Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa
File:                     3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa (raw, json)
Hash identifier:          73Sw822nQ9tYaOZWZC2k2OyKX4epPfSQH5wSfODZHeA=
Subject key identifier:   45:9B:3F:8B:EF:D4:3B:06:25:84:45:1E:CE:99:37:22:41:B7:3A:7B
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       0185A5FD97224C81DD0684E2529F0A94E819A6BD
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa
Signing time:             Mon 25 Nov 2024 17:04:02 +0000
ROA not before:           Mon 25 Nov 2024 16:59:02 +0000
ROA not after:            Mon 24 Nov 2025 17:04:02 +0000
asID:                     265974
IP address blocks:        164.163.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:fd:97:22:4c:81:dd:06:84:e2:52:9f:0a:94:e8:19:a6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:02 2024 GMT
            Not After : Nov 24 17:04:02 2025 GMT
        Subject: CN=459B3F8BEFD43B062584451ECE99372241B73A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:83:12:f0:a2:32:37:97:81:65:cf:a8:82:
                    a3:1c:5f:ca:fc:46:d0:93:4b:58:5c:bf:52:85:95:
                    d3:b8:bf:2c:45:b8:33:0c:93:12:a2:1e:cb:6c:43:
                    6f:44:20:a7:b7:82:30:4e:b9:70:56:9d:a1:f0:af:
                    a9:e6:a8:2f:44:30:ca:73:11:d2:01:8f:a6:7e:bf:
                    aa:47:15:3f:2f:b7:89:8b:e8:cf:af:7c:44:91:bb:
                    f2:ca:30:53:0e:f2:51:ce:d1:d0:15:e4:8d:dd:b7:
                    14:8b:99:17:f3:55:79:09:00:13:5a:b3:aa:46:f7:
                    4d:20:eb:3f:0b:be:46:d8:c7:2f:18:33:61:00:99:
                    ce:88:0b:aa:38:a0:ed:89:64:70:f0:21:05:d4:19:
                    a3:ec:2e:41:a4:de:cd:6d:e0:d3:34:86:f3:96:95:
                    c3:cc:b6:c0:e4:09:f7:60:b9:0c:9a:55:5f:a5:c6:
                    12:b2:be:af:75:8c:60:dc:7d:2e:be:27:b0:5b:d2:
                    34:c1:c2:03:46:2e:9b:3f:f2:87:9a:94:a0:14:77:
                    bb:91:67:c6:1e:1a:a0:a8:14:df:9a:5b:0a:90:36:
                    e2:a0:f0:c8:58:ba:7b:9b:91:47:ac:ca:01:bd:fd:
                    68:d5:52:b6:cf:81:d5:6e:ea:35:5f:a4:6e:4b:c0:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9B:3F:8B:EF:D4:3B:06:25:84:45:1E:CE:99:37:22:41:B7:3A:7B
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:39:46:de:e7:cf:7a:b9:97:56:77:4d:19:ff:aa:59:14:03:
         a4:45:59:3a:3d:6d:ae:c2:87:5e:7f:1b:cb:4a:7d:99:bf:ab:
         fb:58:f4:a7:0a:21:4d:01:a6:ac:c6:91:e9:09:41:31:dc:cb:
         cf:06:82:53:8e:23:d0:97:a0:83:c5:4c:c6:b2:9b:0e:50:01:
         d1:dd:aa:73:46:1c:b9:4f:24:bb:f3:7f:12:cc:17:6b:5d:12:
         d1:24:aa:ed:b8:81:3b:7a:53:86:e6:c7:2e:f2:86:40:ba:90:
         09:af:02:71:59:67:48:9f:3f:00:04:c3:91:4c:46:83:b7:61:
         a3:94:49:28:5d:a8:c8:69:0d:08:da:8c:db:7c:2c:1a:82:19:
         d1:7a:1c:2e:59:21:8e:af:c4:e7:7e:88:73:2d:f5:c8:33:9e:
         61:ff:73:c3:71:38:da:87:7f:18:50:58:d9:fd:5e:0a:18:63:
         a5:30:67:59:9d:f1:9d:1c:1b:1f:ea:91:10:ea:1a:57:e5:a5:
         d7:62:52:4b:90:0b:ee:bb:8b:b6:0c:a6:ef:2e:f9:cb:29:60:
         6b:8f:d2:0e:cc:43:fe:c1:bb:7c:a6:f0:62:03:54:e8:f4:8f:
         3b:29:a1:df:fd:04:de:8a:5a:6c:fd:26:6e:be:b9:c3:89:52:
         a4:61:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org