Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa
File:                     3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier:          o4mUJLSyQrkvYoGrdldQIcilLNb+4OQV/MtXd+nPSOA=
Subject key identifier:   34:B3:94:88:4E:EB:5A:DA:CC:AE:AA:78:90:FB:49:9F:1D:C0:78:BA
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       0CEC8AB4A32A9B00A921B11136DD0467022DC591
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:26 +0000
ROA not before:           Thu 04 Apr 2024 03:47:26 +0000
ROA not after:            Thu 03 Apr 2025 03:52:26 +0000
asID:                     265181
IP address blocks:        167.249.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:8a:b4:a3:2a:9b:00:a9:21:b1:11:36:dd:04:67:02:2d:c5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:26 2024 GMT
            Not After : Apr  3 03:52:26 2025 GMT
        Subject: CN=34B394884EEB5ADACCAEAA7890FB499F1DC078BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:e5:6b:5b:ed:ac:ca:3e:26:2b:c7:4e:c5:
                    76:2c:2e:17:97:e3:f1:b9:e1:8d:d2:e4:5c:40:8f:
                    7b:65:f4:b9:77:4e:4a:d9:73:65:a7:11:39:37:a0:
                    df:ff:31:52:bb:57:dd:f7:27:1f:99:07:02:44:0d:
                    3f:7c:e8:3c:98:70:df:4d:3e:4d:ef:ef:30:d2:82:
                    51:f3:ec:2f:b1:3e:76:54:f7:2c:7b:c7:32:9e:4d:
                    23:92:16:ed:1c:62:69:d2:95:53:d0:ba:2c:5a:98:
                    50:d5:fa:27:58:38:2a:37:63:45:36:35:e9:e4:92:
                    bc:2a:1d:d7:4b:f4:26:cf:2a:e3:d3:8d:58:9c:15:
                    4a:8f:8e:d0:52:15:86:bc:40:44:43:e8:e0:22:10:
                    04:00:61:e9:e4:f5:d7:e0:ff:fd:1f:6d:7c:68:ef:
                    52:cf:57:a4:14:de:d3:10:1d:6f:c1:ef:df:4f:eb:
                    6c:86:f6:0e:59:58:f7:d0:81:a4:3c:1a:7a:07:bc:
                    a7:05:d9:bd:72:80:be:2a:f7:2b:cc:25:f4:1e:fd:
                    dd:92:82:b4:25:7b:fa:16:01:06:6c:70:f4:d7:35:
                    7a:2a:99:e4:52:0a:35:40:81:bd:8d:bf:e3:cc:1b:
                    84:3e:a1:91:96:ab:46:3d:a5:62:37:2b:f7:ce:35:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:94:88:4E:EB:5A:DA:CC:AE:AA:78:90:FB:49:9F:1D:C0:78:BA
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:39:b6:93:cb:93:94:fb:1a:e9:6c:5c:ed:08:f3:89:51:
         6d:11:44:6c:72:eb:20:43:66:96:f1:61:82:cf:c7:de:08:7f:
         de:29:c4:da:49:e1:7c:72:a9:8d:e3:da:88:df:9c:2d:28:b1:
         4a:9e:e7:9d:03:37:50:84:6e:f9:22:f2:22:65:92:b9:fa:61:
         d8:c4:a1:01:6e:a0:59:a8:96:02:41:60:c2:c7:84:0e:e0:09:
         12:3e:c2:2e:52:51:cb:57:73:ef:ee:3c:2a:34:2d:7a:e4:a0:
         dc:92:6c:e5:5e:57:9f:88:35:ae:72:0c:10:2e:8a:cc:58:3c:
         8d:49:f9:45:9a:05:a5:54:04:e0:3b:99:c3:28:4a:fb:a9:b8:
         8d:be:03:1b:94:c3:b7:eb:9b:9f:91:20:6c:a1:00:dc:3d:6b:
         8c:07:47:fe:3c:12:07:ce:e2:d9:84:78:50:9f:96:ce:a8:30:
         fb:6a:56:c3:ec:7a:9b:fb:2c:3c:5f:96:40:59:cf:36:9d:27:
         da:34:8a:1a:44:38:f4:fb:76:a3:05:e9:1c:06:3b:7d:72:5e:
         e4:0c:18:63:77:17:3d:07:bd:be:be:0a:8c:e7:b0:5e:4b:b5:
         20:1d:fb:6a:83:60:29:ed:06:75:d4:ed:af:a9:1a:9c:46:43:
         33:8a:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:23 2024 by rpki-client on console-fra.rpki-client.org