Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa
File:                     3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          khhZiAqdeanCOpfHANmyAnDxa5cJxEjoYRTx/nCpfQI=
Subject key identifier:   E4:B8:9A:26:A1:A5:5F:D2:46:0A:45:DD:E8:20:31:60:97:3B:FC:2C
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       6088E66987F676D9B1E8796641B14A50FAC0533F
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:23 +0000
ROA not before:           Thu 04 Apr 2024 03:47:23 +0000
ROA not after:            Thu 03 Apr 2025 03:52:23 +0000
asID:                     265181
IP address blocks:        167.249.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:88:e6:69:87:f6:76:d9:b1:e8:79:66:41:b1:4a:50:fa:c0:53:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:23 2024 GMT
            Not After : Apr  3 03:52:23 2025 GMT
        Subject: CN=E4B89A26A1A55FD2460A45DDE8203160973BFC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:35:87:74:53:89:5a:16:55:41:11:57:f3:
                    83:93:f7:f8:10:64:cf:c2:74:9e:89:82:b7:cd:0e:
                    2e:f8:26:88:4f:82:64:66:90:4d:70:11:f1:51:15:
                    ad:b3:ee:2a:a6:18:a3:81:64:78:6a:bd:41:8c:9e:
                    47:8b:1d:49:d6:42:ad:05:ae:d9:ec:11:2c:8a:79:
                    8f:14:c9:e5:af:71:83:dd:fa:dc:bc:ff:e4:df:5d:
                    4b:cb:f7:20:ae:2b:63:0b:01:b1:3a:7a:ef:79:45:
                    4c:15:ad:89:01:25:f2:87:97:33:16:19:b5:b2:2a:
                    74:19:42:a8:0d:c3:50:15:49:3f:d7:28:48:45:06:
                    69:6b:91:0a:a7:36:b0:93:4e:b4:36:6b:30:2f:e7:
                    03:e5:2e:20:e8:e1:72:7b:ab:26:1b:d5:1b:d0:3b:
                    25:64:74:b0:f1:24:84:d7:25:7b:f7:03:57:ef:b8:
                    c5:a4:d2:ef:7c:a8:bf:10:f4:ee:ec:0e:10:40:0d:
                    2b:fb:3b:cd:bf:5f:93:0f:cd:5f:c3:ae:26:1c:93:
                    b8:f9:19:16:5b:43:68:d9:98:16:c5:29:69:c0:27:
                    c6:3b:2a:ad:c1:19:b8:7d:63:e0:6f:61:b9:3a:51:
                    a9:d1:a0:e9:c5:8f:0c:14:09:d7:6b:78:df:08:b7:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:9A:26:A1:A5:5F:D2:46:0A:45:DD:E8:20:31:60:97:3B:FC:2C
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:8c:57:05:59:ce:65:86:14:c4:7b:70:3d:46:2e:e7:90:d6:
         04:f5:a1:11:51:68:69:a1:d6:78:7a:6b:e2:be:f3:79:47:cb:
         ba:5c:3e:fc:52:49:bd:f8:3d:83:1c:e9:6c:1a:a6:e4:d1:6b:
         ed:1f:23:2a:ae:fc:e5:10:af:1f:cf:1c:6c:3b:a6:f6:4e:9b:
         a0:96:8e:b5:55:ca:d4:e0:a4:bd:dd:9b:b4:d1:e8:fb:ae:5a:
         ed:b3:0c:db:9d:08:76:ae:e5:a3:6e:aa:2f:70:14:83:44:72:
         f7:ce:6e:82:dd:85:1b:43:03:d2:eb:05:2f:a2:64:96:bd:63:
         c3:44:f3:2d:23:66:6f:4c:7b:35:9a:91:53:de:b4:15:05:66:
         83:da:af:8e:d6:02:71:a2:91:d2:cf:89:c3:33:db:13:74:8d:
         d5:6d:99:35:3f:a5:af:4f:bc:7e:89:09:e0:a8:bd:19:4a:69:
         0a:db:0a:b5:71:fe:1e:11:d8:82:d0:18:0f:d0:32:2f:73:6f:
         0b:c9:e9:a2:58:b5:58:e7:a6:43:f1:ea:82:06:ab:ea:b4:6b:
         6e:0d:46:e1:9f:ba:ce:ee:7b:33:96:c3:a5:ff:c8:c0:a0:51:
         20:20:03:1b:72:99:87:b2:af:10:91:c1:86:15:03:e3:b0:d6:
         f6:99:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:19 2024 by rpki-client on console-ams.rpki-client.org