Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa
File:                     3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (raw, json)
Hash identifier:          j3PKGNYNgYY1JGo/qiaHLypLPN1zGAyCJyi17uTbsy8=
Subject key identifier:   A3:F4:73:81:F4:59:EC:4C:78:94:8B:D2:19:D9:AC:CF:6D:9D:68:EA
Certificate issuer:       /CN=B2929E5492924B465205088A6A13DA79D2244CF7
Certificate serial:       4A7487EFB4EFACA26EE8E47D527DBEFB9A80A36C
Authority key identifier: B2:92:9E:54:92:92:4B:46:52:05:08:8A:6A:13:DA:79:D2:24:4C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2929E5492924B465205088A6A13DA79D2244CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa
Signing time:             Thu 02 May 2024 18:55:26 +0000
ROA not before:           Thu 02 May 2024 18:50:26 +0000
ROA not after:            Thu 01 May 2025 18:55:26 +0000
asID:                     265239
IP address blocks:        167.250.252.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/B2929E5492924B465205088A6A13DA79D2244CF7.crl
                          rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/B2929E5492924B465205088A6A13DA79D2244CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2929E5492924B465205088A6A13DA79D2244CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:74:87:ef:b4:ef:ac:a2:6e:e8:e4:7d:52:7d:be:fb:9a:80:a3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2929E5492924B465205088A6A13DA79D2244CF7
        Validity
            Not Before: May  2 18:50:26 2024 GMT
            Not After : May  1 18:55:26 2025 GMT
        Subject: CN=A3F47381F459EC4C78948BD219D9ACCF6D9D68EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:12:f4:4e:f4:5a:0e:3d:67:c9:bc:6f:76:
                    b9:26:63:ed:e1:e5:3b:86:24:49:77:2d:eb:90:ba:
                    74:5d:f4:3f:2f:c4:06:a5:6d:c8:dc:08:e4:d1:2c:
                    05:72:ab:47:a3:c9:58:c4:55:16:4c:93:27:64:c0:
                    f8:1e:f5:67:0c:15:88:4e:2b:d8:70:b6:4c:9b:96:
                    11:22:f4:15:e5:80:89:22:ba:6d:86:4d:31:1e:0f:
                    b9:38:59:70:2a:f0:4b:e2:03:98:a9:a0:02:f1:81:
                    bf:9f:2f:44:6a:3a:ed:24:a5:8a:03:bd:01:30:f4:
                    d7:8d:46:f8:32:2d:cf:bd:26:c0:05:3d:20:bb:29:
                    0e:09:29:7f:68:7c:37:9e:2d:a2:4e:4a:1d:1f:fe:
                    ce:d1:58:4d:30:a1:f5:ff:d8:14:eb:8f:73:1a:79:
                    dd:b8:3b:ef:8a:b2:a4:e8:8b:c3:12:93:98:ec:98:
                    1c:fc:d3:2c:3c:95:1e:03:ea:d0:02:68:0e:eb:f9:
                    0e:27:c6:ab:33:11:c7:dc:bf:32:25:d4:46:b2:6d:
                    08:e7:c7:a1:f6:67:ab:bf:6a:e6:a0:73:8e:14:eb:
                    e8:72:e1:ae:c7:c9:f4:14:85:d8:08:cb:26:9e:83:
                    89:92:33:51:dc:f9:47:7b:1c:d8:ab:3c:fc:23:c1:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F4:73:81:F4:59:EC:4C:78:94:8B:D2:19:D9:AC:CF:6D:9D:68:EA
            X509v3 Authority Key Identifier:
                keyid:B2:92:9E:54:92:92:4B:46:52:05:08:8A:6A:13:DA:79:D2:24:4C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/B2929E5492924B465205088A6A13DA79D2244CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2929E5492924B465205088A6A13DA79D2244CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:cd:72:da:2b:4e:3a:34:07:e9:9e:81:f6:4b:d5:ff:c4:90:
         f8:c7:e9:69:3f:2c:cb:46:45:1f:af:3d:21:17:46:ce:d1:6e:
         f7:7e:b6:95:f8:75:b1:87:24:a0:f9:61:d1:9d:88:3c:aa:50:
         0b:d4:90:5e:96:ac:d2:08:83:93:97:6f:75:1a:6b:46:29:4d:
         73:61:c9:23:2a:ad:89:59:19:5b:da:e1:09:e3:e9:0f:09:0a:
         91:19:32:3b:df:87:4e:0c:cc:40:b5:b4:68:7d:b3:a1:ff:0b:
         2e:f5:de:12:c1:f5:05:27:36:1b:c3:46:cc:47:3b:f4:12:a6:
         ea:eb:7f:c8:11:dc:df:b0:83:71:db:5d:c8:8a:32:00:1a:f3:
         30:9f:93:22:e2:21:32:51:9c:c6:d8:25:3f:fa:b0:b9:59:5f:
         ca:dd:e5:09:bf:c7:64:c3:d3:ce:00:23:99:8b:e9:23:51:af:
         5c:52:98:76:4c:c9:d1:84:94:8c:6d:de:8b:7d:6a:e2:72:f9:
         b7:d2:e7:31:fd:d7:bf:ed:bd:03:18:20:87:20:f8:42:7b:33:
         6f:76:3c:27:a8:d9:e8:04:e3:44:47:d6:de:ab:24:dc:6b:b3:
         3b:81:0e:0e:02:aa:63:27:77:fe:e8:39:2f:dd:5f:c8:e0:77:
         5b:bc:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 16:31:10 2024 by rpki-client on console-fra.rpki-client.org