Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          kLG2bea2LdeHlf9VTtPKg3QtNnFo4lBmbHM/OENeB0Y=
Subject key identifier:   9C:8B:FC:8A:A4:E1:A7:E9:E8:58:81:C3:D1:57:4B:18:A9:0A:67:05
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       0E9D4434B7F532BEE38F56C1B6C07B1172D16D1E
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 17 Oct 2024 11:48:53 +0000
ROA not before:           Thu 17 Oct 2024 11:43:53 +0000
ROA not after:            Thu 16 Oct 2025 11:48:53 +0000
asID:                     265158
IP address blocks:        167.249.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9d:44:34:b7:f5:32:be:e3:8f:56:c1:b6:c0:7b:11:72:d1:6d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Oct 17 11:43:53 2024 GMT
            Not After : Oct 16 11:48:53 2025 GMT
        Subject: CN=9C8BFC8AA4E1A7E9E85881C3D1574B18A90A6705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:bd:e0:95:ba:00:0d:79:b1:41:4a:95:c5:
                    96:d5:97:0a:00:fb:22:63:38:f0:11:76:1c:8e:53:
                    4b:53:bd:8b:20:af:2c:f4:a2:e9:41:af:4d:7c:4b:
                    b5:9d:dd:db:f3:99:2f:e0:ee:e5:f5:3c:79:53:28:
                    f0:ef:15:00:64:75:22:5c:da:d6:56:5d:4f:c8:08:
                    70:f8:96:c0:24:07:86:69:95:3e:10:62:d7:ee:7c:
                    fe:53:99:dc:0d:6a:21:37:02:5d:35:7c:67:1f:bd:
                    2c:2a:bf:bb:21:d8:39:cf:a3:7a:5b:ee:d1:16:c0:
                    84:ce:1c:87:06:17:0e:d0:4d:77:ec:e1:a6:e8:de:
                    6b:0b:27:63:85:47:dd:e2:6c:12:02:91:3e:bb:61:
                    e6:9d:c6:37:d1:b0:9d:a1:f9:71:16:f2:64:66:f7:
                    b0:a8:91:4d:c1:dc:1c:e4:54:a8:c5:9e:d6:07:eb:
                    83:5b:97:4d:ad:07:e1:19:f2:b1:20:f9:e5:26:97:
                    34:36:3f:67:f2:86:af:06:3b:55:26:59:d3:3a:5c:
                    80:ed:13:0b:5b:c0:90:8e:18:c4:36:b7:f6:08:3b:
                    21:4d:7a:b5:71:fc:ad:d0:21:09:1f:b9:58:c8:03:
                    9a:03:e8:55:55:07:7f:f6:ce:a8:17:33:ef:35:8b:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8B:FC:8A:A4:E1:A7:E9:E8:58:81:C3:D1:57:4B:18:A9:0A:67:05
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:43:3f:c0:61:ca:eb:f2:8b:38:fd:75:c1:4f:52:bf:f3:
         2e:d7:6f:9e:e2:28:7b:30:64:45:f5:3c:ce:c4:73:f2:cf:71:
         63:13:58:d6:56:0c:9f:e5:1a:2d:60:98:72:cd:f4:84:bc:d5:
         db:64:21:9a:a4:0d:7f:dc:43:81:99:8e:a0:39:06:98:6a:b7:
         e6:64:b9:28:a0:31:53:0f:83:c2:4d:e9:1e:d9:17:48:93:7d:
         5f:eb:c7:5a:81:b2:39:e2:c7:44:67:c5:13:c7:f3:60:44:ea:
         2f:7f:a4:4f:c1:30:e1:8d:a5:09:a1:25:9d:e3:98:89:54:00:
         62:b8:ae:55:5f:b7:23:78:f8:6a:93:58:94:e7:a4:39:d6:c1:
         41:d7:6c:82:7f:45:f8:4d:37:de:1e:58:bd:d9:b4:cf:a0:56:
         e4:dc:ca:52:ee:f5:1b:58:1f:a8:69:4d:e6:a3:7a:44:8c:8d:
         1c:20:c6:b6:36:d1:5f:0c:80:6c:4e:ba:a0:4b:41:cf:c1:c0:
         20:c2:ed:69:19:cc:7c:a4:cb:48:a9:e9:91:14:96:21:9d:4b:
         a9:9c:3a:74:b5:6c:45:30:15:ee:97:da:4f:f5:b2:fb:d0:46:
         f2:01:d0:d0:cf:73:d5:02:f3:94:af:37:60:78:c7:b7:77:7f:
         5c:e1:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org