Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          6MITVM+axyOvhDmuZ2Ha1T8aqZ0/PlIthgYBgAfnFco=
Subject key identifier:   87:E6:59:E6:60:58:BF:2A:7B:49:62:8E:EF:D1:08:3E:9A:D6:E5:AC
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       697757950FC57353B5B2FD4663ED0348BBD17683
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa
Signing time:             Thu 17 Oct 2024 11:48:53 +0000
ROA not before:           Thu 17 Oct 2024 11:43:53 +0000
ROA not after:            Thu 16 Oct 2025 11:48:53 +0000
asID:                     265158
IP address blocks:        167.249.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:77:57:95:0f:c5:73:53:b5:b2:fd:46:63:ed:03:48:bb:d1:76:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Oct 17 11:43:53 2024 GMT
            Not After : Oct 16 11:48:53 2025 GMT
        Subject: CN=87E659E66058BF2A7B49628EEFD1083E9AD6E5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:df:c5:86:d8:c6:bf:5a:95:11:50:a4:3c:b5:
                    34:b1:fe:0e:20:83:32:ba:39:72:76:54:53:02:c6:
                    d1:93:68:10:28:b9:94:8f:4f:8a:6d:f0:95:60:7a:
                    5d:91:63:91:8c:7e:06:7d:c9:09:dc:b3:73:00:60:
                    4a:8c:25:cd:a2:77:3f:aa:c7:2f:01:5e:b5:ae:5f:
                    92:8a:ca:70:20:db:5c:b4:ba:86:15:d9:d9:d1:26:
                    bf:ed:83:8d:ff:48:b5:66:32:c1:94:a7:6d:07:8a:
                    90:c7:ee:d8:37:cd:6e:ff:2c:73:c0:5d:bf:d8:3e:
                    6b:ec:c8:25:77:6d:47:47:b8:71:aa:71:40:0e:78:
                    6c:b8:9b:27:f3:68:56:62:dc:1c:72:ce:f1:19:d9:
                    87:08:9e:14:eb:2c:1b:4c:aa:8c:9f:da:6d:fa:a6:
                    2e:23:0f:3f:85:37:dc:d6:e0:72:65:2b:03:3c:5a:
                    e0:17:90:8e:9a:dc:2e:4d:de:87:9e:ed:15:18:1a:
                    1d:1d:b5:6f:c0:21:d8:a5:58:85:da:b7:b2:9c:ec:
                    e4:f5:b5:5f:ac:6a:68:64:c9:2a:70:2d:df:34:f6:
                    7b:63:ea:c7:d2:dd:51:59:6f:a6:41:07:30:60:9e:
                    f0:bf:8d:75:d7:65:c0:60:30:c7:a0:56:2f:6d:1f:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E6:59:E6:60:58:BF:2A:7B:49:62:8E:EF:D1:08:3E:9A:D6:E5:AC
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:3a:e3:47:98:cf:f1:a0:1b:1e:8d:28:16:e5:c2:83:fb:
         a2:f1:a5:f8:84:49:e0:d3:1e:f0:98:27:68:a2:34:12:2a:b8:
         af:b6:a1:c8:a5:b0:64:11:8c:77:fb:7f:b7:76:2a:83:5d:2c:
         07:71:a8:29:dd:74:36:7e:89:73:3e:4c:24:4f:24:95:39:83:
         b7:b8:49:4c:6f:a1:1a:9e:1f:8a:ec:c2:01:87:c4:ec:dc:94:
         cb:1e:a0:73:83:ae:be:23:56:ae:cb:24:00:ba:d2:e4:80:61:
         ac:9e:da:9f:39:5e:5d:45:1f:19:b5:fc:a6:7a:2f:5e:11:90:
         04:ec:07:c4:03:e4:5a:8e:02:ed:2b:72:65:a6:de:43:1f:ec:
         69:dd:94:70:54:79:2c:ae:da:d5:91:15:dd:64:5d:b8:af:c3:
         9a:7f:79:73:ad:79:46:99:37:a9:f8:35:9e:e3:0b:50:fe:21:
         41:c0:a2:a2:ea:f9:31:9c:aa:ca:4d:84:05:09:3e:fd:93:3a:
         ee:a8:cb:c7:80:7f:d2:8d:3b:5c:71:f7:96:9e:c4:40:61:c9:
         36:31:52:3c:be:74:24:31:40:1c:56:3a:f9:52:97:98:39:f3:
         88:a2:00:7f:10:e2:31:a3:45:9e:c0:43:9f:ea:ff:5b:71:11:
         15:27:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:31 2025 by rpki-client