Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3132382e302f32332d3233203d3e20323635313738.roa
File:                     3136372e3234392e3132382e302f32332d3233203d3e20323635313738.roa (raw, json)
Hash identifier:          GISXOjH3Y9G+F8C+FJBH24s+rUPDnJId7AAwcjKMLHE=
Subject key identifier:   9D:DD:99:8A:25:38:C8:0B:3F:8B:B5:ED:A0:F9:98:9F:C4:47:DB:FF
Certificate issuer:       /CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
Certificate serial:       6305BC5A4E4DC4BDFF69FFFA8EE812897F786F2A
Authority key identifier: F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3132382e302f32332d3233203d3e20323635313738.roa
Signing time:             Sun 22 Sep 2024 18:42:35 +0000
ROA not before:           Sun 22 Sep 2024 18:37:35 +0000
ROA not after:            Sun 21 Sep 2025 18:42:35 +0000
asID:                     265178
IP address blocks:        167.249.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl
                          rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:bc:5a:4e:4d:c4:bd:ff:69:ff:fa:8e:e8:12:89:7f:78:6f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
        Validity
            Not Before: Sep 22 18:37:35 2024 GMT
            Not After : Sep 21 18:42:35 2025 GMT
        Subject: CN=9DDD998A2538C80B3F8BB5EDA0F9989FC447DBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:53:31:9a:25:a7:b0:a3:56:fa:5e:fc:b8:
                    54:87:13:a3:4e:e7:2d:ae:8e:39:45:9f:3c:e3:a1:
                    fd:27:37:54:b8:e1:f9:6e:3d:9e:cd:bc:2e:29:36:
                    9d:27:40:88:d1:07:cf:bb:cf:da:6d:37:1a:32:26:
                    98:d0:91:de:65:a1:4f:39:fa:c1:eb:91:6e:25:4d:
                    32:dc:92:60:2d:92:23:93:c4:c5:20:52:f1:d9:89:
                    95:a9:1b:85:db:c8:a4:60:09:41:7e:26:c2:0c:1b:
                    cd:54:80:b5:68:9e:43:e4:2b:f5:8e:46:d1:a3:9d:
                    e7:c2:00:be:7c:36:2d:ba:14:86:b8:c2:9c:ed:a0:
                    55:03:f9:cd:5a:37:db:df:22:2c:cb:26:5d:bb:af:
                    74:2c:d8:62:63:28:77:c3:7d:06:da:0b:48:93:61:
                    d6:42:1f:e1:36:bb:b3:67:6e:a4:04:82:ea:22:3c:
                    08:b1:41:61:5f:9f:86:7b:3a:78:f5:1b:7b:6f:cc:
                    15:0e:9f:a4:68:3b:c4:5e:12:ce:cc:ef:77:78:9e:
                    6d:dc:17:c4:85:66:52:25:21:0b:56:b4:95:76:f6:
                    79:74:55:a5:a1:dc:32:d6:b2:44:50:8e:71:04:51:
                    39:8f:3c:22:b5:07:c6:9b:43:b1:25:a7:65:7c:27:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DD:99:8A:25:38:C8:0B:3F:8B:B5:ED:A0:F9:98:9F:C4:47:DB:FF
            X509v3 Authority Key Identifier:
                keyid:F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3132382e302f32332d3233203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:c2:b8:d9:06:9e:d8:46:82:f4:15:87:64:00:29:74:94:
         99:45:d8:e6:8e:d3:1d:5e:3d:6c:56:3a:3d:6d:41:29:b5:32:
         0d:6e:27:f2:77:ef:92:b6:31:a1:21:01:68:ae:18:d1:70:a9:
         64:d6:c4:92:01:7b:68:27:ef:cf:04:c7:23:92:27:08:53:bb:
         3e:d9:94:17:5d:cd:ad:5f:ba:b0:b8:0f:8e:80:2a:8f:2a:4d:
         2d:0e:b7:94:a2:56:37:49:37:be:af:b0:e7:93:0a:91:46:70:
         84:2b:da:d0:90:21:9c:c5:c1:d9:40:32:ca:2b:34:a2:b2:42:
         49:1d:f5:a7:55:fb:c3:65:75:60:ff:96:19:d1:b1:36:bf:22:
         3e:26:23:03:85:de:93:c5:ab:d3:35:42:68:d6:da:9b:fb:d4:
         74:b3:d9:94:89:ea:8f:a1:4f:dd:42:d3:dc:b4:c1:31:49:fa:
         c4:9d:33:23:3d:74:65:f8:c1:9e:e6:dc:ec:d7:99:5d:bb:74:
         f7:11:63:40:9d:2f:2e:c1:df:e8:9f:5b:c6:62:a7:b2:9f:40:
         47:f7:5c:a3:63:d4:ff:33:e5:04:22:3b:6f:54:1a:8f:32:69:
         98:c0:ba:ef:71:2f:eb:32:58:b5:43:01:24:77:8d:37:3c:57:
         6f:81:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org