Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32322d3232203d3e20323635343236.roa
File:                     3136382e3139352e3136342e302f32322d3232203d3e20323635343236.roa (raw, json)
Hash identifier:          PUL5cQ8PSJ4tqAcfqiafcocIX/LHtagRC3yFvzVZmkA=
Subject key identifier:   7D:A9:40:8B:F9:13:BF:5F:0A:E0:D5:25:89:F2:03:1B:59:81:E0:CA
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       53EF0827645B50E22F657504BE519EA0055FC132
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32322d3232203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:13:43 +0000
ROA not before:           Fri 19 Jul 2024 00:08:43 +0000
ROA not after:            Fri 18 Jul 2025 00:13:43 +0000
asID:                     265426
IP address blocks:        168.195.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ef:08:27:64:5b:50:e2:2f:65:75:04:be:51:9e:a0:05:5f:c1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:08:43 2024 GMT
            Not After : Jul 18 00:13:43 2025 GMT
        Subject: CN=7DA9408BF913BF5F0AE0D52589F2031B5981E0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:21:b6:5b:88:e2:50:f9:97:9a:75:b4:36:
                    de:2a:12:dd:6c:77:64:d3:84:5c:b1:e5:ff:4d:58:
                    ee:a2:fe:2f:86:b9:db:ec:de:fe:38:d8:9b:bc:f1:
                    f9:58:90:38:e8:4e:49:e7:6f:fa:1b:22:cc:c5:aa:
                    8f:4e:45:02:ab:97:9e:6b:ca:1d:c1:f4:c4:5b:9c:
                    84:80:67:a6:b2:e2:d4:3e:83:6f:c5:38:2f:0c:90:
                    8e:eb:21:86:13:c9:29:31:d5:f1:a6:04:c7:db:32:
                    b3:9b:1e:70:2c:37:3d:5c:19:b5:71:c1:bf:13:92:
                    d6:ca:70:7f:06:25:36:c7:f5:c6:97:80:d2:c3:04:
                    ae:4a:5e:5d:af:87:de:d1:1c:8d:a0:7f:be:39:74:
                    32:9e:36:f2:d2:dc:80:99:af:07:2b:10:36:f7:7f:
                    9a:8f:8c:1e:01:f0:aa:e3:db:f0:b2:4e:b1:37:ad:
                    3a:6a:52:97:0a:c9:07:4d:e5:37:57:9f:f8:9b:64:
                    16:d2:5b:65:03:34:81:96:09:d0:01:c2:c1:62:77:
                    17:2a:e2:bc:89:6b:14:76:fc:cb:32:da:8c:f5:5a:
                    69:54:7d:25:92:6f:06:f0:97:bd:f4:d2:f2:9e:58:
                    e1:a7:df:c9:70:07:1e:49:82:48:04:aa:d1:76:ce:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:40:8B:F9:13:BF:5F:0A:E0:D5:25:89:F2:03:1B:59:81:E0:CA
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32322d3232203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:48:90:e3:42:d5:16:cb:4f:c8:1b:77:c1:19:04:43:99:
         b7:38:89:b4:63:8b:c7:e8:53:ad:85:f9:71:02:94:13:8e:2c:
         cf:7d:5e:d6:40:76:b0:64:ae:47:f6:21:fb:14:2b:24:5c:27:
         43:b1:58:f3:77:90:a8:7d:c5:d4:e9:c0:10:1e:aa:27:c6:a0:
         51:70:76:67:db:73:9b:11:db:62:28:df:14:a8:2d:d1:95:5f:
         88:d4:69:b7:47:d4:5f:7a:2f:16:37:d3:e3:28:69:73:15:23:
         77:60:18:d7:1c:8c:1b:ef:54:42:1b:be:66:96:81:76:ea:c7:
         d4:b6:d6:07:61:bb:da:96:4b:94:c9:0e:08:5d:a8:dc:4e:fc:
         81:b6:fc:16:30:93:53:f8:39:17:93:85:15:57:78:5e:4f:4b:
         8c:0a:49:19:ea:df:68:aa:6e:7d:c0:64:4c:5e:d9:ca:df:7f:
         0b:58:bf:22:58:8c:8f:50:ac:85:c2:dd:99:79:e7:5e:16:0b:
         da:32:a2:b7:62:40:25:b6:99:91:14:bb:af:1f:d6:02:4c:d3:
         58:8d:62:8d:30:d0:9b:46:c7:75:76:ea:f1:4b:5c:07:f2:5f:
         02:42:91:b1:bb:04:97:21:52:b7:c3:b3:17:de:fe:5d:be:ce:
         97:ea:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org