Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136372e302f32342d3234203d3e20323635343236.roa
File:                     3136382e3139352e3136372e302f32342d3234203d3e20323635343236.roa (raw, json)
Hash identifier:          JuAYii+2y/XqsJp9SY3etmOkxz/XQR+RhvPFfGkWjQg=
Subject key identifier:   9F:40:25:CB:6E:21:63:D1:F6:07:10:EE:89:73:4F:F7:46:66:3F:AF
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       70A28F912162226FADB2BD85B669E133AF8BFADD
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136372e302f32342d3234203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:14:01 +0000
ROA not before:           Fri 19 Jul 2024 00:09:01 +0000
ROA not after:            Fri 18 Jul 2025 00:14:01 +0000
asID:                     265426
IP address blocks:        168.195.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:8f:91:21:62:22:6f:ad:b2:bd:85:b6:69:e1:33:af:8b:fa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:09:01 2024 GMT
            Not After : Jul 18 00:14:01 2025 GMT
        Subject: CN=9F4025CB6E2163D1F60710EE89734FF746663FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:ae:f4:99:5e:3b:4f:28:19:1d:60:e9:66:
                    b1:e4:b7:85:42:6d:27:b3:71:58:79:49:31:84:e9:
                    48:37:bd:8f:0b:9c:35:e7:c9:cd:b2:0a:b4:9d:11:
                    48:c1:8e:03:b7:8e:81:91:04:d4:14:8d:02:ed:0f:
                    fc:20:61:4d:10:50:b4:7c:ac:5e:5f:ba:13:91:4d:
                    dc:3d:05:f1:e8:ef:53:62:40:d3:9c:5b:1b:7f:42:
                    3c:8b:2c:bf:de:56:3f:38:3c:02:0c:a5:b6:5f:90:
                    10:c4:12:22:91:e4:9c:f7:84:d4:5d:b8:b9:08:80:
                    dc:21:b3:bd:44:1f:a6:80:a3:b2:3f:d1:04:74:6e:
                    37:c8:42:42:e2:b1:78:a7:5a:b2:87:3d:90:09:aa:
                    a3:12:3f:80:24:21:3e:9f:1d:dc:c6:5d:30:f0:87:
                    d1:2e:d3:6e:19:17:d6:fb:c6:c5:c4:33:88:07:f4:
                    54:56:be:bd:ec:2e:a7:bd:36:fa:41:f0:a3:34:49:
                    71:0e:69:dc:46:d3:94:7e:6c:56:0e:24:82:e1:a0:
                    7d:b1:0a:7a:4f:ba:1a:89:8e:3e:de:dd:eb:7d:75:
                    53:fe:3f:7e:83:4a:ce:bc:a7:43:c3:31:67:7a:51:
                    56:95:37:20:ae:f0:30:cd:9c:38:33:e9:91:77:a7:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:25:CB:6E:21:63:D1:F6:07:10:EE:89:73:4F:F7:46:66:3F:AF
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/3136382e3139352e3136372e302f32342d3234203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:04:91:26:40:2c:85:f1:41:fb:40:23:99:f1:a4:f0:d2:
         65:e2:cc:bd:60:d4:43:d5:3d:2a:ea:f7:2a:e4:fe:32:c5:7b:
         3d:b5:63:d5:7c:d1:71:b3:f2:dd:98:13:cb:2c:85:f5:32:65:
         6a:e4:a2:93:af:17:59:59:ac:21:2a:a4:09:a0:34:9b:25:59:
         e1:d8:56:ed:ac:1f:49:71:f5:17:8d:d2:95:40:32:dd:45:00:
         2c:ab:15:ae:e2:22:cc:1a:e9:b9:f6:dc:7e:76:e0:df:e8:12:
         78:2a:e7:52:ca:cd:d7:7b:6d:65:d4:ea:e8:73:0d:e4:be:12:
         18:a2:6b:39:c4:fc:8a:1e:e6:a1:5e:49:68:6e:67:2b:11:87:
         8d:df:5e:f5:1d:6c:49:ef:e1:5d:cd:60:3f:fa:82:b9:58:de:
         3b:5e:c4:f2:a8:92:e3:d6:d8:f8:e6:31:45:75:98:e7:16:e3:
         79:61:76:e8:3c:5d:66:18:e3:b3:eb:9c:f0:24:3a:a0:37:57:
         19:5d:91:15:db:41:b2:87:0b:e7:94:20:2b:6f:44:5c:4d:58:
         97:74:ca:3b:68:89:c3:c8:ed:26:15:f9:ca:d2:58:9b:57:bf:
         da:64:ab:e3:0d:6f:c6:0b:fe:40:d9:48:34:0f:07:4d:18:a7:
         64:1c:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org