Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          aNdCLUll+YgJBJ/0nkKVzvRLSVQjsLzcGdyLOIIEShk=
Subject key identifier:   C9:8D:3E:E3:F1:CD:9E:3C:FB:4F:A8:7F:B3:7A:DE:8C:83:FA:BF:A5
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       6B9B0144418711662F5EEEB8BB50941F2897AB78
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265379
IP address blocks:        168.194.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9b:01:44:41:87:11:66:2f:5e:ee:b8:bb:50:94:1f:28:97:ab:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=C98D3EE3F1CD9E3CFB4FA87FB37ADE8C83FABFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:07:79:cb:23:51:65:00:ff:b6:59:84:ca:
                    11:eb:e3:7f:77:6a:b1:54:9e:05:c3:95:67:85:66:
                    6d:3b:46:71:a1:c2:39:4b:35:bb:40:9a:a4:e9:91:
                    8d:c6:11:29:4a:1a:9c:81:a4:2e:0a:4b:54:1f:b9:
                    82:e0:0c:23:f8:39:c6:50:24:3c:d8:dc:bb:5a:36:
                    c3:a9:03:f9:c2:81:33:7c:78:72:9e:52:b4:69:69:
                    24:c8:93:6b:00:8c:66:a7:e0:2b:18:3e:37:10:72:
                    50:69:bb:13:66:da:06:1d:cc:b9:e7:a2:74:e0:dc:
                    b6:d9:d0:2d:0b:2d:e1:55:85:fb:08:0d:ec:e1:25:
                    ca:50:cf:24:33:72:2f:71:e2:f4:1d:09:46:26:b5:
                    01:44:08:fa:5f:37:13:03:d5:d7:d2:b7:a6:50:dc:
                    be:42:1f:89:45:01:14:fa:fb:a9:77:ff:e4:cc:ab:
                    d3:c2:84:f6:96:0d:a0:3d:d1:a2:3b:4d:7a:99:33:
                    26:8a:4c:bc:f0:b7:f2:48:8d:d4:e5:a2:88:85:da:
                    6f:aa:e4:32:a3:55:e8:58:1c:53:5a:8d:30:eb:2f:
                    f1:17:80:63:cc:fb:ea:69:11:8c:b1:0a:8d:9d:bf:
                    d5:cd:fc:0e:8d:13:97:6c:f2:1d:41:f0:b9:b0:3b:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:3E:E3:F1:CD:9E:3C:FB:4F:A8:7F:B3:7A:DE:8C:83:FA:BF:A5
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:5c:f0:01:88:9f:a7:c7:62:5a:42:8d:0c:ea:89:44:64:
         b7:cb:31:e4:44:10:02:d2:bd:57:e4:91:65:4d:c7:72:e6:68:
         57:89:ca:b6:95:bf:05:c8:48:99:54:25:4f:5d:74:72:19:c4:
         43:26:9e:ba:fc:dc:26:56:3c:14:b5:c6:49:91:bb:37:3b:21:
         17:83:75:eb:be:e6:88:b4:46:3f:ef:4d:0f:23:97:2a:b1:9e:
         91:89:85:48:13:93:d1:46:da:78:43:41:2c:7e:21:ae:c9:03:
         7a:f8:23:27:28:f0:ce:6e:b9:3d:c5:b7:c5:08:d7:2d:54:a0:
         aa:74:47:e8:91:b2:39:0c:94:8a:b2:2c:20:58:27:6e:3a:e6:
         fb:91:13:2e:45:65:b4:34:13:00:71:0f:4b:41:12:d0:06:b0:
         31:0b:ad:c1:2e:b7:e3:9e:87:05:ab:3f:0b:10:68:c7:d0:21:
         83:c6:0b:f4:e6:d7:52:d8:fd:14:1e:d4:12:f5:c7:9d:c9:e0:
         6d:dc:d2:92:84:b8:eb:a7:db:3d:ed:05:42:d7:df:6a:89:99:
         89:ff:b1:27:d4:54:42:32:eb:f0:bd:fe:6c:80:33:02:c7:8f:
         65:47:88:d5:a8:74:ba:32:b0:23:83:1e:34:2c:4e:50:1e:06:
         af:7d:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org