Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          sgrHhsbJUFbJvvVidweNfADTFe7Nf+3aYe3S696SS9Y=
Subject key identifier:   A3:4E:81:C6:FF:EC:52:6A:4D:93:9B:4E:F6:03:7B:51:62:CA:98:BA
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       77980F3B03C57405A61A090CCE958FFDBC10F0EB
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa
Signing time:             Tue 08 Oct 2024 13:18:20 +0000
ROA not before:           Tue 08 Oct 2024 13:13:20 +0000
ROA not after:            Tue 07 Oct 2025 13:18:20 +0000
asID:                     265175
IP address blocks:        167.249.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:98:0f:3b:03:c5:74:05:a6:1a:09:0c:ce:95:8f:fd:bc:10:f0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  8 13:13:20 2024 GMT
            Not After : Oct  7 13:18:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:37:95:71:47:04:09:c2:80:f0:1b:37:76:
                    c6:54:c7:98:ef:c4:67:11:5c:8e:72:9f:d2:45:34:
                    7c:1e:45:3c:02:11:bb:54:0a:1c:85:55:89:3d:aa:
                    05:0a:f9:06:0c:19:3f:83:f9:37:63:72:6e:bf:21:
                    b8:bb:f8:56:5b:46:47:d8:64:8c:4e:59:74:39:79:
                    9c:92:66:46:c4:16:59:49:1b:71:c1:3b:c7:6c:c8:
                    94:34:92:fc:40:84:88:c7:ce:57:bc:72:19:c2:c6:
                    7e:cd:74:56:40:2b:b8:b5:48:58:db:c8:c5:27:89:
                    ad:47:7b:07:54:bd:e0:e4:2c:00:d8:f8:e9:c2:82:
                    14:53:fb:92:2f:00:c7:fe:37:f0:76:ad:70:8e:72:
                    26:4b:5f:18:59:16:3b:e1:e6:e0:d1:80:ae:e7:f5:
                    5a:b1:b6:ec:3d:4f:4a:62:e0:db:f0:32:c5:7b:93:
                    cf:c6:6e:40:80:fe:c6:21:e2:68:e3:ec:34:13:ff:
                    c9:e7:6d:14:fc:f0:ed:c1:0c:d9:f9:47:37:68:dd:
                    fe:b0:a4:03:f7:da:1e:d8:3f:7e:8e:44:74:97:90:
                    66:78:c8:c1:8b:e4:6b:3d:b8:1e:3a:be:31:1b:e9:
                    28:de:3c:42:31:5f:82:15:3b:93:a3:32:ae:56:51:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4E:81:C6:FF:EC:52:6A:4D:93:9B:4E:F6:03:7B:51:62:CA:98:BA
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230392e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:83:fe:3b:91:1e:75:5f:b8:8e:02:0a:b6:d9:78:5d:75:98:
         82:61:be:4c:41:5c:b2:e6:21:49:69:85:c7:84:72:a8:e7:93:
         79:4c:26:3c:8c:b5:86:1d:ac:91:50:66:b1:0c:15:00:67:70:
         50:6a:3b:38:b2:6b:63:45:98:16:ef:34:fc:be:f1:6b:c8:bb:
         52:ba:c1:c1:d4:eb:4b:b6:4c:8c:ae:7b:e1:d1:67:71:28:7e:
         5d:6b:8a:16:10:a8:76:d9:1a:78:f9:f2:a7:d8:83:49:cc:5f:
