Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa
File:                     3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa (raw, json)
Hash identifier:          uJGaFAKn4dQy6zScns4OcbsqiW8b40E0yNbxLKwD6lg=
Subject key identifier:   55:8E:6C:3E:5B:D8:7E:21:34:A0:C5:E3:6D:B1:82:9B:A6:41:86:E1
Certificate issuer:       /CN=4522BB89648AA114F962AB6359DA8F28C7B660C2
Certificate serial:       3D594DC2FE0E150C3FB264FED94A5B0FF6C84AF5
Authority key identifier: 45:22:BB:89:64:8A:A1:14:F9:62:AB:63:59:DA:8F:28:C7:B6:60:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa
Signing time:             Thu 04 Apr 2024 05:58:43 +0000
ROA not before:           Thu 04 Apr 2024 05:53:43 +0000
ROA not after:            Thu 03 Apr 2025 05:58:43 +0000
asID:                     265405
IP address blocks:        168.194.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.crl
                          rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:59:4d:c2:fe:0e:15:0c:3f:b2:64:fe:d9:4a:5b:0f:f6:c8:4a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4522BB89648AA114F962AB6359DA8F28C7B660C2
        Validity
            Not Before: Apr  4 05:53:43 2024 GMT
            Not After : Apr  3 05:58:43 2025 GMT
        Subject: CN=558E6C3E5BD87E2134A0C5E36DB1829BA64186E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:5f:c4:04:b5:64:35:b4:e3:3f:47:2b:62:
                    83:33:7a:fc:1e:5a:df:cb:04:64:32:89:93:d5:3e:
                    13:5b:aa:7a:f3:66:63:4f:1b:b3:7c:36:f6:f0:bc:
                    1a:61:31:6b:fc:b1:02:70:36:77:bb:ff:81:3f:62:
                    cd:e4:ff:a1:30:36:d2:15:2d:af:77:df:3d:b1:88:
                    da:81:7a:6e:19:de:6e:91:45:f4:4f:01:ff:df:3a:
                    a3:69:8e:9f:fe:24:1a:52:11:6d:4c:0d:4a:e6:07:
                    27:eb:14:ea:b0:cb:1e:3f:b1:c9:9d:3a:63:e0:0d:
                    7f:e0:47:24:c2:4b:1d:a3:cc:02:99:4b:22:4f:3d:
                    10:da:6f:49:0e:db:cc:ac:60:57:e5:93:ce:26:e6:
                    49:6b:3b:e2:d9:c2:c9:8b:08:87:de:a8:e9:e7:5c:
                    85:ba:2e:d5:30:40:37:02:43:c4:87:5e:5d:e8:c0:
                    f5:97:68:fb:28:55:11:2c:44:4e:8a:77:d8:32:eb:
                    bf:d4:70:5d:62:79:82:7f:8e:e1:0b:d1:4b:b0:73:
                    83:7d:aa:19:3b:80:90:d8:1a:53:13:61:2e:fc:c4:
                    32:3c:ec:6e:ba:1e:9e:a6:b1:f4:63:0a:a6:3f:37:
                    fc:26:ca:73:c1:45:11:58:9a:61:2d:09:ac:0c:f0:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:6C:3E:5B:D8:7E:21:34:A0:C5:E3:6D:B1:82:9B:A6:41:86:E1
            X509v3 Authority Key Identifier:
                keyid:45:22:BB:89:64:8A:A1:14:F9:62:AB:63:59:DA:8F:28:C7:B6:60:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:69:80:36:f0:be:41:ed:5d:85:60:2c:e5:d2:f4:c2:6d:
         e0:60:b9:4a:80:7c:72:c2:97:32:78:dd:3f:a7:76:79:b8:15:
         c2:82:fd:37:7d:87:b5:7e:df:51:5b:42:71:f8:16:c6:1c:46:
         ab:b8:9f:82:e7:38:d6:cf:f7:fb:6e:02:e3:1f:69:43:8b:39:
         f1:8b:d1:b7:62:32:3e:31:5f:12:0a:5c:9b:84:93:a3:e2:67:
         c9:ec:ec:59:4b:65:b2:9b:6b:f3:0d:b1:b1:ee:8f:a3:98:b8:
         66:e7:d2:38:1e:7e:43:33:7d:38:d6:74:45:d1:c5:d8:e2:a4:
         7c:0f:19:bc:06:48:39:7f:99:d3:f0:b6:c9:7a:68:92:fb:9c:
         95:51:c7:88:4f:8b:10:4e:a5:e0:eb:c3:27:f4:af:85:6b:74:
         40:a7:43:64:60:7d:ca:fb:b9:4d:50:f4:7c:59:9d:51:12:ec:
         e9:46:1c:51:1a:2b:62:aa:b6:ef:f9:e0:1b:71:d2:6f:98:e9:
         4e:74:a4:4d:cc:9d:cd:7c:b3:95:01:2d:c4:54:fd:3f:92:22:
         e0:94:89:cd:37:ed:ef:5d:04:ee:83:9a:bb:91:0a:d4:dd:1a:
         4d:9d:c9:5d:ec:52:c1:41:a4:11:4c:08:f0:01:d0:69:62:55:
         c9:c1:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org