Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
File:                     3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier:          XxedswjMERowcc4N86GXS8ONaSBvAuV76/9c0UEsFDQ=
Subject key identifier:   F9:3C:C0:D6:D3:50:2D:28:2C:BF:AD:C4:8B:9F:85:A0:67:87:9E:DE
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       7410D132437EE9ED54EDCC497CAD362D4496967E
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
Signing time:             Fri 05 Apr 2024 03:32:21 +0000
ROA not before:           Fri 05 Apr 2024 03:27:21 +0000
ROA not after:            Fri 04 Apr 2025 03:32:21 +0000
asID:                     265485
IP address blocks:        168.197.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:d1:32:43:7e:e9:ed:54:ed:cc:49:7c:ad:36:2d:44:96:96:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Apr  5 03:27:21 2024 GMT
            Not After : Apr  4 03:32:21 2025 GMT
        Subject: CN=F93CC0D6D3502D282CBFADC48B9F85A067879EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:30:fb:38:a6:2a:90:97:a5:0e:65:cb:8c:
                    06:17:dd:04:8c:40:8e:45:b0:5d:ec:7c:6f:67:07:
                    0a:c6:f6:fa:57:88:4d:9c:3b:3b:7a:db:b5:56:0f:
                    4e:c2:94:e9:fb:59:d6:35:75:b9:30:88:d3:8e:fc:
                    7b:c6:22:ec:42:22:0b:eb:6a:c0:8c:45:8e:73:c5:
                    ef:5e:f7:d3:af:93:4e:a4:40:49:77:40:40:e4:37:
                    84:36:14:ce:bb:03:4c:4c:84:c8:81:7f:c8:97:bd:
                    12:23:41:9b:16:cb:17:88:28:77:a4:8b:ab:9e:76:
                    11:b2:f4:ef:0d:04:ce:7f:90:f3:a9:90:aa:9a:a3:
                    5c:df:84:16:fb:b8:6f:41:05:09:b8:a0:4b:18:eb:
                    13:3b:ca:47:c1:00:b2:70:02:46:44:7d:7d:9c:a7:
                    c3:ed:c1:4a:ee:cd:c5:47:02:d0:ff:f6:ff:e5:d4:
                    1c:a5:10:e5:3d:3e:47:32:42:83:19:8f:fe:5c:02:
                    88:a7:7e:d5:b4:e3:1e:86:85:4a:fb:c2:4d:1e:b8:
                    de:4b:69:21:dd:c7:21:45:f4:89:f4:62:1e:cd:6e:
                    e2:24:b2:f5:a6:ee:6a:d3:e6:5c:c0:d8:38:44:a7:
                    e7:f0:d1:b2:70:fc:e2:69:18:2a:2e:38:cf:fa:6f:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:C0:D6:D3:50:2D:28:2C:BF:AD:C4:8B:9F:85:A0:67:87:9E:DE
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:11:7e:c9:7c:3a:d9:d4:4d:7c:13:b8:eb:c7:06:eb:22:
         03:d7:ae:68:f9:90:7f:c6:23:f7:c9:0f:8c:1b:63:e3:27:25:
         4b:67:ca:e7:ed:a6:a7:27:a1:8a:29:38:36:b3:ac:1f:e2:6a:
         78:9c:a3:1a:ad:77:68:a4:32:92:a1:40:cf:2b:01:53:7d:d6:
         8d:a0:3c:6b:f2:10:4c:9e:e6:98:c1:9c:91:b2:16:81:39:6e:
         5b:8b:77:e2:da:bf:74:57:79:52:f2:79:70:71:a8:e2:6a:98:
         47:ad:c3:88:a6:4a:ae:41:e0:91:de:e3:bb:3a:64:fd:b3:e7:
         d5:40:31:c0:f8:a7:01:88:3a:a3:60:3f:23:ec:98:64:41:1a:
         8a:90:a0:c4:8f:27:85:87:ef:55:ce:fe:71:fe:b2:57:64:15:
         ba:17:27:3b:42:45:86:7c:53:ba:ef:b0:5a:4b:bf:9c:52:f9:
         a2:48:95:43:17:3a:89:95:6f:3f:5d:9c:51:1b:45:ba:e1:ab:
         fd:c6:53:bc:de:84:5d:aa:5b:52:a9:72:f0:49:b5:04:5f:48:
         6e:ce:00:21:e1:37:5c:4a:56:00:81:d7:98:87:e5:9b:fe:68:
         1d:2b:33:69:02:1f:a7:74:25:13:18:dc:54:b0:d9:97:61:c2:
         ba:9f:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org