Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136362e302f32332d3233203d3e20323635343236.roa
File:                     3136382e3139352e3136362e302f32332d3233203d3e20323635343236.roa (raw, json)
Hash identifier:          8223K7Cgk+WJ0GrwESxrMR2gT7XB/Z0Fhw63jbt+FPE=
Subject key identifier:   1F:EC:A1:FF:93:99:08:26:D3:22:6D:65:E9:14:C2:43:34:8F:B1:4B
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       65DAE9A47ABF6A0413E31671F42CF248B7E485A2
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136362e302f32332d3233203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:13:58 +0000
ROA not before:           Fri 19 Jul 2024 00:08:58 +0000
ROA not after:            Fri 18 Jul 2025 00:13:58 +0000
asID:                     265426
IP address blocks:        168.195.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:da:e9:a4:7a:bf:6a:04:13:e3:16:71:f4:2c:f2:48:b7:e4:85:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:08:58 2024 GMT
            Not After : Jul 18 00:13:58 2025 GMT
        Subject: CN=1FECA1FF93990826D3226D65E914C243348FB14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:27:29:d6:2a:bb:94:f2:f6:44:21:54:1d:
                    59:b3:51:d5:21:60:fa:c5:9e:f9:30:c0:f5:29:d6:
                    c9:ba:ff:a2:9f:0d:04:e8:a1:e2:57:b4:42:ea:fc:
                    7b:3f:44:97:1a:f1:5e:fd:69:cf:6e:23:dd:07:5c:
                    74:26:e0:c8:0d:59:f2:6b:f7:f9:20:0d:5b:ff:89:
                    c2:b5:3f:fc:8d:ba:b3:46:70:2a:3f:86:1d:05:68:
                    4e:09:5b:5d:69:09:7b:de:eb:b0:32:06:02:ed:62:
                    ea:f5:ad:30:a3:96:c5:31:34:0d:3e:83:32:e8:53:
                    0b:a9:61:2a:39:b1:75:8a:ed:98:03:f6:db:34:c4:
                    48:1a:1f:d8:cd:f3:4a:c8:eb:ae:a1:04:74:74:ba:
                    15:70:69:3b:f2:3c:cf:af:60:66:2e:b6:6a:f4:97:
                    d7:4f:19:ef:fd:e2:86:2c:f6:a8:18:f5:b9:8f:15:
                    ce:12:44:21:6a:d9:ca:6e:15:a4:46:75:35:ae:6a:
                    09:84:38:4c:cd:b4:16:4e:04:69:a0:ed:1c:ae:1d:
                    4c:aa:c4:19:d7:89:38:f5:a0:e5:58:d6:fb:9c:f6:
                    05:02:1e:22:af:e9:cd:3a:13:23:d4:c8:01:20:a4:
                    63:c1:35:8e:44:a8:4f:ff:0a:89:57:b2:d5:19:82:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EC:A1:FF:93:99:08:26:D3:22:6D:65:E9:14:C2:43:34:8F:B1:4B
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136362e302f32332d3233203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:21:11:57:74:12:3b:e1:3d:93:65:bc:1d:88:9b:d8:f4:
         0a:9c:a1:65:bc:b5:1f:46:9d:f7:fc:88:6d:0b:89:64:fa:bc:
         12:eb:7a:a1:9f:77:5e:91:90:97:68:c6:77:f8:01:14:89:69:
         3b:b8:94:f5:d3:df:d4:ad:2f:cb:0c:1b:6d:da:37:5d:9c:da:
         1e:2a:2b:9c:64:71:b8:15:24:f9:62:d9:0a:e3:c9:82:b8:af:
         1b:5a:fc:28:da:47:36:63:f6:97:65:76:c0:53:87:14:bd:c8:
         22:e4:79:b3:64:52:56:b6:cc:24:9d:3d:cb:3c:56:e8:ef:a3:
         96:3c:30:67:7b:4a:2c:2f:2c:a7:ec:63:64:b0:f6:ed:b6:93:
         10:5b:6d:ab:5f:5d:b9:5b:3d:77:ad:b1:dc:fa:59:76:9e:26:
         26:a8:36:f8:9a:f3:b4:1c:e5:5b:46:d2:e1:c5:b4:57:a5:10:
         e0:a0:45:e7:fe:c2:08:4a:c4:a1:00:26:c1:f7:4a:57:82:a9:
         98:a8:d1:a9:a8:a7:92:4c:e8:d3:d5:a2:31:97:c8:82:c0:03:
         98:7c:91:9e:42:f4:70:b4:00:95:c5:f4:9e:77:e4:fd:00:93:
         b5:96:b4:5f:48:3a:98:7f:31:8a:5e:6c:35:df:17:26:11:2f:
         51:3b:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:43:48 2024 by rpki-client on console-fra.rpki-client.org