Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa
File:                     3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa (raw, json)
Hash identifier:          bQzM45Cdby9RefW2gTHDskniBlcBmX7vHUxu5qBMyxg=
Subject key identifier:   A8:7A:42:56:53:C4:24:F6:1C:B7:7D:70:92:D6:D7:65:85:65:85:71
Certificate issuer:       /CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
Certificate serial:       01A7A14F9BDE7B2971F01B5EB30D5F390A232A34
Authority key identifier: 0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa
Signing time:             Tue 23 Apr 2024 19:03:34 +0000
ROA not before:           Tue 23 Apr 2024 18:58:34 +0000
ROA not after:            Tue 22 Apr 2025 19:03:34 +0000
asID:                     265949
IP address blocks:        164.163.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 01:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:a1:4f:9b:de:7b:29:71:f0:1b:5e:b3:0d:5f:39:0a:23:2a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
        Validity
            Not Before: Apr 23 18:58:34 2024 GMT
            Not After : Apr 22 19:03:34 2025 GMT
        Subject: CN=A87A425653C424F61CB77D7092D6D76585658571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:2d:a2:da:a9:10:3b:4a:b0:74:fc:e4:be:
                    b0:e3:9e:3a:f3:88:00:e5:39:8f:3d:0d:8d:68:71:
                    31:17:56:36:86:dd:95:8d:47:a7:ba:0b:ac:1e:0f:
                    3e:a6:80:6b:68:de:b8:d2:c0:71:3c:47:e1:95:ef:
                    3a:88:3f:29:43:8b:1e:a4:e3:08:5c:cd:47:ac:8c:
                    78:eb:86:2a:90:e7:26:b9:3b:12:32:5b:1a:19:e4:
                    af:bc:a1:b5:33:58:d4:9b:2c:6f:b7:07:1c:b0:e2:
                    14:6c:88:27:fa:c6:4a:f7:2a:05:52:1a:4c:54:d6:
                    6a:9f:c3:0c:c7:f0:1a:fa:87:d0:db:5f:5e:81:b7:
                    47:1c:a9:bd:8a:b5:48:c2:11:2c:87:e2:85:71:29:
                    3e:30:e8:c4:41:6b:03:4f:80:c5:a5:c1:1e:28:32:
                    67:c1:fd:0a:cb:48:fa:aa:ca:c3:a0:34:2a:14:b7:
                    04:2b:61:3a:2b:f4:48:29:72:77:62:8b:54:57:7c:
                    5d:d5:53:1d:3a:91:72:b1:84:59:29:4a:39:ea:67:
                    70:b9:1f:11:9e:6f:bb:be:91:97:38:a3:e8:c6:1d:
                    1e:50:23:d9:28:50:c0:53:37:32:9c:cc:ee:fe:7d:
                    3e:5a:4b:20:ab:48:cd:a2:57:53:7d:c1:5f:57:8f:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7A:42:56:53:C4:24:F6:1C:B7:7D:70:92:D6:D7:65:85:65:85:71
            X509v3 Authority Key Identifier:
                keyid:0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:24:08:b8:20:82:ec:83:9d:22:c4:a3:47:86:13:d8:f8:
         58:45:5b:b9:84:dd:d9:7a:3f:9c:95:2f:4a:2e:fe:43:6a:7b:
         55:c9:ef:ba:d2:60:32:ed:4e:10:06:1f:df:4c:ec:ee:91:1d:
         9c:1e:8f:70:85:74:08:41:0f:e0:c5:97:5f:5c:2f:18:b5:21:
         54:6a:f6:79:69:c5:9e:62:36:f3:60:0b:a0:30:23:c4:2b:84:
         fb:b1:9d:32:39:53:de:97:84:15:64:19:69:ac:24:0e:94:a4:
         fb:fd:a7:a2:6f:2f:94:5a:5e:e9:16:78:2b:a1:4c:66:55:a3:
         c7:47:15:cd:d0:73:1b:15:b9:70:0c:79:ae:7a:57:45:af:61:
         ff:3e:ab:d4:23:88:73:0f:1f:2f:aa:ec:cd:56:e5:a3:75:7f:
         a3:b3:8b:ab:70:b3:84:67:7a:6e:4a:07:06:9b:9d:c3:d8:5a:
         05:72:ca:2d:59:10:a4:be:e9:29:35:33:7d:19:69:c4:ab:9b:
         03:68:52:e6:af:0b:fc:72:42:00:72:c8:4b:9a:f6:06:fe:94:
         fa:97:4a:69:2c:2f:e9:64:b0:95:fd:dd:cc:df:9d:10:20:83:
         66:70:7d:ea:fa:a8:fd:31:fd:ae:ae:b3:d7:67:b0:dc:ca:ff:
         2a:ee:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:08:10 2024 by rpki-client on console-fra.rpki-client.org