Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          aSe6em5AhNO44qN+pZSConDZwZcBaAdMO/k1QWbUazw=
Subject key identifier:   16:DC:D9:E1:B0:97:16:14:38:D3:23:A9:BE:75:27:F2:DD:83:DC:4C
Certificate issuer:       /CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
Certificate serial:       69DE951BC5CBA6140FF01D7F991E053E3A86F3DD
Authority key identifier: 73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
Signing time:             Fri 01 Nov 2024 00:58:08 +0000
ROA not before:           Fri 01 Nov 2024 00:53:08 +0000
ROA not after:            Fri 31 Oct 2025 00:58:08 +0000
asID:                     265393
IP address blocks:        168.194.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 22:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:de:95:1b:c5:cb:a6:14:0f:f0:1d:7f:99:1e:05:3e:3a:86:f3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
        Validity
            Not Before: Nov  1 00:53:08 2024 GMT
            Not After : Oct 31 00:58:08 2025 GMT
        Subject: CN=16DCD9E1B097161438D323A9BE7527F2DD83DC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:2c:0f:b8:0c:17:1c:97:38:65:cb:d4:0a:
                    06:42:8f:05:54:1f:94:91:80:6b:97:00:2b:f7:44:
                    5a:15:54:c5:81:7a:a1:0c:46:59:65:dc:f6:45:c5:
                    03:75:57:54:6f:c1:a6:e5:c6:09:69:3a:88:8f:0c:
                    e3:25:29:f8:51:47:a4:15:f0:9c:f9:ca:88:d0:7c:
                    32:80:bb:0d:c3:49:f7:89:d0:42:42:b2:a5:d4:a8:
                    72:62:1d:46:bd:14:51:81:69:f4:46:1f:d2:60:07:
                    34:91:96:7a:c4:02:dd:4b:3e:4d:19:3b:d9:34:3b:
                    c2:db:fd:ca:91:f2:ac:68:92:d7:c0:9a:6d:4a:11:
                    2b:b7:02:81:5a:b3:15:34:32:d6:55:74:f7:b6:2f:
                    62:e2:89:82:1f:8f:24:53:ed:bf:fb:6a:ab:7e:6c:
                    76:d1:44:5a:d2:80:be:47:5e:ac:8f:95:aa:e8:f4:
                    78:4e:ab:c8:d7:8a:64:6b:61:38:93:86:57:56:f5:
                    a5:45:32:45:70:ff:cb:34:c9:ae:61:02:82:24:4a:
                    75:5d:f5:4f:a2:30:ee:d2:ac:ad:a4:43:fd:73:88:
                    e4:5a:fd:c7:56:1b:c0:d3:7f:31:5a:9f:fc:5d:6e:
                    ef:0e:8e:f6:8a:3c:db:8f:a1:44:76:2e:a3:a7:45:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:D9:E1:B0:97:16:14:38:D3:23:A9:BE:75:27:F2:DD:83:DC:4C
            X509v3 Authority Key Identifier:
                keyid:73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:43:f1:f6:22:40:39:ba:d5:79:59:0f:e5:a7:bd:ce:03:7b:
         4f:91:d7:77:47:ee:90:e4:be:ed:d0:b6:9d:4f:14:32:31:e0:
         ae:66:60:d6:f6:33:95:7a:4a:c5:f5:4c:f3:12:2a:d9:08:88:
         c7:35:b9:fa:43:f0:c3:35:4e:69:21:4d:d5:83:dc:df:20:49:
         61:99:e0:b5:b3:3d:9d:37:41:50:f2:48:54:f1:cf:00:d7:0e:
         f6:62:78:1e:86:89:9e:92:7a:02:45:c2:76:63:52:fe:6d:fd:
         8f:0d:8b:26:41:e7:02:07:39:e6:c2:c3:f0:cb:6e:e7:f4:47:
         b8:f3:cf:d6:75:9a:2c:ee:cf:bc:06:b4:3d:79:5d:38:ce:93:
         a4:6e:48:c8:a9:69:30:76:be:69:a0:c5:29:21:95:a1:80:ed:
         5e:81:86:a3:a1:e8:73:15:a3:7a:0a:25:ec:c4:8f:d3:7d:9c:
         01:be:a5:4b:3f:28:3b:c2:00:ee:0c:00:5f:51:a9:ed:9d:55:
         62:88:20:70:ad:4f:04:2b:5d:8a:83:4b:2b:e9:72:a5:bc:74:
         74:37:c1:a1:3e:d7:e7:85:da:c6:f4:98:52:86:b1:0d:92:c7:
         bc:a8:0d:7f:e8:77:48:29:e2:10:a2:be:6f:fe:c3:23:8a:e2:
         b1:75:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:08 2024 by rpki-client on console-ams.rpki-client.org