Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231302e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3231302e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          GeqjjF9vBjUv7Phx0S1fBzZNlsu+ueClYzyzMMFRsG0=
Subject key identifier:   F1:B0:4E:38:05:B9:07:44:1B:C4:98:9E:36:13:54:4A:F5:57:DC:BA
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       647096186A97AAAF899FF36A710C5B68333DD9DD
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231302e302f32342d3234203d3e20323635313735.roa
Signing time:             Tue 08 Oct 2024 13:16:19 +0000
ROA not before:           Tue 08 Oct 2024 13:11:19 +0000
ROA not after:            Tue 07 Oct 2025 13:16:19 +0000
asID:                     265175
IP address blocks:        167.249.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:70:96:18:6a:97:aa:af:89:9f:f3:6a:71:0c:5b:68:33:3d:d9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  8 13:11:19 2024 GMT
            Not After : Oct  7 13:16:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:05:15:11:1f:88:59:9f:96:e7:94:b0:ad:
                    4e:a6:fc:eb:54:d3:a9:9e:cd:2e:9d:fa:b0:53:a8:
                    f3:f7:45:bc:da:72:2a:01:3c:1f:3e:f0:99:bc:88:
                    b8:fb:ef:26:2f:b4:b8:f4:b3:b0:a1:da:7c:14:4d:
                    d6:16:21:c1:97:76:95:eb:ed:5d:67:0e:20:4a:60:
                    52:3c:55:fd:bb:37:76:13:50:57:69:40:f1:f8:85:
                    44:41:60:09:95:66:82:28:e6:1c:05:89:16:8c:ab:
                    0f:d5:20:67:00:56:80:54:15:7c:b4:65:bb:9a:3f:
                    cf:9a:16:7f:cd:de:e8:d8:6e:02:ba:4d:9c:50:7e:
                    c1:fb:de:fc:79:5b:9a:74:66:52:ce:0a:42:1a:da:
                    ff:ad:03:65:7e:64:1f:cd:19:9d:e7:2b:f3:2e:85:
                    39:99:c2:bf:1c:de:e3:e3:08:d5:d3:83:45:fc:ac:
                    61:4a:3c:68:af:72:ca:6c:ce:79:82:fd:94:71:4c:
                    63:f2:49:e0:07:99:25:9d:99:cd:f8:68:84:aa:79:
                    3c:ef:07:75:6f:7f:c7:4b:7c:6e:9d:f5:da:eb:f7:
                    5d:84:d3:ad:99:74:ab:20:86:91:2f:b1:5a:f7:ef:
                    30:0e:70:d9:86:47:01:fa:be:bd:67:89:32:6e:44:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B0:4E:38:05:B9:07:44:1B:C4:98:9E:36:13:54:4A:F5:57:DC:BA
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231302e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:be:1e:4e:54:2e:dd:f1:df:af:e4:f5:a6:5b:3c:65:22:
         b7:71:cd:be:48:a2:1b:f7:1d:60:e7:cc:6a:a8:90:6b:b6:b2:
         26:e7:0c:c9:04:1a:9a:0b:37:98:70:cb:b1:46:3b:d1:d1:79:
         aa:9c:f7:80:1e:b3:a4:91:56:5e:c7:66:5f:4d:43:eb:d4:d8:
         dd:58:17:a8:44:df:71:31:a7:95:b1:3b:3a:0e:bc:89:80:d6:
