Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32342d3234203d3e20323635343236.roa
File:                     3136382e3139352e3136342e302f32342d3234203d3e20323635343236.roa (raw, json)
Hash identifier:          PQf3+qhyRoR67sVWXcOTOPxo9s9WB7Dkh2HKjMy+JBM=
Subject key identifier:   32:DB:21:9F:D6:E8:3A:CA:59:BD:67:CF:05:16:4D:E1:B3:BD:6B:65
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       61BC6A9D92D0D5C0E317E93EB62097CD9FB77F6B
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32342d3234203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:13:56 +0000
ROA not before:           Fri 19 Jul 2024 00:08:56 +0000
ROA not after:            Fri 18 Jul 2025 00:13:56 +0000
asID:                     265426
IP address blocks:        168.195.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bc:6a:9d:92:d0:d5:c0:e3:17:e9:3e:b6:20:97:cd:9f:b7:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:08:56 2024 GMT
            Not After : Jul 18 00:13:56 2025 GMT
        Subject: CN=32DB219FD6E83ACA59BD67CF05164DE1B3BD6B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:b2:1b:6a:64:a8:44:3b:ae:85:f9:2c:fe:
                    62:8b:a7:6d:4c:3b:3b:8d:3f:ec:15:67:fe:11:ff:
                    c7:22:d1:54:9f:ec:f0:ac:40:fd:22:21:ee:29:7f:
                    22:15:d2:5b:44:73:b9:3d:f7:59:d5:b4:12:59:fc:
                    4a:3c:ae:33:db:cf:6d:52:b0:7c:bb:82:80:27:a7:
                    a4:57:22:9b:11:ea:67:f8:de:f7:7f:9e:fa:77:37:
                    6a:54:10:b2:44:fb:e2:c4:f8:7a:7f:a6:ae:f6:4c:
                    4a:e9:ff:1e:2b:ec:d1:d6:68:ce:2a:dd:38:28:8b:
                    d4:3e:05:de:f8:5a:5e:be:ce:b6:3e:54:03:1c:64:
                    6d:80:53:7a:91:f0:ff:79:ba:23:aa:cd:c9:5e:47:
                    74:19:df:96:7d:e9:41:54:62:d6:e7:36:99:43:03:
                    24:da:be:ad:e8:90:1a:56:3f:a3:71:91:64:ab:bf:
                    b7:83:3b:a4:58:14:95:e1:6d:4b:00:32:c7:68:1a:
                    87:b9:85:b9:52:92:1f:3e:3f:1a:5f:9d:86:53:73:
                    ea:df:c5:93:d9:11:ff:bc:55:59:ae:6a:66:2f:ab:
                    ee:67:cf:ca:d2:ec:43:10:c9:7f:e7:ab:37:d0:87:
                    c5:5e:eb:47:02:2a:82:17:e4:fd:67:06:8e:dd:02:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:21:9F:D6:E8:3A:CA:59:BD:67:CF:05:16:4D:E1:B3:BD:6B:65
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136342e302f32342d3234203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:56:67:30:d3:42:91:d9:13:a0:e6:07:41:34:08:23:2e:66:
         d4:18:c9:91:60:85:6c:dc:b9:cb:4f:81:68:2f:2c:45:7c:9d:
         1c:a0:f0:7f:05:50:4e:ac:ce:4b:ea:84:73:94:3e:41:5c:f9:
         9e:13:23:06:9e:8f:51:8e:ff:ff:97:03:7f:e6:c8:1f:16:f4:
         c4:42:09:5a:eb:31:b2:89:da:79:f7:24:b4:ac:de:f3:60:0e:
         c1:18:84:71:d1:16:f6:ff:c2:ad:0d:6d:d1:a1:fd:f4:f0:49:
         08:70:81:50:e6:59:a2:6e:50:52:5a:39:5b:90:3e:87:b4:fe:
         01:c9:45:41:98:7e:76:b6:17:4a:8c:16:7b:e0:6f:c8:6a:80:
         95:16:d6:17:22:2f:fe:83:2e:7d:90:2c:f1:cb:dc:6c:49:b5:
         e3:4c:87:29:cd:a9:46:24:fe:86:7d:ed:bc:b4:90:22:4d:53:
         ef:2f:eb:ac:d7:36:6f:0e:93:3f:4f:5d:94:f4:29:45:38:61:
         a5:c5:12:c3:e2:2a:ba:63:74:1d:48:15:6e:17:98:8f:55:8e:
         b0:ce:be:62:4c:69:b3:b4:a0:20:60:21:92:0a:54:7c:0b:91:
         39:74:bc:17:4a:5e:ba:b6:79:dd:0b:91:d0:5c:1e:97:b6:c6:
         a2:23:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org