Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135392e302f32342d3234203d3e20323635323536.roa
File:                     3136382e302e3135392e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier:          8SnuJaxlMNR0/JhrgMNvyGvVpOOASiGXCGsFATTDUTM=
Subject key identifier:   36:91:80:66:73:18:01:82:B7:2D:43:5B:E6:AA:B0:4D:53:01:31:E8
Certificate issuer:       /CN=95CE674952A93BE73C10B416EB0EE35010832094
Certificate serial:       04CCEC6238F1F042645C84F3F9B8E00008160EA1
Authority key identifier: 95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135392e302f32342d3234203d3e20323635323536.roa
Signing time:             Sat 02 Nov 2024 02:42:19 +0000
ROA not before:           Sat 02 Nov 2024 02:37:19 +0000
ROA not after:            Sat 01 Nov 2025 02:42:19 +0000
asID:                     265256
IP address blocks:        168.0.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.crl
                          rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cc:ec:62:38:f1:f0:42:64:5c:84:f3:f9:b8:e0:00:08:16:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95CE674952A93BE73C10B416EB0EE35010832094
        Validity
            Not Before: Nov  2 02:37:19 2024 GMT
            Not After : Nov  1 02:42:19 2025 GMT
        Subject: CN=3691806673180182B72D435BE6AAB04D530131E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:38:6f:05:25:d0:8a:4f:97:db:00:ce:63:
                    32:f8:cf:ea:0e:69:bf:a4:8a:54:a1:8f:24:20:ac:
                    2c:3f:65:31:36:85:fe:f2:86:35:ad:b7:0a:1f:2b:
                    15:50:a5:48:2e:37:dc:02:ed:07:59:8b:d7:a1:25:
                    5c:11:f7:d1:e9:5e:6b:57:f6:f5:6d:23:9f:ac:4b:
                    39:f4:04:f8:a7:da:90:b8:ef:26:60:d0:6d:0e:89:
                    30:4e:b0:cc:03:f7:f6:ac:f3:10:e4:9f:ad:98:8e:
                    42:09:58:c5:7f:4f:4d:10:cf:02:0c:db:b2:7e:7e:
                    e3:9a:99:ac:5a:6f:6b:8d:65:70:51:f5:79:00:59:
                    e9:7d:23:21:8a:09:97:12:af:f6:34:ed:9f:78:ac:
                    6b:e0:bc:0a:2a:9e:81:a7:fc:de:76:78:30:2c:7f:
                    7e:2e:8c:ad:76:75:76:ca:4d:de:48:a7:b2:84:73:
                    41:66:4c:e4:97:04:f3:04:77:bc:55:5b:d0:3a:9f:
                    41:30:c8:93:d0:09:10:34:9b:9d:aa:da:96:71:d3:
                    19:d0:c6:22:d0:d6:8c:fd:62:02:39:aa:f7:f5:a9:
                    0b:0c:29:ae:86:7b:cb:d2:0b:8f:3a:83:45:2f:e9:
                    c5:31:12:d4:24:58:b5:ae:26:b4:1d:7f:39:ae:09:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:80:66:73:18:01:82:B7:2D:43:5B:E6:AA:B0:4D:53:01:31:E8
            X509v3 Authority Key Identifier:
                keyid:95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135392e302f32342d3234203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:a4:b2:c6:17:05:99:8b:00:95:68:fa:06:bf:5d:c5:17:
         7c:37:52:71:e2:4c:8a:69:cc:9f:bb:93:04:dd:1c:fe:1d:03:
         0c:9a:42:a1:f9:d8:c6:a5:1d:23:bf:13:cf:bc:3a:ca:c9:d4:
         fe:fa:a0:e7:ed:54:5a:7b:0a:0d:a6:c4:2c:7d:9a:6d:ed:b1:
         4f:53:dd:e5:95:fd:af:ba:ea:6f:42:ca:67:87:c6:a3:aa:1b:
         ad:51:73:01:11:ed:14:e2:4b:8f:d4:d1:39:ed:ad:29:58:97:
         d7:9c:a7:cb:79:22:74:50:30:59:ad:10:7b:60:f3:aa:9b:12:
         01:43:2a:66:33:d3:65:06:af:f0:40:a1:8a:f6:8d:50:7c:dc:
         20:05:8a:2f:38:aa:ae:8c:3f:3f:c0:af:bd:ac:82:0d:7e:e8:
         75:29:b3:74:0a:c0:ba:2c:9a:cd:14:cf:a5:82:f6:06:60:5d:
         34:e5:97:68:65:71:68:1b:ee:7e:6d:e4:1d:b4:0c:2b:c7:05:
         b0:29:5b:bf:cf:e1:2d:ba:af:bc:f8:56:63:98:0e:98:16:e5:
         81:0d:ab:dd:e7:68:a0:2e:60:3d:42:28:6a:00:f4:e6:d6:58:
         19:9a:e1:b5:84:0b:b1:70:18:d2:ba:f0:49:66:fc:c6:e5:7a:
         aa:d5:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:45 2024 by rpki-client on console-ams.rpki-client.org