Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa
File:                     3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          wo7wZ7D6DmnBDUKQzIv4T4cv8VqsNfFW6BQsBIlQDgc=
Subject key identifier:   5F:9C:B3:14:FF:67:BC:F4:0A:99:82:93:B5:D7:63:44:23:43:2A:EC
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       37605FDC655441324BE7B50AD1FE5F1A171D3C0C
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:28 +0000
ROA not before:           Fri 26 Jul 2024 19:11:28 +0000
ROA not after:            Fri 25 Jul 2025 19:16:28 +0000
asID:                     263656
IP address blocks:        168.197.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:60:5f:dc:65:54:41:32:4b:e7:b5:0a:d1:fe:5f:1a:17:1d:3c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:28 2024 GMT
            Not After : Jul 25 19:16:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:ee:54:03:03:b0:6f:40:6b:26:71:47:21:
                    3b:4c:53:9c:fe:55:af:8d:87:89:68:92:7b:14:81:
                    9e:b0:03:d6:bd:6f:b0:2f:90:a2:2b:ca:f4:7d:d2:
                    32:e8:e6:d8:39:d6:5e:b3:cb:da:2f:f2:b4:91:04:
                    3c:12:12:ef:7c:a7:2a:4c:f8:1b:8c:5b:37:34:22:
                    6f:05:9c:fa:52:bc:08:07:82:5f:6d:1f:5e:41:02:
                    0b:2e:a4:0f:cc:c1:95:a1:0b:e3:d5:a3:8e:ec:aa:
                    67:1d:c9:84:8d:7a:71:4e:f1:4b:c4:f7:a3:d4:82:
                    1b:e8:cd:37:06:e8:8c:d3:e0:db:78:a8:94:8a:36:
                    ac:e2:92:40:3b:bd:c0:1a:05:1b:9f:66:c3:87:17:
                    5c:a4:df:52:cc:a2:c5:79:97:50:0b:ab:c3:28:76:
                    d7:0d:f2:67:3b:8b:7b:cd:4d:b0:60:9d:42:0d:df:
                    d5:6d:1d:d2:39:4c:0e:fd:38:b7:5d:e4:00:73:64:
                    55:11:86:53:58:c4:2f:51:f3:99:5b:45:2f:e0:ed:
                    44:83:ad:43:64:1c:30:af:8d:49:a4:ad:86:7d:36:
                    3e:ad:30:88:a9:01:7b:3a:4b:37:3d:56:0a:d0:99:
                    be:13:3d:f0:09:ba:94:ee:8d:bf:34:00:3b:69:72:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9C:B3:14:FF:67:BC:F4:0A:99:82:93:B5:D7:63:44:23:43:2A:EC
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:ca:3a:00:e8:f5:2a:74:dd:b6:af:93:ff:6a:55:a4:d9:
         a9:10:de:75:19:6d:15:57:53:73:0f:7a:29:31:67:10:04:20:
         bb:3a:90:e7:56:1f:09:e2:e9:c8:ab:7b:b2:b9:77:aa:c3:46:
         6c:20:19:bf:c6:27:8e:3e:07:db:37:04:2d:8d:a3:70:d2:0b:
         92:61:b9:fc:68:e8:b6:33:c2:f8:97:fa:00:e5:05:92:f0:70:
         5f:05:7c:24:f7:c9:dd:5d:a4:6f:c7:f5:6e:dc:fb:41:bd:42:
         ad:bd:0f:d0:5e:2e:d0:7f:70:dc:ac:d7:a0:e8:79:32:2b:70:
         60:dd:e0:92:41:d2:e7:b3:ab:a4:24:1b:68:0f:73:61:9d:ef:
         af:b8:e0:f1:e9:e9:f7:6b:50:18:99:df:0c:93:35:c9:de:33:
         f7:c2:96:af:e4:79:b9:cd:57:31:92:be:50:5a:28:13:79:ae:
         73:46:c9:b7:ce:24:63:91:34:79:6b:60:57:34:aa:23:21:72:
         d5:bd:ab:b4:a5:39:36:c5:23:7c:ce:e5:08:47:0d:37:ca:44:
         c4:c8:8c:3c:56:21:2e:71:04:b4:51:e9:71:52:a5:ac:c5:3a:
         6a:c6:f8:61:15:3e:50:d2:b9:ed:b6:92:76:f5:79:7f:89:cd:
         6a:85:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org