Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa
File:                     3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa (raw, json)
Hash identifier:          qMgk2GCt9ndsy28hgndqZ8vupOTkgKysSJjv0edXUE8=
Subject key identifier:   5E:60:C3:8B:0E:86:BB:9D:0D:BC:79:3C:B8:6F:A4:D1:0A:EC:8E:EC
Certificate issuer:       /CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
Certificate serial:       3385BC36B11C128BC1ADDBCB64A03C599CD5E554
Authority key identifier: F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa
Signing time:             Sun 22 Sep 2024 18:41:53 +0000
ROA not before:           Sun 22 Sep 2024 18:36:53 +0000
ROA not after:            Sun 21 Sep 2025 18:41:53 +0000
asID:                     265178
IP address blocks:        167.249.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl
                          rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:85:bc:36:b1:1c:12:8b:c1:ad:db:cb:64:a0:3c:59:9c:d5:e5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
        Validity
            Not Before: Sep 22 18:36:53 2024 GMT
            Not After : Sep 21 18:41:53 2025 GMT
        Subject: CN=5E60C38B0E86BB9D0DBC793CB86FA4D10AEC8EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:52:cb:15:cb:6d:e4:0b:47:67:22:d0:51:
                    18:d8:82:f4:a5:b3:74:a7:bc:2c:5c:82:ae:90:e6:
                    b9:7b:19:77:24:91:f9:6c:41:15:67:c3:57:8c:c8:
                    73:bb:30:5c:47:fa:7f:1c:c2:78:63:30:4a:2c:08:
                    98:a8:fe:11:13:73:58:50:c5:fd:03:35:7b:d1:bc:
                    c7:2e:52:42:46:55:e6:cc:95:5d:73:c9:3c:87:45:
                    d1:89:25:7b:f3:87:20:20:46:84:90:ee:32:e0:55:
                    da:02:77:dc:5b:1b:66:0c:71:3d:85:07:9b:da:b8:
                    f6:75:a3:da:95:92:cd:2b:0e:97:f3:6d:05:ad:14:
                    45:7b:e2:34:6c:62:18:c5:f3:19:69:95:f7:9e:21:
                    1b:d1:8e:92:55:38:75:d0:de:a4:62:aa:2b:53:38:
                    4a:11:9d:29:27:5f:d3:c7:fd:77:54:9d:07:98:1b:
                    0f:c5:a4:b6:ce:36:f1:bc:8d:44:6d:00:b7:2a:a6:
                    ae:7f:4b:73:2c:cc:9b:25:31:bc:c5:ec:c0:69:e9:
                    fd:a8:7e:15:df:87:63:0e:08:74:46:17:18:b5:df:
                    33:f3:3b:ca:66:89:4e:70:ba:01:50:d9:ac:2d:9b:
                    ec:6a:7e:1e:6a:e7:95:b5:27:7f:6e:4a:3d:43:e2:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:60:C3:8B:0E:86:BB:9D:0D:BC:79:3C:B8:6F:A4:D1:0A:EC:8E:EC
            X509v3 Authority Key Identifier:
                keyid:F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:89:25:c8:36:f6:be:45:6d:b6:30:f2:3c:87:09:78:12:db:
         a0:49:22:1c:13:eb:fc:d7:ca:da:33:71:37:8c:76:8d:8e:94:
         05:25:d4:bd:20:72:fb:7a:5f:f5:e6:c8:c0:66:44:b3:45:3d:
         2b:ef:b3:dd:56:de:22:77:58:69:9e:29:bc:28:52:5c:a5:85:
         3a:cb:9f:7e:e0:a4:aa:a7:06:a1:70:13:13:66:1b:5c:a4:f5:
         35:20:00:be:6f:db:22:e8:4c:a4:56:75:42:4c:85:ab:df:c1:
         5a:ea:35:d7:c2:ef:07:61:54:8d:ce:05:72:cb:c5:23:59:b5:
         ea:58:60:aa:51:2d:19:24:d6:db:a8:1b:87:5b:40:d4:56:41:
         12:a2:c2:f6:87:d2:fa:44:92:a4:f5:f9:de:ed:56:e8:fc:08:
         53:e5:72:fc:a9:85:aa:07:a7:d1:23:e5:1d:b7:1f:7b:cb:bd:
         ef:25:9e:c2:76:d4:18:51:3d:26:72:c6:10:a3:d2:31:c3:cf:
         9d:55:82:de:62:65:8d:2a:c5:b8:55:46:f4:af:43:af:a5:15:
         2a:0f:1e:11:7f:d1:4b:b8:2e:7c:14:e2:7f:bd:93:fc:a8:82:
         b0:ca:e0:09:c9:83:6e:fd:57:1e:39:dd:7f:7c:3b:25:79:03:
         2f:48:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org