Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa
File:                     3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa (raw, json)
Hash identifier:          zMAMPay/rzjdLoeaHVmSCQ2WDD4+kjn5k6CcNQRQrYg=
Subject key identifier:   A1:46:E8:F5:29:C8:82:B2:99:5B:7C:C5:4A:56:18:C1:F1:B7:55:C2
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       7EF2D1504C96D981E5114D225588BB92651FFA68
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:52 +0000
ROA not before:           Tue 01 Oct 2024 14:00:52 +0000
ROA not after:            Tue 30 Sep 2025 14:05:52 +0000
asID:                     265175
IP address blocks:        167.249.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:d1:50:4c:96:d9:81:e5:11:4d:22:55:88:bb:92:65:1f:fa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:52 2024 GMT
            Not After : Sep 30 14:05:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:7c:3e:a3:70:6b:74:bf:3d:8c:e8:59:00:
                    0a:79:cf:ec:c4:79:47:73:07:57:74:f2:17:ce:60:
                    67:22:9c:6e:89:69:e7:55:34:75:d0:c0:ae:fd:dc:
                    fa:fa:cc:9b:3d:91:ae:c2:cb:39:4a:d5:ed:66:be:
                    f4:16:07:df:38:6f:c6:1a:a1:8f:f5:68:95:ba:48:
                    61:55:46:fd:a1:50:4f:04:a2:e6:db:10:77:b2:3b:
                    27:f0:6c:8a:39:d3:0a:f6:0d:20:55:be:aa:e8:2c:
                    9e:49:cb:a0:6c:ec:6d:80:06:c9:56:ab:8e:1c:27:
                    b4:67:fb:01:7f:2c:ab:f1:f6:0f:a8:2a:b6:a3:d9:
                    1b:23:13:a0:dc:b4:98:f7:a4:87:d7:2a:68:85:d3:
                    ec:35:01:a6:78:46:b5:3c:4d:6a:5b:bd:cb:2b:33:
                    a2:e5:db:89:48:4b:97:e4:7e:f6:f1:6f:1c:cf:21:
                    33:96:97:90:fc:05:17:27:69:e1:d8:4e:e6:33:13:
                    e6:46:e5:fd:46:84:d8:10:8b:3e:8d:9b:86:23:84:
                    0e:31:b0:84:c5:84:5d:2a:00:6b:b4:ac:cd:4b:c8:
                    fd:6a:fb:34:12:ea:3c:30:80:be:62:91:be:fb:94:
                    93:eb:55:37:72:48:c1:98:cd:b5:0b:96:07:47:67:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:46:E8:F5:29:C8:82:B2:99:5B:7C:C5:4A:56:18:C1:F1:B7:55:C2
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231302e302f32332d3233203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:df:f5:4c:92:05:05:74:83:33:81:59:a2:40:56:51:80:12:
         74:25:66:a8:8e:8f:21:4a:bb:75:8a:1e:f0:26:5c:af:eb:05:
         f6:40:e6:d3:c8:76:a4:e9:7d:3f:d2:62:43:cf:0b:de:fc:28:
         73:d6:a6:03:15:0a:f3:e9:fa:44:c8:53:aa:7d:53:4a:2a:fa:
         cc:7a:78:d0:55:9d:5d:45:18:e8:67:f1:6d:7e:06:25:24:1b:
         19:0c:b5:35:df:20:49:c8:b4:61:6a:25:6c:4a:be:bf:90:91:
         cf:d2:97:ef:ef:34:3d:07:2e:51:81:67:0a:38:f6:9f:42:e3:
         a4:ce:24:41:66:47:31:8a:bf:ea:bd:62:9a:a9:d5:4f:b9:45:
         2f:67:53:43:77:bc:66:60:ec:1e:bb:9b:ae:13:73:ae:96:8e:
         1a:f2:db:5a:eb:6b:68:ad:94:64:59:05:90:d5:e7:ec:99:bc:
         98:3a:31:bb:ef:5f:84:6d:c4:fa:9c:61:53:df:ea:63:fa:c6:
         bc:29:04:cd:f9:5c:13:05:70:00:58:78:04:d1:64:27:30:32:
         f6:6b:e5:7c:2d:fd:e0:b6:1d:5d:31:e5:d3:b8:60:b8:4c:fb:
         a6:94:6b:2f:3d:05:6d:eb:01:6a:ed:93:e6:67:ce:d5:a3:a4:
         55:14:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org