Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3133302e302f32332d3233203d3e20323635313738.roa
File:                     3136372e3234392e3133302e302f32332d3233203d3e20323635313738.roa (raw, json)
Hash identifier:          tb/zbY0Obhn8eZZENPmmZKzqQJ/P2lqA0ejtT1UiyVU=
Subject key identifier:   6E:01:DF:7B:3B:32:AB:76:FD:25:E3:69:E5:4E:4D:26:6B:26:98:D0
Certificate issuer:       /CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
Certificate serial:       3559B5257B59614BF03D0B4F16E7B738BA31C782
Authority key identifier: F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3133302e302f32332d3233203d3e20323635313738.roa
Signing time:             Sun 22 Sep 2024 18:43:32 +0000
ROA not before:           Sun 22 Sep 2024 18:38:32 +0000
ROA not after:            Sun 21 Sep 2025 18:43:32 +0000
asID:                     265178
IP address blocks:        167.249.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl
                          rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:b5:25:7b:59:61:4b:f0:3d:0b:4f:16:e7:b7:38:ba:31:c7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
        Validity
            Not Before: Sep 22 18:38:32 2024 GMT
            Not After : Sep 21 18:43:32 2025 GMT
        Subject: CN=6E01DF7B3B32AB76FD25E369E54E4D266B2698D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:ab:30:7b:a4:9f:b5:94:c1:be:4c:46:05:
                    48:6e:0e:21:6a:b7:a2:e8:d6:c2:84:18:33:09:57:
                    9b:d2:10:20:64:c3:2b:5f:64:34:c3:cd:93:18:af:
                    4c:97:b5:41:46:e3:5c:1b:32:88:f5:df:98:44:ea:
                    46:4a:a0:61:01:0c:d9:a9:0f:d4:91:4d:ee:b8:c8:
                    3d:21:54:18:73:ed:11:b5:ca:1d:0e:09:1a:fb:50:
                    05:23:bd:95:35:eb:85:6b:75:8f:9b:9b:3c:bc:f1:
                    8a:27:cc:ea:76:a5:41:87:83:b4:4a:69:01:ed:c4:
                    6c:34:66:fe:e7:0e:8b:58:31:0a:b5:49:f7:78:72:
                    15:31:9b:4f:12:9d:2a:0a:6b:a5:3a:d1:6e:86:aa:
                    e8:e4:ee:0c:05:84:cb:d0:d6:27:5e:82:8d:1e:99:
                    9f:4f:a7:58:ca:2d:04:a7:13:99:70:81:c8:58:11:
                    b3:14:ad:d5:f2:b4:33:f1:b8:0f:47:cf:c5:b4:1f:
                    20:53:60:b4:dd:e8:4d:d7:9c:d9:7f:12:44:00:2f:
                    82:12:dd:fe:b7:8c:0a:56:57:c8:4a:42:c4:61:02:
                    a1:01:ba:d5:f0:2d:5e:45:d8:92:f9:40:97:94:40:
                    96:8f:50:9e:7a:fc:18:03:2e:bb:a6:a7:78:eb:03:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:01:DF:7B:3B:32:AB:76:FD:25:E3:69:E5:4E:4D:26:6B:26:98:D0
            X509v3 Authority Key Identifier:
                keyid:F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/3136372e3234392e3133302e302f32332d3233203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:5a:e0:b8:bd:89:b0:df:37:82:00:87:dc:09:25:59:52:
         37:05:72:ee:3a:f9:e7:eb:27:ea:74:1f:2e:89:5b:03:a2:a4:
         23:e6:bb:e0:83:71:33:5b:66:d7:bb:75:91:ae:aa:c7:a1:65:
         55:bc:7c:0e:8f:de:63:29:09:ac:9d:36:f7:55:8b:cc:3e:09:
         b8:61:82:51:f4:85:38:80:48:25:40:8a:eb:e9:18:39:0f:ca:
         34:69:a4:4c:b1:b8:7e:a2:06:d6:32:74:84:6b:38:2d:ce:6a:
         38:58:a8:76:45:38:d3:d7:fc:7a:d5:d5:74:39:f6:84:d0:c7:
         39:91:ed:7b:4f:b8:de:9a:b4:f7:66:22:9c:a3:aa:8e:0d:07:
         71:b4:fb:5b:97:a7:36:cf:aa:e1:96:d8:39:47:e6:ad:ff:22:
         f5:bc:06:ac:63:1b:26:33:a6:11:6a:25:2f:bf:3f:50:48:68:
         af:34:3f:9b:a6:9d:ea:e5:70:fa:80:f0:f1:9b:bb:6c:5f:47:
         6d:63:a8:be:49:28:12:95:b9:55:d4:41:92:04:9f:f7:cc:e8:
         9e:de:e4:89:05:fb:9f:eb:02:e6:6b:5d:2e:71:0c:f1:e5:3b:
         9c:27:eb:fa:3c:dc:b0:8b:58:ce:2e:b8:ed:24:c1:44:07:8b:
         92:b7:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org