Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          0EhFgqog8cOaxm1AiVUhrJJ7OwLBGNf6nxomqskJjf0=
Subject key identifier:   8A:B8:A8:95:05:99:0B:D0:9B:C1:EA:5D:1C:06:D3:49:24:46:1A:BA
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       417FBBAD599FEA60F06193BC0C7AA50BD0A262CE
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Thu 04 Apr 2024 01:52:33 +0000
ROA not before:           Thu 04 Apr 2024 01:47:33 +0000
ROA not after:            Thu 03 Apr 2025 01:52:33 +0000
asID:                     52545
IP address blocks:        168.121.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7f:bb:ad:59:9f:ea:60:f0:61:93:bc:0c:7a:a5:0b:d0:a2:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Apr  4 01:47:33 2024 GMT
            Not After : Apr  3 01:52:33 2025 GMT
        Subject: CN=8AB8A89505990BD09BC1EA5D1C06D34924461ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:49:0e:e7:d3:12:95:f9:ec:e9:3f:db:57:
                    10:d2:69:95:77:75:36:cd:cc:79:b6:45:0d:f6:b9:
                    2f:92:d3:a3:3d:23:2a:d0:33:2b:8a:1a:95:be:42:
                    27:ff:64:71:48:8c:3a:c7:fe:14:b0:2e:cd:9d:b3:
                    f8:fc:56:c4:30:42:ec:c8:14:9c:d0:6f:dc:7a:e8:
                    ac:c0:ba:72:1a:cb:0e:72:d2:8c:f1:20:34:0b:bf:
                    b0:bc:53:24:d4:4c:2c:16:81:67:80:68:d4:7a:f8:
                    78:a7:e5:01:5f:c8:8d:a6:92:c3:29:e5:7b:c2:a1:
                    25:e6:27:97:cf:85:1b:d9:6d:a5:df:ea:98:78:89:
                    71:63:b0:51:6a:70:7a:53:3a:14:cb:71:97:fd:ce:
                    6e:82:63:89:97:a4:d0:73:29:05:97:47:14:4d:59:
                    45:1e:11:d8:89:52:22:4c:0c:55:b7:f0:dd:9c:f8:
                    cc:30:fe:6d:07:e9:d4:9a:30:72:0e:d9:9c:42:a6:
                    90:98:35:d7:a9:4a:33:64:1f:83:75:65:52:f3:59:
                    5c:4a:f8:c1:2c:41:33:90:29:2f:63:c9:37:2d:98:
                    cf:2f:a6:20:2e:b9:e3:f1:6d:37:59:51:31:58:38:
                    0a:0e:7b:5a:fb:10:45:f6:f3:1c:66:91:57:9d:6d:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B8:A8:95:05:99:0B:D0:9B:C1:EA:5D:1C:06:D3:49:24:46:1A:BA
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:00:05:36:95:1e:e4:a0:09:e0:1b:12:22:98:09:5e:1c:bf:
         64:d1:ab:1a:8f:5a:f2:75:82:04:e7:fe:18:20:ed:95:82:07:
         6a:51:c5:ce:ed:80:51:42:6b:f8:d1:92:c4:ae:54:da:4b:e5:
         3c:87:26:a9:fc:96:2f:a5:c0:e5:69:1f:9c:bf:bf:81:4d:2e:
         4d:9e:1c:6a:6b:cb:1a:eb:79:0d:ab:de:7e:16:12:19:0f:37:
         a0:40:c1:00:4e:fe:1b:1e:ac:cc:a8:f0:03:02:ab:e5:d7:56:
         88:d3:be:c0:ad:e4:fb:81:e3:40:8e:ac:c6:67:53:1f:96:9e:
         a9:f4:7f:fd:7f:87:d9:8f:c7:17:32:d2:0f:d2:80:7b:9a:e1:
         50:5a:02:d1:3e:84:1b:8e:0a:72:75:e4:ac:1b:d7:63:12:92:
         c2:62:31:85:f7:d7:d0:28:10:a5:42:be:6c:12:70:a1:0c:6e:
         cc:22:87:f0:6d:77:f5:55:77:32:da:85:46:d1:fc:1b:fc:0f:
         59:5b:7d:8a:7b:a9:25:bb:fa:06:0a:f3:64:98:64:36:e4:48:
         41:e1:ae:c3:5d:3f:eb:9e:c6:90:77:4c:39:78:f0:30:89:25:
         d3:7a:cb:68:2f:03:f2:f2:9b:da:23:af:9c:76:fb:88:aa:5b:
         c5:8c:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org