Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          +iDEg3xOwl42eoyO9HBeHS+4d+zvcOnaIsHXsyfO2Xc=
Subject key identifier:   EC:9B:D4:EB:63:FF:B7:3C:C8:8A:ED:B7:E3:ED:BF:5B:43:1E:E7:B9
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       3978F24D8192E80A46A8FA862B2D7D19CE6F8AB4
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 17 Oct 2024 11:48:53 +0000
ROA not before:           Thu 17 Oct 2024 11:43:53 +0000
ROA not after:            Thu 16 Oct 2025 11:48:53 +0000
asID:                     265158
IP address blocks:        167.249.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:78:f2:4d:81:92:e8:0a:46:a8:fa:86:2b:2d:7d:19:ce:6f:8a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Oct 17 11:43:53 2024 GMT
            Not After : Oct 16 11:48:53 2025 GMT
        Subject: CN=EC9BD4EB63FFB73CC88AEDB7E3EDBF5B431EE7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:83:88:6c:da:e1:8e:8a:80:e9:63:8b:bf:
                    6a:a2:79:4d:41:0d:d0:29:ab:7e:69:9b:1b:ce:b5:
                    38:cb:9b:82:02:f3:db:1d:67:b9:26:cc:69:cc:09:
                    5c:2f:d3:d5:6e:da:ba:83:24:e6:e4:c6:45:15:e3:
                    ad:fd:5d:30:4f:13:44:bd:52:7c:4d:d4:67:75:95:
                    e0:ef:7b:fe:bb:a5:6e:35:e7:b7:42:7b:a2:3a:a5:
                    44:d5:65:8e:ea:09:14:b9:46:a9:c6:11:85:7c:ab:
                    0b:94:32:a4:93:1e:75:6d:a8:57:0f:11:1d:36:13:
                    6b:3e:86:49:1e:82:81:66:9e:8d:be:cb:d8:0b:65:
                    52:fe:ff:08:1f:45:50:c9:58:44:60:13:17:b9:03:
                    f7:f8:e6:62:06:33:36:b8:9f:03:b3:1e:14:c8:61:
                    57:48:42:9f:e8:de:0a:b6:c3:8d:dd:df:15:d2:c2:
                    b9:db:f0:31:aa:a8:4c:93:ae:7d:dd:28:5d:a9:ac:
                    1b:05:f9:bc:99:39:b0:47:dd:67:17:75:73:5e:8c:
                    fa:ce:3f:ee:13:05:dc:f4:a7:c5:ee:35:d5:74:92:
                    86:05:6e:a2:ff:04:86:c0:7f:dc:31:3b:b2:d3:49:
                    60:97:c7:d7:59:8c:60:47:99:05:41:d6:3b:ab:17:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9B:D4:EB:63:FF:B7:3C:C8:8A:ED:B7:E3:ED:BF:5B:43:1E:E7:B9
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:fd:cb:6b:9d:43:a3:42:30:85:68:01:58:4d:53:f9:c7:
         d4:44:7e:ec:8f:96:67:99:70:21:95:3c:54:ee:87:90:ea:9d:
         13:90:44:a3:0b:86:6b:12:22:44:39:a0:dc:8c:57:b9:fa:7b:
         1f:aa:ad:66:d2:d4:79:e1:00:f4:45:0d:89:fa:7f:6e:d2:d9:
         a0:b5:44:03:20:27:4f:ee:85:c5:89:98:ec:2b:1b:2e:c6:94:
         11:26:70:53:d2:98:a4:7a:39:9a:65:89:a0:ba:33:57:44:a8:
         71:ae:7b:32:3c:16:5a:60:ac:81:e3:32:13:14:10:cc:63:86:
         c6:ea:19:e3:be:32:43:25:71:9e:e3:82:b3:37:d9:96:f5:d3:
         b3:6c:67:47:3d:e1:5a:e1:2f:00:72:93:d5:e9:24:3c:a5:17:
         fa:63:f8:b6:69:e3:36:1a:e7:8e:f4:3c:92:82:b0:97:3d:4c:
         40:4d:52:89:f2:ea:4c:7a:bb:4c:b8:f7:d3:30:5d:2f:f2:2a:
         8c:5a:2d:d7:8e:fb:f7:93:e0:34:dd:24:a9:aa:c0:ad:62:4f:
         d7:3a:9e:ee:d4:f5:3f:5a:96:be:38:84:73:ae:1c:26:5b:3c:
         52:9f:5b:07:72:5d:0d:e7:49:09:db:d8:f6:a0:25:3b:62:39:
         04:fe:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:39 2024 by rpki-client on console-fra.rpki-client.org