Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa (raw, json)
Hash identifier:          Mel1usaqjyP0rB0bACBp8wL2EJNErResis/DAyxTS6M=
Subject key identifier:   8D:2D:43:C5:FB:1D:9C:5E:51:FB:F0:0D:7B:22:80:F2:6F:4A:83:3A
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       1192D439EAD71B3FADCFD22C6519774C68D26A4E
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:52 +0000
ROA not before:           Tue 01 Oct 2024 14:00:52 +0000
ROA not after:            Tue 30 Sep 2025 14:05:52 +0000
asID:                     265175
IP address blocks:        167.249.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:92:d4:39:ea:d7:1b:3f:ad:cf:d2:2c:65:19:77:4c:68:d2:6a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:52 2024 GMT
            Not After : Sep 30 14:05:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:53:49:27:76:1d:46:72:bc:1c:d9:2c:7c:
                    a2:d0:2a:35:64:96:89:97:f5:ea:98:d7:33:95:3e:
                    90:13:bd:7f:34:7f:52:39:e0:1b:3c:96:3f:0e:3d:
                    3a:52:e7:5d:c9:7b:b9:80:98:fb:ce:df:b4:5a:fe:
                    54:24:f2:62:91:a9:94:66:21:81:b2:47:ea:ab:94:
                    70:02:75:1f:cd:36:da:6c:99:e2:30:79:f6:53:ff:
                    c4:5b:00:7a:2b:e3:59:eb:99:89:5d:ce:f6:9d:28:
                    5f:d5:3c:c6:f0:e6:02:fa:e0:c1:fc:86:bf:ee:75:
                    bb:7f:bf:96:ed:bc:e8:41:9d:eb:0e:de:73:6f:2e:
                    36:b5:11:c4:dd:7f:b1:d7:1d:a0:77:9e:8b:eb:c8:
                    04:97:13:ce:52:fe:64:ed:30:5f:65:87:20:b1:32:
                    7f:78:db:6e:1c:81:af:26:37:5a:a4:a0:ea:30:83:
                    af:84:7f:b1:e3:99:7f:4a:18:70:2a:dd:65:66:39:
                    9d:ed:a0:cc:0f:3c:ce:1e:1a:b3:d8:0c:01:d5:04:
                    b0:47:62:23:66:93:a8:4f:0d:f7:a5:93:e4:c8:fc:
                    bb:ff:9e:93:0d:da:c4:fd:41:ff:93:5c:c5:8b:95:
                    36:57:70:f4:ba:fb:5b:f7:a4:f9:4f:af:3e:d6:94:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2D:43:C5:FB:1D:9C:5E:51:FB:F0:0D:7B:22:80:F2:6F:4A:83:3A
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32332d3233203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:96:1c:03:68:02:ed:8a:bc:59:88:a7:a1:db:e4:0a:98:a4:
         34:b3:17:11:7a:f2:78:fb:10:0b:5a:fb:a7:60:d4:d0:b8:e7:
         bf:77:e1:e5:d5:d0:62:9e:2d:26:ac:bf:2b:3e:dd:e3:6f:88:
         3c:d8:50:6e:83:9a:b4:98:86:39:d2:26:d6:55:7c:a3:45:b8:
         9a:86:73:16:22:bb:e9:81:f4:38:9e:a7:f4:0f:a0:3c:87:ce:
         33:02:71:2f:29:ba:a1:91:58:24:9b:2c:f3:0e:e4:ec:2f:60:
         93:5b:3e:e6:b8:fb:29:d9:87:b5:18:8f:6a:a3:f4:ae:55:8a:
         3f:e4:89:26:90:49:47:8d:22:90:e6:95:06:6e:26:ac:b1:4a:
         43:b1:e3:d5:86:10:bf:54:51:1d:fb:2c:9e:55:21:82:70:6c:
         15:f8:7f:53:22:0b:1f:5b:98:b1:d3:45:f5:b2:82:83:f2:5e:
         5b:02:b6:37:21:ee:b3:bd:d7:b1:29:a1:b1:2f:11:b3:5c:c9:
         4f:63:b1:48:db:ad:39:0c:f4:e8:fa:bf:c3:9d:11:f8:06:77:
         45:fc:6a:79:7a:95:bf:31:85:6c:0e:f1:57:f9:6e:80:2b:df:
         bd:77:83:b8:ee:38:59:d2:36:fa:b5:61:03:95:1b:4f:66:a0:
         59:10:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org