         2b:a4:e6:4e:d5:f2:ae:b7:20:d4:26:a8:9d:65:61:13:c2:51:
         45:f1:d6:dd:b3:0a:5e:af:03:27:c1:84:66:2f:65:08:f9:90:
         97:b8:14:19:b3:34:3a:57:04:55:64:c8:0d:b4:fd:8c:13:4b:
         4b:4f:bb:45:ae:f6:37:19:4a:aa:ed:6e:a2:aa:5c:4b:49:d3:
         1f:63:32:23:bf:24:4e:a6:38:1d:46:a8:0f:2c:ab:12:4a:f1:
         b4:b4:ab:29:2a:80:73:ea:75:a1:a8:56:8a:91:4e:8c:1f:de:
         ac:2a:4f:84:30:d7:13:5a:90:4d:7f:9a:b5:52:5e:1c:a6:14:
         3f:49:23:95:39:ec:e8:f1:bd:04:c4:00:03:89:1d:95:8a:4e:
         53:73:87:2b
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUd5gPOwPFdAWmGgkMzpWP/bwQ8OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNDEwMDgxMzEzMjBaFw0yNTEwMDcxMzE4MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUY5OTM3OTU3MTQ3MDQwOUMy
ODBGMDFCMzc3NkM2NTRDNzk4RUZDNDY3MTE1QzhFNzI5RkQyNDUzNDdDMUU0NTND
MDIxMUJCNTQwQTFDODU1NTg5M0RBQTA1MEFGOTA2MEMxOTNGODNGOTM3NjM3MjZF
QkYyMUI4QkJGODU2NUI0NjQ3RDg2NDhDNEU1OTc0Mzk3OTlDOTI2NjQ2QzQxNjU5
NDkxQjcxQzEzQkM3NkNDODk0MzQ5MkZDNDA4NDg4QzdDRTU3QkM3MjE5QzJDNjdF
Q0Q3NDU2NDAyQkI4QjU0ODU4REJDOEM1Mjc4OUFENDc3QjA3NTRCREUwRTQyQzAw
RDhGOEU5QzI4MjE0NTNGQjkyMkYwMEM3RkUzN0YwNzZBRDcwOEU3MjI2NEI1RjE4
NTkxNjNCRTFFNkUwRDE4MEFFRTdGNTVBQjFCNkVDM0Q0RjRBNjJFMERCRjAzMkM1
N0I5M0NGQzY2RTQwODBGRUM2MjFFMjY4RTNFQzM0MTNGRkM5RTc2RDE0RkNGMEVE
QzEwQ0Q5Rjk0NzM3NjhEREZFQjBBNDAzRjdEQTFFRDgzRjdFOEU0NDc0OTc5MDY2
NzhDOEMxOEJFNDZCM0RCODFFM0FCRTMxMUJFOTI4REUzQzQyMzE1RjgyMTUzQjkz
QTMzMkFFNTY1MUVGMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn5k3lXFHBAnCgPAbN3bGVMeY78RnEVyOcp/SRTR8HkU8AhG7VAoc
hVWJPaoFCvkGDBk/g/k3Y3JuvyG4u/hWW0ZH2GSMTll0OXmckmZGxBZZSRtxwTvH
bMiUNJL8QISIx85XvHIZwsZ+zXRWQCu4tUhY28jFJ4mtR3sHVL3g5CwA2PjpwoIU
U/uSLwDH/jfwdq1wjnImS18YWRY74ebg0YCu5/VasbbsPU9KYuDb8DLFe5PPxm5A
gP7GIeJo4+w0E//J520U/PDtwQzZ+Uc3aN3+sKQD99oe2D9+jkR0l5BmeMjBi+Rr
PbgeOr4xG+ko3jxCMV+CFTuTozKuVlHvEQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKNOgcb/7FJqTZObTvYDe1Fiypi6MB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMxMzYzNzJlMzIzNDM5MmUzMjMw
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACn+dEwDQYJKoZIhvcNAQELBQADggEBAGSD/juRHnVfuI4CCrbZeF11mIJhvkxB
XLLmIUlphceEcqjnk3lMJjyMtYYdrJFQZrEMFQBncFBqOziya2NFmBbvNPy+8WvI
u1K6wcHU60u2TIyue+HRZ3Eofl1rihYQqHbZGnj58qfYg0nMXyuk5k7V8q63INQm
qJ1lYRPCUUXx1t2zCl6vAyfBhGYvZQj5kJe4FBmzNDpXBFVkyA20/YwTS0tPu0Wu
9jcZSqrtbqKqXEtJ0x9jMiO/JE6mOB1GqA8sqxJK8bS0qykqgHPqdaGoVoqRTowf
3qwqT4Qw1xNakE1/mrVSXhymFD9JI5U57OjxvQTEAAOJHZWKTlNzhys=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org