Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/3136302e31392e34372e302f32342d3234203d3e20323636313539.roa
File:                     3136302e31392e34372e302f32342d3234203d3e20323636313539.roa (raw, json)
Hash identifier:          HdUt4Lygy87oyqqZv+hlL/kiRXOzW1wma4AAt5qGJF4=
Subject key identifier:   81:BF:08:D3:3F:DA:1B:CD:AC:59:83:F0:BB:CA:4A:E2:00:36:FF:20
Certificate issuer:       /CN=69B7F5A9658DE6458B100966610F13A42172540B
Certificate serial:       340839AA98D168D864B67F3A3AA545B57AC14A75
Authority key identifier: 69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/3136302e31392e34372e302f32342d3234203d3e20323636313539.roa
Signing time:             Thu 04 Apr 2024 11:37:51 +0000
ROA not before:           Thu 04 Apr 2024 11:32:51 +0000
ROA not after:            Thu 03 Apr 2025 11:37:51 +0000
asID:                     266159
IP address blocks:        160.19.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl
                          rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:39:aa:98:d1:68:d8:64:b6:7f:3a:3a:a5:45:b5:7a:c1:4a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B7F5A9658DE6458B100966610F13A42172540B
        Validity
            Not Before: Apr  4 11:32:51 2024 GMT
            Not After : Apr  3 11:37:51 2025 GMT
        Subject: CN=81BF08D33FDA1BCDAC5983F0BBCA4AE20036FF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:48:4c:a8:d1:33:1f:51:f6:b9:01:20:06:
                    08:eb:5e:8b:c6:23:6a:66:73:46:f8:62:16:88:49:
                    23:69:51:dc:84:13:9a:48:d7:28:6f:5f:23:92:1b:
                    07:cd:8b:a6:65:b1:ac:64:03:7e:f2:eb:ff:f3:11:
                    62:47:0d:eb:83:d5:d6:21:e3:9b:fa:44:c0:be:4c:
                    2a:13:63:c2:d4:56:c3:12:5a:a7:53:ec:61:53:03:
                    e8:c8:f5:9a:43:fe:b1:52:58:ec:ab:9c:6c:bf:5e:
                    66:1c:b1:a2:97:fa:2d:e0:93:da:26:2c:af:76:c9:
                    1c:fa:2a:aa:07:53:43:c7:69:0d:27:a0:5e:0b:bb:
                    d1:e0:ac:ee:89:c8:b7:75:e5:e9:25:e9:f3:80:1a:
                    7b:e7:b4:eb:3c:0a:ff:8c:2c:67:2b:57:f7:59:54:
                    ce:14:44:81:9f:8c:67:f5:f0:ab:bf:e5:0e:f1:ad:
                    20:ba:c6:58:55:4e:f4:93:c7:43:1d:8f:78:b8:da:
                    24:05:17:c0:f3:ae:08:2b:b8:4b:61:df:7c:f1:21:
                    7d:78:8b:6c:5a:ce:3e:bb:42:bf:37:e4:7a:eb:5f:
                    36:63:c5:20:81:70:49:16:cf:c5:94:36:b6:14:10:
                    3f:53:88:bd:ea:77:2f:33:ea:35:6c:13:dc:8b:46:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BF:08:D3:3F:DA:1B:CD:AC:59:83:F0:BB:CA:4A:E2:00:36:FF:20
            X509v3 Authority Key Identifier:
                keyid:69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/3136302e31392e34372e302f32342d3234203d3e20323636313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:48:e8:6d:6f:77:b5:08:fd:72:d7:1a:cd:db:68:5f:90:
         0d:4b:97:c8:09:bc:0f:4d:c8:f0:a5:81:5e:ba:81:1a:9b:e9:
         b3:5d:e7:ca:b9:0c:9c:0e:31:39:06:1d:54:bd:6e:4c:48:f2:
         2b:45:bd:0a:3c:66:5e:69:19:92:fd:ca:e1:7b:d1:60:19:59:
         cf:ad:ea:6a:33:17:16:4a:97:94:fb:63:9c:05:1d:91:d3:4a:
         4a:46:cf:8c:a7:3c:bf:17:1b:fc:86:38:e4:88:86:91:fc:5b:
         e6:b4:00:00:62:8d:5e:57:e7:34:e4:8a:c1:0d:10:8b:78:af:
         66:7b:88:6c:a4:73:6a:02:31:ba:15:7b:ca:f2:78:17:30:58:
         41:c2:c3:2c:3d:13:12:0d:90:d7:8c:0c:41:75:86:76:f2:f6:
         6e:d0:53:e0:0a:88:e4:1e:7e:e2:08:01:42:a6:f3:31:ed:29:
         1b:23:d7:80:6f:38:9d:2b:b0:fd:fb:29:f2:1f:d7:22:38:27:
         21:ea:a0:c6:15:ef:cb:1e:bc:73:c3:ca:d1:c8:68:3d:ae:22:
         06:f7:ce:d5:85:60:72:19:8c:e9:ce:db:4e:6e:b3:20:a6:4e:
         1e:51:ca:ed:a5:16:d9:39:57:8e:1e:91:02:52:56:22:8c:37:
         ff:e8:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:18 2024 by rpki-client on console-ams.rpki-client.org