Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa
File:                     3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa (raw, json)
Hash identifier:          KL9XyyWfF2yqr6YR2CPSC90eWPU8aRblnF1W8GL7ggk=
Subject key identifier:   25:92:25:05:55:1F:64:FC:84:2B:5E:8B:44:08:B8:47:F5:67:EE:CB
Certificate issuer:       /CN=41692467D51C0CDCAE5CFACADB17B6B148A848D7
Certificate serial:       02E8672AB5021E8960E1F4B41DB772C8DDD4CAFA
Authority key identifier: 41:69:24:67:D5:1C:0C:DC:AE:5C:FA:CA:DB:17:B6:B1:48:A8:48:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa
Signing time:             Tue 16 Apr 2024 12:54:28 +0000
ROA not before:           Tue 16 Apr 2024 12:49:28 +0000
ROA not after:            Tue 15 Apr 2025 12:54:28 +0000
asID:                     272717
IP address blocks:        167.250.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/41692467D51C0CDCAE5CFACADB17B6B148A848D7.crl
                          rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/41692467D51C0CDCAE5CFACADB17B6B148A848D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e8:67:2a:b5:02:1e:89:60:e1:f4:b4:1d:b7:72:c8:dd:d4:ca:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41692467D51C0CDCAE5CFACADB17B6B148A848D7
        Validity
            Not Before: Apr 16 12:49:28 2024 GMT
            Not After : Apr 15 12:54:28 2025 GMT
        Subject: CN=25922505551F64FC842B5E8B4408B847F567EECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:90:bd:b0:83:b1:62:42:41:f6:16:1c:c6:
                    f9:f0:12:ac:57:70:ed:73:d5:7c:c3:ad:d8:a2:06:
                    ee:6f:76:a7:cf:b9:45:42:b8:72:9d:01:9a:42:c8:
                    20:37:5b:22:16:71:86:68:59:47:a7:4b:dd:4b:ef:
                    14:31:14:72:83:de:3d:7b:27:51:4d:24:67:c1:44:
                    1e:47:1c:b9:53:bb:91:83:c0:77:bf:99:a1:86:26:
                    f3:c3:f7:4f:83:fe:6a:27:7f:4c:a0:84:65:72:ca:
                    9b:e9:05:4f:4d:23:f3:dd:66:d9:bb:ae:4a:f7:43:
                    56:9f:a8:bd:f7:d1:2d:a8:53:4a:92:db:e9:2a:67:
                    4e:da:16:33:c3:e1:bc:de:6b:c5:57:c9:27:7d:e7:
                    11:2f:4d:61:4a:cb:50:05:6a:ba:74:c6:22:92:2e:
                    11:eb:aa:c4:77:9c:85:32:9e:c4:13:b7:ba:e1:bb:
                    d9:e2:75:02:bd:fc:12:e0:04:f9:98:1b:b7:98:ce:
                    2d:6d:10:d3:b1:00:11:fb:c3:24:de:4a:54:17:37:
                    fe:71:7c:c2:a5:3a:ce:4d:1a:03:06:db:9a:53:ec:
                    8a:cf:b6:52:60:66:93:4e:0b:38:55:2f:6e:60:a7:
                    56:9d:9c:8b:4e:d1:b4:dc:1b:b9:6c:75:a1:9f:9a:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:92:25:05:55:1F:64:FC:84:2B:5E:8B:44:08:B8:47:F5:67:EE:CB
            X509v3 Authority Key Identifier:
                keyid:41:69:24:67:D5:1C:0C:DC:AE:5C:FA:CA:DB:17:B6:B1:48:A8:48:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/41692467D51C0CDCAE5CFACADB17B6B148A848D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:18:04:ba:64:df:ce:b8:b7:d9:17:6e:5c:fe:f9:b5:c2:11:
         49:dc:bd:0f:5f:c7:a4:25:41:2b:46:6e:74:ba:d5:71:8d:98:
         59:ca:49:7f:44:93:f5:7a:cf:ed:00:4e:af:6c:fc:93:10:a8:
         bf:14:cb:a2:40:8c:1a:f5:85:c8:d0:bc:2f:33:71:56:80:58:
         23:b2:b6:61:09:a6:86:cd:ee:5a:57:e9:d0:0e:df:3a:67:7f:
         9b:dd:5d:6c:eb:3d:95:67:33:4b:5c:bc:df:1f:ee:c5:cd:49:
         a6:57:a3:72:3d:a4:1e:7f:0a:fc:81:6d:60:76:9d:8c:8d:7c:
         c4:1a:88:90:ea:dc:88:af:ec:f8:1d:09:a9:d2:fb:3e:e1:d3:
         ad:c7:b7:7b:40:93:40:5a:00:23:1d:bb:de:66:b2:45:aa:c6:
         10:ac:9a:21:a1:d6:11:c1:4e:f6:52:6f:64:96:17:93:cf:3b:
         10:97:4b:c0:bd:d2:e6:6d:41:cc:06:20:69:ef:ce:19:cf:9f:
         d3:a5:40:b7:57:55:b4:5e:c3:4e:70:9e:86:8e:7a:3b:5e:d2:
         f0:cf:4e:8f:6b:2f:0c:68:06:6d:ad:44:9d:64:d9:d4:0f:34:
         83:c6:1a:d5:c1:61:0c:4b:ab:16:87:1e:b2:27:1d:d3:ae:f7:
         a7:b1:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:30 2024 by rpki-client on console-fra.rpki-client.org