Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          jWcUNL99H+nPysemp8xMguhEMdac8OeXmqvu9W2RpQQ=
Subject key identifier:   DC:94:5E:09:06:D3:50:87:B6:18:DB:83:F3:02:73:18:83:1E:25:D1
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       77356E8BEDF9F72018249DF116C1447B61D6F26E
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 05 Apr 2024 03:32:21 +0000
ROA not before:           Fri 05 Apr 2024 03:27:21 +0000
ROA not after:            Fri 04 Apr 2025 03:32:21 +0000
asID:                     265485
IP address blocks:        168.197.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:6e:8b:ed:f9:f7:20:18:24:9d:f1:16:c1:44:7b:61:d6:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Apr  5 03:27:21 2024 GMT
            Not After : Apr  4 03:32:21 2025 GMT
        Subject: CN=DC945E0906D35087B618DB83F3027318831E25D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:f8:f5:40:08:be:0f:d7:47:66:72:6d:d3:
                    ad:2d:70:7c:6c:84:92:44:af:9c:2e:f2:19:81:b4:
                    ac:71:03:cc:07:de:9a:94:e0:41:97:4c:5b:2f:d7:
                    50:a3:84:8a:9c:d2:59:fa:12:40:5e:11:b5:97:99:
                    c6:b2:29:37:20:4c:63:07:58:4c:74:b7:8f:f4:02:
                    35:52:ff:42:93:a4:b8:46:22:84:26:80:0d:e4:79:
                    63:22:0c:de:f9:0a:9f:f0:c4:39:b7:d1:2b:cf:af:
                    99:3e:b8:a5:91:e4:98:ea:0e:16:34:da:1e:68:5e:
                    c2:39:37:66:bd:8f:a2:05:30:19:18:92:3f:f8:be:
                    8c:71:ea:26:6b:f6:dd:25:d7:17:e4:76:b4:10:d6:
                    37:7e:55:3b:ac:af:8d:7f:7f:d0:73:57:18:a1:86:
                    b0:ee:55:54:56:f4:73:c4:b1:ac:28:c5:af:b8:6b:
                    7c:87:26:54:63:10:89:83:ec:1e:7d:49:6c:be:6e:
                    22:b1:07:d9:da:fb:16:28:07:30:a2:8d:0c:b9:ad:
                    4b:16:c8:9f:3f:29:c2:28:a3:c0:41:a3:98:83:55:
                    b8:d8:1f:67:86:67:2a:e3:55:90:26:53:1d:67:34:
                    a3:82:84:ce:93:0a:5f:60:b6:e1:8b:a9:0c:c2:52:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:94:5E:09:06:D3:50:87:B6:18:DB:83:F3:02:73:18:83:1E:25:D1
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135392e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:4a:59:da:49:af:34:cc:80:2a:ec:3d:22:7e:ae:18:9b:
         cf:09:20:4e:b3:01:1d:13:9c:5a:ff:b7:0c:0a:e7:dd:66:41:
         5f:5d:ed:8b:6b:aa:5d:3f:00:0c:60:7c:47:44:fb:8e:15:0c:
         5a:d7:e5:43:19:94:5d:21:02:40:77:ee:50:07:d9:2e:6f:c7:
         6b:5a:2f:23:01:ce:33:80:ef:4b:a3:b1:9c:94:c6:41:7f:d6:
         44:8d:e8:24:a2:c4:68:4d:17:a7:ad:91:90:f1:5d:f5:5d:5e:
         ad:7f:12:0f:65:fa:7d:7d:81:f3:51:53:e1:f4:88:c7:8f:f6:
         d1:25:d1:3b:e6:2d:e9:63:e7:23:8f:63:d3:33:4c:27:81:52:
         70:0b:aa:86:31:39:54:3e:1f:e2:a0:4e:a3:c6:23:1d:85:85:
         22:1a:ca:fe:71:ae:12:4d:7f:66:d7:ca:ca:41:ba:39:8c:13:
         16:63:a7:d2:19:08:bc:bc:a2:5f:bb:81:14:cf:1c:f2:11:b3:
         6e:71:5f:5c:de:36:db:90:1c:21:cb:3d:ad:1d:51:39:9d:0f:
         76:a8:fc:e4:71:fa:92:12:66:37:25:8c:21:b1:a8:cf:fb:aa:
         04:37:bd:55:e4:18:2b:df:c0:14:c2:bc:7a:83:49:70:c4:de:
         c0:41:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org