Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa (raw, json)
Hash identifier:          ep2KTilm/mmzijZEEbhY4KRDbA+vKlKbN5tGF0H0f8s=
Subject key identifier:   84:B6:C8:F9:80:42:B4:3C:60:54:F2:B8:B9:0F:E5:6F:62:48:B8:36
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       46B6926BE2FC0B42E62A0A9345E131AEC5C37FFF
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa
Signing time:             Thu 17 Oct 2024 11:48:54 +0000
ROA not before:           Thu 17 Oct 2024 11:43:54 +0000
ROA not after:            Thu 16 Oct 2025 11:48:54 +0000
asID:                     265158
IP address blocks:        167.249.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b6:92:6b:e2:fc:0b:42:e6:2a:0a:93:45:e1:31:ae:c5:c3:7f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Oct 17 11:43:54 2024 GMT
            Not After : Oct 16 11:48:54 2025 GMT
        Subject: CN=84B6C8F98042B43C6054F2B8B90FE56F6248B836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:36:05:77:4c:31:d1:fb:32:50:00:e7:c2:
                    d5:7b:03:6a:d5:7c:8f:ea:e3:5c:4c:32:e7:38:e8:
                    bd:6b:3f:4d:d7:32:4a:c0:d4:01:1a:24:e2:59:0f:
                    8f:81:8c:f3:88:6a:c4:2b:c2:97:21:b9:9b:a1:e3:
                    bf:69:80:35:56:08:c6:f4:6f:28:4c:8d:c7:e0:e6:
                    0e:1b:b5:21:bf:81:eb:7f:9a:a5:7c:69:47:cf:c8:
                    79:73:3b:29:cb:04:59:96:cd:2c:af:28:c7:c1:81:
                    67:94:97:eb:f0:0f:64:55:30:fd:47:04:fd:f5:63:
                    07:91:1c:5b:f1:6b:0d:3d:f3:da:46:97:e4:b8:e2:
                    c0:e2:4f:9a:8e:c1:6a:d2:47:17:b3:95:74:61:60:
                    bc:3d:78:49:67:9f:88:3c:3d:f2:14:cd:f0:b7:c7:
                    a6:ff:09:a5:5a:20:1a:46:01:de:ea:5b:35:aa:dd:
                    0b:f3:2e:e5:87:8d:15:b6:e7:99:21:42:0c:59:1a:
                    74:a0:c8:37:37:d6:7f:c4:90:83:6b:95:8b:98:83:
                    bc:35:a5:d0:28:ba:58:da:97:41:37:81:43:1e:69:
                    ae:32:7d:b6:fa:d8:b1:f8:fd:9f:28:2a:a0:3b:62:
                    fb:e2:91:f9:ce:1d:9d:0e:3c:f0:46:97:f9:1d:60:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B6:C8:F9:80:42:B4:3C:60:54:F2:B8:B9:0F:E5:6F:62:48:B8:36
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:29:ce:26:d5:80:56:a5:98:bc:96:23:35:68:e4:90:fe:34:
         0e:db:3e:5e:26:d7:31:e2:0a:ac:5a:73:3c:2b:52:16:7f:e9:
         60:f6:04:57:3a:1c:1b:68:50:18:91:f5:b1:67:d6:4a:3d:7e:
         3d:9d:13:c7:11:4d:0b:7f:85:6d:db:ab:54:c2:e0:f1:26:16:
         0d:a6:48:20:65:14:0d:ae:42:af:32:42:3f:6b:b8:f5:41:45:
         9d:7d:5a:fc:e7:7b:ba:1e:44:5b:0c:69:13:ca:9d:ab:8e:96:
         03:3a:08:26:6b:b5:3c:92:6d:88:57:fe:13:84:2a:f0:2c:b3:
         5b:f8:50:96:8d:c2:78:a9:9c:2b:3f:35:1f:c9:06:f2:11:01:
         6b:90:1b:e1:62:9b:1c:a6:6d:c7:0d:16:e0:7c:06:fd:b4:94:
         d3:ff:3d:42:4c:e8:62:e7:7a:80:7c:54:fe:2e:da:58:84:da:
         66:76:22:e4:f0:c6:1e:63:f9:e5:a8:6b:58:a5:8f:36:16:44:
         b2:87:d0:dd:1d:32:81:32:60:ba:27:a2:ab:fa:c4:12:2d:c4:
         7e:21:bb:6a:73:98:d0:c5:c0:e2:3a:c6:8e:f9:1a:ad:20:55:
         89:53:f7:ed:b1:80:15:69:88:5f:4e:95:e2:7e:04:e0:88:6e:
         26:15:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org