Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa
File:                     3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          PbAAwt1xwf/VX4PczqiIFKop14bM7/Oq8MNdLUPKY3w=
Subject key identifier:   5D:81:FA:9F:23:9B:01:84:09:9B:9D:8C:85:24:A1:0F:08:DE:AA:41
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       54B2FD38CD659D3E848D199B322540C18BFB97AF
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa
Signing time:             Thu 17 Oct 2024 11:48:53 +0000
ROA not before:           Thu 17 Oct 2024 11:43:53 +0000
ROA not after:            Thu 16 Oct 2025 11:48:53 +0000
asID:                     265158
IP address blocks:        167.249.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b2:fd:38:cd:65:9d:3e:84:8d:19:9b:32:25:40:c1:8b:fb:97:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Oct 17 11:43:53 2024 GMT
            Not After : Oct 16 11:48:53 2025 GMT
        Subject: CN=5D81FA9F239B0184099B9D8C8524A10F08DEAA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:7c:80:74:79:63:ac:2e:98:f7:58:4c:cf:
                    2c:fb:52:1f:1a:9d:6b:f8:41:9a:79:3d:91:8f:08:
                    ab:c4:30:3a:59:d7:2e:8a:30:66:2e:b0:ee:4a:93:
                    9b:b8:f0:77:5d:40:9a:ff:35:8c:1e:ec:cb:55:4e:
                    9e:c6:b2:1a:f8:74:21:26:41:94:f1:a6:a5:08:d5:
                    87:5e:77:96:2d:b1:87:81:db:6a:d7:2a:36:9d:ab:
                    b2:94:f4:fc:18:5c:f3:da:2a:a5:c3:66:5b:62:7c:
                    e2:1f:7e:f2:50:5a:1a:47:dd:63:03:5a:1f:8f:01:
                    34:2d:8a:c9:49:11:08:4f:46:91:88:80:8a:04:e0:
                    ab:34:3e:df:52:65:f7:3e:80:06:23:4c:44:b8:22:
                    d5:bc:94:21:e3:aa:c8:1c:b4:c6:fa:b0:ef:41:23:
                    9c:0a:f4:f2:e7:45:63:0a:58:5e:cf:2c:2d:52:6e:
                    fc:54:45:f3:13:26:1a:21:bd:af:c3:db:b4:dc:ee:
                    68:ed:14:74:56:34:21:e6:35:c5:81:24:06:b4:c6:
                    db:88:64:f1:88:1a:3e:7a:ad:76:35:30:83:53:a4:
                    e0:ac:a3:92:50:83:60:df:4e:21:83:0c:fd:27:e6:
                    a0:8c:7a:da:89:94:de:be:3d:e6:03:61:af:23:dd:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:FA:9F:23:9B:01:84:09:9B:9D:8C:85:24:A1:0F:08:DE:AA:41
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:1e:a8:cd:64:fa:84:60:89:b1:5d:a6:b4:82:fa:e0:9b:
         f6:93:cd:cd:1d:65:da:39:a6:04:f9:25:bb:f3:0f:d8:0b:47:
         6c:4c:be:90:2f:a9:da:e2:d0:1a:fb:aa:37:50:88:d4:9a:35:
         a1:87:83:24:91:cb:78:ee:a8:29:42:7f:81:22:5e:49:df:5d:
         8a:2b:33:9e:33:d3:48:38:ed:b7:25:40:b7:e9:37:53:8b:7a:
         d4:62:32:03:5e:92:bc:77:c8:59:e2:df:ce:be:8e:4d:ce:89:
         f6:50:76:82:01:2a:5d:61:82:d6:e4:de:f1:61:0d:60:a4:66:
         42:f1:35:45:f3:e1:1e:00:5c:43:a8:df:fb:95:43:bc:c6:56:
         45:ad:a1:21:55:6f:b4:ad:aa:75:92:9f:5f:ca:12:92:73:32:
         62:68:5f:f8:aa:c5:d1:2a:eb:5b:6b:e7:a5:e7:b8:bb:cd:f6:
         8c:e0:05:ca:ca:c3:65:cf:99:9b:cb:52:aa:31:a0:b8:42:19:
         03:e1:59:fb:2f:a4:f8:7e:53:60:1a:09:1e:b4:bf:4e:76:75:
         d4:7b:cd:4a:df:1d:48:14:63:7a:ab:25:76:06:fb:ff:27:2f:
         c3:e7:77:d9:76:74:5e:53:ee:85:6d:82:f7:ea:b1:d0:2a:9c:
         46:20:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org