Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa
File:                     3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa (raw, json)
Hash identifier:          qQBWkze0bSRROz/yYvqC0mDpeuCpNfDw09lPCuesq4E=
Subject key identifier:   B6:FE:8E:46:04:9D:85:A2:09:82:F8:09:72:0E:E0:34:FF:99:26:86
Certificate issuer:       /CN=D123858020F0224957058CA805488D517D88F47A
Certificate serial:       25139AE0CCB0E1723BC1CCBB9EE2AD65CD399B11
Authority key identifier: D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa
Signing time:             Wed 03 Apr 2024 18:27:39 +0000
ROA not before:           Wed 03 Apr 2024 18:22:39 +0000
ROA not after:            Wed 02 Apr 2025 18:27:39 +0000
asID:                     265975
IP address blocks:        164.163.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:13:9a:e0:cc:b0:e1:72:3b:c1:cc:bb:9e:e2:ad:65:cd:39:9b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D123858020F0224957058CA805488D517D88F47A
        Validity
            Not Before: Apr  3 18:22:39 2024 GMT
            Not After : Apr  2 18:27:39 2025 GMT
        Subject: CN=B6FE8E46049D85A20982F809720EE034FF992686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:9c:fa:de:cf:62:b4:20:54:68:9f:c3:73:
                    51:b4:ed:b4:95:83:4d:62:24:fa:f3:2d:87:59:3f:
                    1f:92:2b:b5:60:59:f6:07:5e:25:d3:7e:74:07:af:
                    a7:f6:18:70:ab:d5:b1:c2:13:82:07:30:23:5d:bc:
                    bf:79:8c:0c:3f:df:0f:92:7f:94:7a:3f:4b:05:dc:
                    16:aa:5b:07:86:c7:33:87:20:c3:2f:af:4f:fd:4d:
                    d5:5f:9a:6a:99:78:05:e3:ac:dd:01:50:ef:78:0a:
                    83:2f:dc:51:fc:6f:68:31:66:dc:71:2b:3e:11:f7:
                    e7:1c:ca:9c:47:14:a3:9b:a7:51:b8:a7:ab:59:ec:
                    90:87:16:4b:69:cf:8c:c0:a6:cb:09:9f:52:05:4e:
                    ab:ed:2e:15:c9:bf:23:8a:5c:1d:fe:61:ce:b4:2f:
                    b0:8b:ad:83:ab:02:ee:4b:3f:aa:38:fc:98:da:b5:
                    42:b3:73:19:3e:63:2f:d1:3a:be:ce:98:2d:04:d2:
                    ac:ed:12:17:8b:b1:81:6b:14:50:5a:95:da:98:1a:
                    ca:71:f9:ef:be:b5:58:6e:f6:60:ae:6d:77:c9:ee:
                    03:83:f1:39:c2:4f:e1:14:b4:59:5f:cb:22:bd:17:
                    bb:a8:7d:75:b4:4f:46:76:e0:5b:a2:4d:9d:3e:0a:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:8E:46:04:9D:85:A2:09:82:F8:09:72:0E:E0:34:FF:99:26:86
            X509v3 Authority Key Identifier:
                keyid:D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:16:71:f2:1b:5e:ae:4b:9f:88:0c:e3:bb:c7:d9:80:2a:1c:
         32:e5:e5:f6:5a:ad:0c:bf:ac:ad:d0:b3:b8:47:7f:2d:47:76:
         87:de:c5:89:4b:74:75:96:4d:b2:e2:6a:db:c3:b9:e4:5e:eb:
         49:ae:38:0c:59:bf:2d:b9:7b:b3:3f:cf:06:d2:c8:bf:56:9f:
         19:39:ab:ef:79:d2:39:d7:b6:08:64:b1:ec:b2:93:f2:d0:72:
         51:eb:20:50:24:c3:14:81:68:27:d0:16:c1:5b:61:0d:41:fc:
         46:e4:38:af:74:3e:cb:23:19:a0:a1:fc:13:2c:42:f4:83:55:
         8f:ec:71:37:2d:fc:c0:60:62:53:cf:4b:d7:32:30:bf:c2:64:
         5f:7d:b3:e4:3e:02:57:bb:63:61:f7:53:c3:55:98:b3:82:44:
         23:3e:a2:cd:e0:b3:5c:09:29:a0:24:68:71:60:9a:7c:e8:d3:
         b7:c4:5e:a7:35:fb:88:1f:38:e6:11:a8:c9:d7:b8:64:fb:2b:
         3a:3c:fa:81:38:ee:6c:2c:49:25:3a:09:57:9c:1a:42:99:cc:
         35:b5:ba:3a:83:21:63:a7:25:12:d7:aa:3b:fe:04:61:96:90:
         fb:ce:35:8b:93:f7:55:e0:d2:23:45:ae:ce:98:f6:da:4f:38:
         a5:54:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:45 2024 by rpki-client on console-ams.rpki-client.org