Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          2kmYAmenPltnbSj/VtzCQYJQVgqlVU538jnTsoaJzkM=
Subject key identifier:   8A:D9:00:4D:6B:AF:EA:F7:34:88:76:25:11:75:22:E2:06:AB:99:41
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       17934E1E0DF729C2F5FD9B84CD7B3DFF9F1AA736
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265379
IP address blocks:        168.194.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:93:4e:1e:0d:f7:29:c2:f5:fd:9b:84:cd:7b:3d:ff:9f:1a:a7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=8AD9004D6BAFEAF734887625117522E206AB9941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:bd:31:b5:69:4e:7f:b8:60:1b:48:f6:fa:
                    8d:c6:07:b9:97:71:b8:ea:c5:9f:01:bb:3a:23:e7:
                    f7:28:92:84:e5:ef:e7:c1:bb:d0:6a:d6:ff:d6:a2:
                    d0:88:67:a3:99:09:76:ae:2c:90:e7:2d:8b:06:92:
                    a8:51:e7:d0:e2:36:5f:b3:e8:86:d1:fb:55:e6:4b:
                    41:68:da:56:71:3d:e2:f2:dc:c3:67:56:6b:86:9f:
                    21:04:53:64:a9:3e:db:87:38:82:56:87:eb:62:60:
                    ee:a5:ae:d5:99:af:5a:4e:bf:e9:28:84:78:27:0d:
                    7c:83:5f:6c:71:bf:18:55:c8:11:33:9d:cf:a7:c2:
                    d5:b3:8c:6b:1f:dd:15:e7:ea:ce:8d:8e:3c:15:22:
                    41:df:21:b7:07:e9:19:28:22:46:79:c7:56:cf:40:
                    d2:33:79:fd:c7:50:ba:8c:ce:62:2d:fa:d7:1d:71:
                    d9:21:c3:b3:f5:2b:35:d8:69:d1:c6:db:35:25:7e:
                    d9:84:27:bf:c4:d9:45:4c:77:2a:2b:b0:71:ba:cc:
                    b0:78:dc:04:92:11:cc:e6:0e:96:d2:a4:07:f7:1e:
                    23:09:96:38:d4:82:52:a5:76:48:0d:f8:f5:07:04:
                    12:66:a1:8f:91:b5:51:f2:79:2a:58:7c:82:64:c9:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D9:00:4D:6B:AF:EA:F7:34:88:76:25:11:75:22:E2:06:AB:99:41
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:5d:2b:05:0d:58:bd:34:6e:e9:a4:d6:6d:c6:e4:04:50:
         28:85:f5:84:39:08:6b:49:18:5a:8e:ee:9f:de:4f:8c:ef:e8:
         16:6f:18:33:66:8b:80:24:38:92:39:b5:19:67:94:32:c6:5b:
         87:65:6d:6f:6b:ea:58:58:ac:45:e4:72:c0:65:88:19:50:22:
         dd:ae:50:5c:cb:fb:7c:05:97:f0:a4:fb:00:68:ef:9e:d6:1f:
         99:95:68:2e:36:27:4a:c1:7c:5d:05:49:76:37:2d:4d:fa:fa:
         00:85:22:d4:04:4d:65:89:9a:9d:1c:d2:d7:72:da:b0:5d:e0:
         b9:3a:f4:8b:33:3b:d2:2f:d8:9c:67:dc:a2:d7:3c:d8:48:67:
         ab:62:71:a8:8e:dc:8d:34:a4:d5:2d:47:ca:19:b8:27:14:46:
         8b:ef:69:e0:64:31:cb:9f:11:ea:db:4f:cc:ba:dd:3c:e8:ec:
         8f:11:5e:69:24:03:2a:c1:a6:e5:61:56:ce:5d:e6:1e:0a:92:
         bc:47:81:c4:bb:1b:9f:3d:e1:a0:02:c5:22:5e:6b:4b:a0:74:
         a3:59:af:37:fc:a0:0f:9c:e5:ee:03:57:ea:da:fb:39:76:e5:
         98:19:ce:17:b9:ec:f0:b9:7b:f3:f6:37:44:91:10:8b:bc:bc:
         7f:ea:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:25 2024 by rpki-client on console-fra.rpki-client.org