b:54:48:93:a3:9d:65:6c:b6:f7:
                    51:fc:6c:e1:05:a4:ff:84:27:d6:bf:da:2d:09:8d:
                    27:d6:36:fc:12:be:20:a1:f6:b0:af:cd:b1:7b:35:
                    50:3e:86:6e:7c:13:6a:ac:73:28:da:87:25:5d:69:
                    94:9e:73:ee:51:68:87:66:2f:00:ad:0f:d8:d7:f6:
                    73:fd:0d:77:04:6c:91:d7:78:94:f2:98:a1:fc:fe:
                    3a:a2:18:00:46:e3:e7:29:52:e9:51:72:29:13:b6:
                    f9:1a:aa:ab:57:9e:c7:00:4f:43:31:2a:41:d8:20:
                    6a:1f:75:c5:53:08:53:b7:5a:c3:aa:7b:e2:ec:36:
                    09:7d:ff:e5:3c:b5:00:96:0a:1f:d7:e6:79:ea:2f:
                    5d:a1:10:6a:44:f2:69:c0:21:99:09:9b:82:4e:71:
                    bf:cb:e6:73:be:8e:4d:cf:51:61:e4:bd:8a:b5:05:
                    0f:9c:39:44:ba:90:5e:15:5f:cc:65:5c:1d:ce:eb:
                    2b:87:a2:08:5b:85:70:58:f7:8f:7b:d3:75:db:ce:
                    a1:f2:86:5e:f8:27:88:6a:cd:aa:f9:1a:04:56:e1:
                    79:f5:71:f6:76:c0:ed:2b:b8:7c:f7:e6:42:a8:af:
                    5a:67:89:20:19:d5:2e:fb:a9:3e:16:84:16:8c:16:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:5A:A2:1A:5F:39:46:49:D0:09:9C:2E:31:AB:FA:A9:8D:9D:64
            X509v3 Authority Key Identifier:
                keyid:AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:f7:b9:4b:f3:52:63:af:da:e6:08:88:db:50:2f:1a:23:83:
         ec:6f:3a:1d:cd:90:12:d4:04:6c:e2:ba:b0:45:23:76:7b:8e:
         a1:8c:7e:d2:f5:08:36:34:ee:0f:01:fe:89:8a:22:01:0c:f2:
         cd:b9:bb:35:c3:8d:3f:7b:34:72:2c:fa:4c:95:a7:75:62:59:
         86:a2:06:e5:81:ff:89:a2:f1:58:4e:84:33:1f:a2:8c:27:b0:
         52:53:60:d9:56:f8:70:b6:6a:2b:bf:ca:27:12:c6:b7:92:cc:
         e6:8a:f0:5a:93:8c:3d:2a:a9:75:cd:30:f2:0a:9f:24:e3:6a:
         9b:89:f4:a6:cf:13:8d:d2:09:88:41:ba:67:2d:28:80:a6:11:
         4f:34:c1:cc:d6:56:d7:ba:55:29:5a:17:a5:aa:31:a6:af:89:
         c7:9e:2e:58:07:3e:08:39:38:bf:75:4b:32:21:3d:74:98:6b:
         0d:41:29:3e:d4:86:36:c3:c5:59:df:8b:3c:8c:50:5f:a6:32:
         56:05:47:1c:96:f7:95:95:e6:6c:13:d9:1e:f8:db:ff:67:b1:
         f2:ef:6a:31:93:ff:5b:04:f1:68:16:09:17:09:95:de:3e:9f:
         80:9c:85:81:4d:7f:dc:1a:8f:54:fa:8e:8a:5b:42:b7:60:ee:
         30:f0:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:07 2024 by rpki-client on console-ams.rpki-client.org