Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          Ti8z2b7bbE8kaazYaZlOGnr2YlHziopFHnodTxWfWRc=
Subject key identifier:   D6:ED:91:12:70:C1:C5:F0:44:1A:36:75:22:6C:55:2D:33:34:8C:CA
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       240B86420C57D6FF627ADBB8B368C80968BC9E34
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265379
IP address blocks:        168.194.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0b:86:42:0c:57:d6:ff:62:7a:db:b8:b3:68:c8:09:68:bc:9e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=D6ED911270C1C5F0441A3675226C552D33348CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:e7:f1:61:aa:78:fc:3c:ae:30:20:86:04:
                    b3:b4:a2:d1:32:2f:0a:27:e3:c7:5e:4b:2f:22:c3:
                    02:f0:05:1d:46:7a:bb:05:a9:8f:5b:3f:78:ce:4c:
                    64:20:54:33:98:12:a0:5b:57:5c:74:66:1b:64:cc:
                    e6:9a:af:06:9d:65:51:f5:d7:0b:b0:6e:25:94:ba:
                    43:85:15:39:99:d6:d8:51:95:f7:a6:d3:89:6b:4d:
                    4b:40:aa:7e:e2:72:f3:fd:99:29:ad:be:8e:f4:63:
                    73:3c:ea:8c:ce:a4:53:62:0e:82:6f:a4:20:e9:09:
                    e0:1b:4b:b2:05:91:89:ab:d0:3a:42:b1:5d:ba:b1:
                    71:a7:22:81:76:8f:20:7a:0f:18:98:00:0d:0f:05:
                    27:85:8a:33:1e:9f:24:56:07:df:8d:2e:b7:d6:61:
                    43:f6:b7:b5:b5:2b:96:e3:23:21:a0:91:ce:a7:97:
                    52:2d:2d:73:37:f5:fa:43:73:70:97:ee:e4:24:86:
                    21:b9:aa:b8:0e:c4:0b:a7:ec:d6:02:13:13:c5:0a:
                    a2:b5:08:85:ef:c4:f9:12:0c:45:47:44:2c:86:9d:
                    07:75:d7:25:66:fa:c1:3f:8d:c4:52:be:0a:2c:e9:
                    8d:f6:b5:e2:b1:fe:28:c1:f2:08:27:9a:7b:9c:b7:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:ED:91:12:70:C1:C5:F0:44:1A:36:75:22:6C:55:2D:33:34:8C:CA
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:e8:a1:63:27:46:13:8e:2b:a0:8b:f2:9b:d0:ad:06:ca:
         cb:ef:a6:01:3f:5a:8e:2e:6c:f4:2d:4a:6f:3a:52:70:03:ab:
         55:2f:77:de:81:16:5e:17:6c:f6:ab:5a:1e:70:73:06:bc:33:
         a8:ae:a9:be:04:2c:5b:f1:c4:32:56:c6:dd:e1:38:ef:71:6d:
         95:86:99:18:18:eb:d0:a0:c3:21:f7:85:58:b2:5e:64:45:2d:
         cc:aa:3d:95:23:8d:1c:72:52:b3:0f:0e:1e:cd:04:04:19:b8:
         f0:a4:aa:6b:8d:54:b0:12:4e:d3:be:8f:d3:69:e1:84:19:28:
         a9:69:a1:31:0a:b7:27:74:58:34:f1:91:7d:dd:07:17:e1:3d:
         01:e3:96:70:f7:eb:21:e6:af:ea:35:65:76:ec:b1:dc:bc:6b:
         93:7e:fa:0b:82:6a:5b:11:f9:ef:af:50:63:ca:27:2c:b5:4e:
         89:44:d7:b1:2c:fc:84:70:3b:59:74:c5:b7:d3:1f:cd:5b:5a:
         01:e2:48:63:5b:1b:49:12:06:ed:90:1b:44:62:f2:72:a9:9e:
         76:4a:6b:bb:18:4a:57:70:e2:e7:21:02:20:7b:22:7d:1a:b1:
         e1:ba:ff:b2:5d:26:37:27:23:4d:83:d3:79:32:c5:0d:2b:89:
         75:3a:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:13 2024 by rpki-client on console-ams.rpki-client.org