Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa
File:                     3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa (raw, json)
Hash identifier:          68PThffik/vg6MZs997iyXOJ0HdWKjZdMzNyc9D7glo=
Subject key identifier:   CA:A1:2F:45:74:0A:6C:8E:92:CC:90:84:E1:E6:2D:BB:DA:31:EF:C1
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       0DC46C50FCF34B71F4C69F013931738EB23AFC40
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa
Signing time:             Wed 03 Apr 2024 19:18:32 +0000
ROA not before:           Wed 03 Apr 2024 19:13:32 +0000
ROA not after:            Wed 02 Apr 2025 19:18:32 +0000
asID:                     265950
IP address blocks:        164.163.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c4:6c:50:fc:f3:4b:71:f4:c6:9f:01:39:31:73:8e:b2:3a:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Apr  3 19:13:32 2024 GMT
            Not After : Apr  2 19:18:32 2025 GMT
        Subject: CN=CAA12F45740A6C8E92CC9084E1E62DBBDA31EFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:04:10:43:d5:55:fb:d6:fb:04:b5:bf:18:
                    b4:0b:7d:af:ec:10:14:f8:8a:81:78:47:73:57:82:
                    01:52:0e:aa:5e:9d:94:05:50:22:9e:b1:cf:c3:b2:
                    b9:1c:cb:d9:c2:cc:40:4e:b7:4c:2f:ea:0a:45:dc:
                    82:91:d9:17:5a:56:5a:e3:07:53:f1:b7:af:e7:2c:
                    91:13:bd:79:be:6b:ad:de:22:cc:1f:34:26:94:92:
                    ce:a5:a0:cf:3d:e9:7b:36:4c:3a:de:cd:d8:13:2a:
                    ae:38:7d:13:28:b4:8e:c8:ba:42:72:3a:b8:29:1e:
                    08:10:46:a5:d4:c1:1e:3a:7d:de:21:9e:e3:8e:2e:
                    1c:d9:b3:d4:de:ea:33:be:e6:a3:b8:c6:a4:24:d3:
                    3b:28:1e:fd:97:79:cb:a7:ba:a8:1b:f0:58:a4:45:
                    12:7b:73:17:18:cf:a6:aa:50:01:e0:be:ab:be:19:
                    24:37:bd:a5:d3:d3:eb:3b:8e:bb:b9:34:d8:6f:a2:
                    18:15:26:d5:cb:ec:13:57:eb:fb:71:c2:d1:dd:02:
                    be:20:78:0f:83:a1:10:5b:d1:08:79:e1:76:a4:28:
                    fa:86:2f:7d:5b:00:ce:60:21:a9:c8:1c:61:7f:30:
                    e2:97:bf:ba:13:7e:60:c0:4a:dc:dc:b3:2f:b7:c2:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A1:2F:45:74:0A:6C:8E:92:CC:90:84:E1:E6:2D:BB:DA:31:EF:C1
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:47:a1:b4:18:31:f6:5c:f4:a3:4e:13:e1:83:0e:b6:f5:
         67:9b:fd:ed:8c:66:be:c5:f1:a6:c2:f5:84:ff:f4:bb:65:d3:
         a1:dc:cd:80:cf:3c:f9:42:98:d3:69:4a:16:1e:0c:2b:e2:b9:
         4c:92:d9:87:ea:cd:dc:88:16:87:f3:92:2d:a7:bf:58:00:14:
         7a:4e:60:53:c6:ee:e0:fd:3e:7b:e8:75:f5:96:c1:fc:f0:b1:
         85:e9:7c:ea:3c:97:79:9d:c4:a5:e9:50:61:ef:00:a0:82:a9:
         c7:21:ef:8e:fd:fc:1e:ee:e4:18:65:9b:32:1c:cd:a3:d2:a6:
         23:f7:e8:ac:a7:de:13:77:d2:b0:2b:62:2e:ef:4f:80:5b:cc:
         6b:e0:ea:4a:a6:62:49:2f:e1:7b:ba:17:69:f2:cd:23:2a:a7:
         a2:df:4b:28:61:b9:9c:14:c4:8c:9e:b2:dc:2e:11:b0:46:a8:
         e1:63:19:fe:af:09:86:3f:09:83:c7:c8:49:43:36:77:59:d6:
         c8:f3:e7:91:e0:02:b4:fa:bb:ad:3a:63:82:c2:31:0b:d6:2d:
         4f:0d:dc:15:0d:c3:90:46:de:7c:30:d9:df:72:8b:84:cc:5a:
         40:e3:d5:46:cc:15:88:17:08:74:9a:91:6c:66:3a:19:55:47:
         78:34:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org