Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa
File:                     3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa (raw, json)
Hash identifier:          un6T8V8ULFIwM2y5y30Po1VgVRD7+q7LVhleZGfd3w0=
Subject key identifier:   9A:56:24:18:32:51:F5:8D:F3:37:8C:41:72:AB:46:B0:EF:EB:82:62
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       3F6F28F255BD032C1C877EF50EDA0DC2C37F4D06
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265379
IP address blocks:        168.194.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6f:28:f2:55:bd:03:2c:1c:87:7e:f5:0e:da:0d:c2:c3:7f:4d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=9A5624183251F58DF3378C4172AB46B0EFEB8262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:15:bd:ee:c8:ff:6a:3a:69:fc:a5:8a:15:
                    55:30:b5:7b:e7:a7:21:52:9b:e1:61:3c:01:3a:ab:
                    43:d9:70:14:9e:22:2a:7f:44:f9:53:15:96:83:9d:
                    2a:4f:02:84:ed:98:02:f6:39:a7:96:90:4c:4b:05:
                    f7:8d:f6:c8:58:c7:cc:63:8b:60:c2:2e:1c:49:ec:
                    39:05:3a:23:92:86:42:b2:38:5a:07:78:96:ae:c4:
                    a9:e7:8b:ee:c5:cd:4f:8e:43:28:5b:fd:f6:18:10:
                    a4:51:f6:b8:81:35:21:3e:f3:b7:8a:aa:37:c2:ce:
                    0d:75:d4:f5:48:9b:ba:63:f5:3e:61:16:3e:75:12:
                    8b:28:aa:b0:ed:0e:81:da:7c:bb:dd:87:b4:93:a3:
                    ad:bf:60:6b:16:41:35:04:25:87:74:96:5c:f6:c4:
                    55:c4:49:72:ad:fa:d2:a1:21:b7:07:70:31:ac:3d:
                    13:55:91:44:1a:d9:63:76:49:1a:45:88:3e:4a:ec:
                    13:44:53:f7:82:08:11:97:0d:a5:d6:de:8d:44:7a:
                    fd:52:57:ce:3d:83:bf:b0:87:e4:f7:ee:82:fc:32:
                    75:2c:13:63:a8:1b:51:e7:fd:0c:40:c2:b5:19:6c:
                    88:90:cd:69:73:10:e4:a1:78:3a:a1:8c:b0:5b:9d:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:24:18:32:51:F5:8D:F3:37:8C:41:72:AB:46:B0:EF:EB:82:62
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:a9:de:e7:ac:87:40:9a:aa:71:ec:bf:b2:a2:a9:eb:74:
         84:40:c8:0f:6b:32:f0:ea:a4:2c:01:eb:ce:bd:9d:6b:6d:53:
         d6:10:f6:8f:a8:27:3b:ca:ba:f8:a5:f2:f5:68:79:c7:4e:53:
         c7:a9:81:79:ed:a4:a8:37:04:c6:14:4a:a7:19:d8:61:01:cd:
         fe:db:c5:89:77:e4:0f:11:6a:25:56:ee:02:b8:93:21:e2:80:
         0f:c1:39:5d:44:e9:cc:1a:87:05:ae:c2:18:d8:1f:13:1b:c7:
         88:9c:5a:7d:13:77:c0:50:cf:81:df:5c:5a:d5:8d:88:23:dd:
         c7:58:ea:af:2d:f1:30:06:37:50:7b:01:a6:a2:33:37:57:7d:
         7f:5c:07:41:b1:0e:1a:e5:a2:f7:2a:33:b3:ef:0e:35:d8:ed:
         83:74:b1:76:02:22:db:a7:78:d5:b8:3b:60:74:ee:b5:39:90:
         81:ed:57:ba:88:5f:fa:f9:be:da:20:52:cb:6d:43:9b:34:14:
         58:6b:50:8f:ee:05:8e:32:e0:d2:73:f5:8e:b3:f8:6e:b1:a1:
         60:af:bb:d5:d5:ab:2a:ae:62:77:3d:22:f5:f2:dd:ef:f7:a0:
         a4:6f:2e:4c:39:1c:b9:9f:2b:53:e2:81:af:37:7e:fc:83:46:
         e2:3b:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:25 2024 by rpki-client on console-fra.rpki-client.org