Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133342e302f32342d3234203d3e20323635313831.roa
File:                     3136372e3234392e3133342e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          5YONek2jxJzAMOq9aYUej/D4DT7Q1zk7BLUc+2nbPhU=
Subject key identifier:   1B:2A:25:96:0E:63:7E:48:CF:9A:CA:A0:BA:A9:66:37:BF:F2:91:4C
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       30C81F8A61839F4E36D63B4669842539479D2954
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133342e302f32342d3234203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:24 +0000
ROA not before:           Thu 04 Apr 2024 03:47:24 +0000
ROA not after:            Thu 03 Apr 2025 03:52:24 +0000
asID:                     265181
IP address blocks:        167.249.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c8:1f:8a:61:83:9f:4e:36:d6:3b:46:69:84:25:39:47:9d:29:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:24 2024 GMT
            Not After : Apr  3 03:52:24 2025 GMT
        Subject: CN=1B2A25960E637E48CF9ACAA0BAA96637BFF2914C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:e1:36:31:1d:1c:4c:7d:d1:28:e9:f1:50:
                    d5:bd:19:17:fa:f4:35:29:2e:4b:60:ec:7e:77:e3:
                    0c:15:ea:4e:aa:36:d3:71:3c:ff:94:e0:63:85:70:
                    a8:66:5f:ff:79:b0:08:0b:2e:5d:d7:3b:ab:c2:77:
                    56:96:8d:64:ac:7b:cb:3b:38:c7:3b:ee:1f:74:f3:
                    f6:db:28:7e:e2:8d:cf:bf:31:e4:b0:a5:bf:5a:f9:
                    a1:4e:ac:91:0f:a4:d9:84:56:67:f4:af:76:dd:05:
                    cf:1f:33:7d:51:56:a0:e7:c8:af:7d:c3:33:d5:ce:
                    8b:8d:e7:91:e8:30:99:44:c5:b0:61:d8:3c:eb:80:
                    81:b0:21:ae:62:6f:b7:58:6b:60:0f:89:52:a8:75:
                    15:12:eb:44:f6:dd:37:ca:e5:01:7b:b4:98:fb:f5:
                    05:68:5d:e4:41:ba:29:9c:d4:a5:08:ec:a2:70:58:
                    f0:92:82:1c:6b:e4:a5:71:58:ee:b7:f8:e0:75:fd:
                    d0:18:dc:9b:ec:19:25:1d:8e:a5:9d:db:cf:83:34:
                    c1:17:7c:5c:63:09:58:38:df:59:cb:30:ba:1a:05:
                    88:d0:f3:86:1f:48:c7:c7:ca:a2:cb:24:21:40:a6:
                    e6:2a:7c:60:82:a5:ff:8e:ff:71:e8:b4:c9:f8:a1:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:25:96:0E:63:7E:48:CF:9A:CA:A0:BA:A9:66:37:BF:F2:91:4C
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3136372e3234392e3133342e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:55:98:df:e6:e2:ec:57:89:3b:51:d0:2c:ee:7b:a5:48:
         4f:11:32:1d:3d:14:7d:25:b5:8e:8b:03:ea:d5:26:47:55:35:
         2e:26:55:21:c3:37:38:2b:71:d9:3c:e1:e7:4d:a5:cf:a2:5f:
         54:0d:13:46:de:c9:aa:dd:09:2a:a8:7c:09:8d:67:5a:ba:4e:
         f6:1c:2d:c1:88:a2:e2:82:3b:3e:d7:1a:c9:d0:43:50:23:91:
         da:38:35:9f:68:ce:5d:f9:4a:47:74:6c:d0:67:b4:42:ad:0d:
         30:33:29:a9:8e:df:39:57:93:04:01:5e:4d:32:1c:b0:57:77:
         ae:19:32:c7:48:73:d3:b5:24:7a:b7:7b:87:c0:65:9c:b6:78:
         de:f7:95:b0:60:6e:5d:4d:43:02:69:37:07:b4:84:91:9b:4c:
         72:a5:36:0e:09:68:73:1a:30:76:6d:16:84:6e:c5:7e:d4:26:
         1a:d7:cf:fb:1b:9e:fc:fa:25:95:dc:1c:b0:6c:2b:36:05:11:
         9a:ae:d3:9b:90:ed:8a:13:7a:7a:95:38:ce:a5:4e:3d:f3:c7:
         a4:da:fe:fa:79:3a:93:d4:14:1b:32:7f:4f:2d:4c:31:fb:22:
         1b:52:37:83:f7:83:73:fc:6e:69:f4:5b:10:ca:30:2f:e7:d9:
         60:31:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:19 2024 by rpki-client on console-ams.rpki-client.org