         c1:bd:7e:33:c3:3e:af:0f:40:c0:e3:4a:a2:0c:1a:f3:da:38:
         d8:cb:9e:e1:a4:e3:88:7c:54:51:ed:45:ca:ab:91:a1:f2:a3:
         1c:93:85:70:1c:7e:85:4d:a5:01:97:39:31:87:5e:58:4c:c0:
         ff:05:e4:11:61:c8:a2:5a:f0:37:99:fb:5f:0e:a1:0d:65:8e:
         b0:fe:fd:1d:d9:fd:d2:03:b9:03:01:71:bd:97:f0:4a:d4:52:
         ae:3d:05:b0:1b:17:0a:1c:a0:64:0d:c5:b9:cb:a2:5a:26:04:
         88:2e:a8:a1:8f:cc:b1:b6:66:7e:f9:d4:cb:1b:e0:36:15:16:
         cc:d8:58:57:6e:92:be:fd:3a:a7:0a:56:de:82:62:85:57:67:
         e9:c5:ed:90:30:e0:88:8b:fc:9e:eb:40:87:43:51:c9:4b:81:
         0b:7d:67:dc
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUZHCWGGqXqq+Jn/NqcQxbaDM92d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNDEwMDgxMzExMTlaFw0yNTEwMDcxMzE2MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM3MjA1MTUxMTFGODg1OTlG
OTZFNzk0QjBBRDRFQTZGQ0VCNTREM0E5OUVDRDJFOURGQUIwNTNBOEYzRjc0NUJD
REE3MjJBMDEzQzFGM0VGMDk5QkM4OEI4RkJFRjI2MkZCNEI4RjRCM0IwQTFEQTdD
MTQ0REQ2MTYyMUMxOTc3Njk1RUJFRDVENjcwRTIwNEE2MDUyM0M1NUZEQkIzNzc2
MTM1MDU3Njk0MEYxRjg4NTQ0NDE2MDA5OTU2NjgyMjhFNjFDMDU4OTE2OENBQjBG
RDUyMDY3MDA1NjgwNTQxNTdDQjQ2NUJCOUEzRkNGOUExNjdGQ0RERUU4RDg2RTAy
QkE0RDlDNTA3RUMxRkJERUZDNzk1QjlBNzQ2NjUyQ0UwQTQyMUFEQUZGQUQwMzY1
N0U2NDFGQ0QxOTlERTcyQkYzMkU4NTM5OTlDMkJGMUNERUUzRTMwOEQ1RDM4MzQ1
RkNBQzYxNEEzQzY4QUY3MkNBNkNDRTc5ODJGRDk0NzE0QzYzRjI0OUUwMDc5OTI1
OUQ5OUNERjg2ODg0QUE3OTNDRUYwNzc1NkY3RkM3NEI3QzZFOURGNURBRUJGNzVE
ODREM0FEOTk3NEFCMjA4NjkxMkZCMTVBRjdFRjMwMEU3MEQ5ODY0NzAxRkFCRUJE
Njc4OTMyNkU0NEJDRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA03IFFREfiFmflueUsK1OpvzrVNOpns0unfqwU6jz90W82nIqATwf
PvCZvIi4++8mL7S49LOwodp8FE3WFiHBl3aV6+1dZw4gSmBSPFX9uzd2E1BXaUDx
+IVEQWAJlWaCKOYcBYkWjKsP1SBnAFaAVBV8tGW7mj/PmhZ/zd7o2G4Cuk2cUH7B
+978eVuadGZSzgpCGtr/rQNlfmQfzRmd5yvzLoU5mcK/HN7j4wjV04NF/KxhSjxo
r3LKbM55gv2UcUxj8kngB5klnZnN+GiEqnk87wd1b3/HS3xunfXa6/ddhNOtmXSr
IIaRL7Fa9+8wDnDZhkcB+r69Z4kybkS80QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPGwTjgFuQdEG8SYnjYTVEr1V9y6MB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMxMzYzNzJlMzIzNDM5MmUzMjMx
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMTM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACn+dIwDQYJKoZIhvcNAQELBQADggEBADy9vh5OVC7d8d+v5PWmWzxlIrdxzb5I
ohv3HWDnzGqokGu2sibnDMkEGpoLN5hwy7FGO9HReaqc94Aes6SRVl7HZl9NQ+vU
2N1YF6hE33Exp5WxOzoOvImA1sG9fjPDPq8PQMDjSqIMGvPaONjLnuGk44h8VFHt
RcqrkaHyoxyThXAcfoVNpQGXOTGHXlhMwP8F5BFhyKJa8DeZ+18OoQ1ljrD+/R3Z
/dIDuQMBcb2X8ErUUq49BbAbFwocoGQNxbnLolomBIguqKGPzLG2Zn751Msb4DYV
FszYWFdukr79OqcKVt6CYoVXZ+nF7ZAw4IiL/J7rQIdDUclLgQt9Z9w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org