Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa (raw, json)
Hash identifier:          HyegETe7hB6ix9oyrRM5/mAdXpiNXTEGffqDebvOCkQ=
Subject key identifier:   A0:BF:58:00:BD:E7:83:DE:2B:C4:EB:D2:A8:12:32:AA:37:D6:89:A9
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       42B283F07AA8557672855E7F06E5DE6D2285E11B
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:50 +0000
ROA not before:           Tue 01 Oct 2024 14:00:50 +0000
ROA not after:            Tue 30 Sep 2025 14:05:50 +0000
asID:                     265175
IP address blocks:        167.249.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b2:83:f0:7a:a8:55:76:72:85:5e:7f:06:e5:de:6d:22:85:e1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:50 2024 GMT
            Not After : Sep 30 14:05:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:26:9c:be:24:bf:c7:83:95:08:12:ff:fd:
                    b0:f0:5c:82:ac:89:e1:29:9d:88:11:9d:88:0a:43:
                    10:13:61:3b:ca:4c:19:1e:c9:7a:55:09:cd:f0:d2:
                    b0:4a:07:7c:40:7f:6b:bc:80:ed:ab:8f:e9:01:d6:
                    7b:4a:28:5f:43:fb:72:8d:06:bf:3b:98:a5:12:da:
                    e3:b7:83:b2:fa:57:85:73:61:1e:32:20:70:8e:bb:
                    b3:15:46:0e:f3:f8:c5:11:16:ed:20:d8:d0:cd:0c:
                    8e:91:eb:88:c6:e2:62:8f:7e:d1:97:b2:7d:3d:c2:
                    30:76:fe:62:4a:1a:61:b4:57:3f:b9:92:c2:d9:8e:
                    52:a4:50:dd:86:53:b6:23:2a:50:e1:f8:5a:f8:a0:
                    df:bb:de:e5:ee:cd:12:51:46:38:3a:0d:84:9e:7a:
                    ce:b2:51:a0:e7:bd:67:d4:c0:ac:50:64:5a:6a:00:
                    fd:c1:15:93:bf:3d:76:41:4d:ce:c4:22:8a:ec:d3:
                    00:09:82:46:06:a3:2d:80:64:91:bb:b1:ff:a2:74:
                    7a:b5:64:1b:d1:5a:25:d3:07:6e:f6:37:42:70:01:
                    20:fb:af:a9:40:d6:6f:4f:95:04:56:e5:71:1c:0b:
                    19:ae:81:62:ce:65:28:eb:9e:df:0a:a3:80:7d:32:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BF:58:00:BD:E7:83:DE:2B:C4:EB:D2:A8:12:32:AA:37:D6:89:A9
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:25:f2:85:f3:e4:2c:ee:c5:6b:5d:f7:d4:64:a8:c2:d6:
         4b:11:4b:29:cf:84:6a:72:11:c4:22:37:cd:3c:8e:05:15:38:
         78:f9:f8:3a:d3:47:04:67:d9:09:65:9a:ea:6e:2f:19:54:19:
         03:74:52:38:c7:73:e7:b1:15:78:98:e5:63:8b:3b:3b:36:d5:
         6b:6a:49:1c:a5:8e:08:a4:9d:bf:13:aa:d2:a7:0a:a5:5d:e4:
         5e:1c:da:3d:11:64:6c:e3:cb:4e:78:4d:f9:02:db:e3:5e:86:
         b2:f9:d2:6e:1c:2f:11:a2:69:7e:25:54:6c:af:64:a0:05:7c:
         de:fe:83:8c:b3:11:e6:7e:f3:15:d3:df:72:01:34:75:5b:49:
         16:ff:5e:da:71:92:cc:52:c5:53:7b:49:95:3e:5f:0e:03:6b:
         24:f2:a1:c3:f7:1b:13:4f:4b:85:ca:28:67:20:88:af:80:bb:
         ec:f5:67:9c:6d:f6:40:42:75:c8:bf:fa:d0:50:c5:d1:b2:f4:
         e6:43:78:5d:45:27:6c:52:6e:f7:e7:ca:4b:6f:e9:21:ae:c5:
         8b:94:10:d4:da:9b:a5:bf:bb:d8:19:89:88:b5:30:8d:6e:db:
         6f:10:ac:12:2a:68:53:b2:1e:80:0c:20:fd:8e:84:3f:08:0c:
         60:1c:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org