Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          3prtgF4UsP2yDC5unLES8EKckXftqZ5vDiA/TnH1tts=
Subject key identifier:   03:55:F0:51:32:CF:A9:A7:B1:79:F6:7C:6D:FB:BE:7F:77:A2:76:8C
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       0FE5739E5A85F30D85623B7690568523B297FF9D
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa
Signing time:             Tue 08 Oct 2024 13:16:46 +0000
ROA not before:           Tue 08 Oct 2024 13:11:46 +0000
ROA not after:            Tue 07 Oct 2025 13:16:46 +0000
asID:                     265175
IP address blocks:        167.249.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e5:73:9e:5a:85:f3:0d:85:62:3b:76:90:56:85:23:b2:97:ff:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  8 13:11:46 2024 GMT
            Not After : Oct  7 13:16:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:44:8f:9f:15:88:1e:79:22:76:df:48:56:
                    df:3f:a8:cd:a5:29:2b:af:e5:26:41:15:6b:c9:b0:
                    88:95:6d:48:47:af:ec:d9:69:7e:75:37:25:5c:e7:
                    2d:44:f7:5d:43:20:eb:08:ea:3e:b5:fe:16:64:be:
                    d0:03:84:87:74:e1:89:0c:a5:30:42:bd:1f:42:d2:
                    ac:25:fd:5d:10:a7:11:ca:ef:b9:42:98:fa:fc:cc:
                    2c:7f:c4:15:61:c5:d1:a0:c2:f3:80:d4:d1:84:19:
                    e1:23:5c:c4:49:7d:39:69:6b:49:e3:3a:cc:79:f7:
                    cb:bc:6b:b7:4b:10:f6:c8:c1:11:e0:ea:fa:21:7b:
                    bc:31:66:25:e1:13:63:27:3c:8c:46:ce:f4:ac:5a:
                    5e:49:bd:7d:c4:82:86:f1:4f:66:53:82:a0:f5:d8:
                    74:91:3a:d0:91:32:d6:b1:44:8b:d6:74:7c:83:8a:
                    ac:c1:d4:7f:b0:08:14:7d:c0:b8:1e:86:81:2b:dd:
                    d8:50:e4:60:c9:1d:aa:2f:58:c7:7a:10:f1:b7:e8:
                    40:96:7c:a1:c1:50:a0:3a:58:3a:15:68:12:2e:9e:
                    04:e9:9f:c6:45:e4:0b:34:33:09:63:13:a6:81:93:
                    ce:4c:c1:57:18:48:3e:55:01:b9:92:ac:55:18:3d:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:F0:51:32:CF:A9:A7:B1:79:F6:7C:6D:FB:BE:7F:77:A2:76:8C
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3231312e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b7:c5:1a:5a:17:e1:c1:b2:26:86:f3:9e:f9:72:15:89:2d:
         20:f3:50:f8:00:2d:fa:11:88:e7:41:17:b6:ed:b3:c4:90:3e:
         8a:0f:95:45:f1:a8:0e:cb:8b:6b:dc:ae:45:c7:fa:3d:98:4b:
         4d:57:f7:4c:0d:ed:1f:09:98:b3:51:de:47:20:38:7a:4d:cf:
         3e:69:9d:82:df:75:55:13:94:8b:78:3c:11:64:fd:93:0d:7a:
         7d:b3:fc:d7:ee:de:fb:5d:3d:6a:ef:da:2f:d4:73:ba:00:77:
         e2:92:7d:cc:8c:54:5e:a6:ec:7e:2e:8f:be:50:46:69:75:d3:
         82:ab:44:de:92:4c:b5:5e:78:7b:22:30:15:75:57:fb:e2:60:
         85:22:5a:cc:31:cd:c3:5b:d4:40:35:7e:8e:32:88:ba:c8:00:
         05:70:3c:1b:15:50:74:1c:10:da:31:ec:ae:92:44:fb:3c:88:
         34:76:b4:ec:8e:4a:ec:de:86:d3:0f:f0:c8:39:48:69:59:8e:
         92:52:bb:21:20:fd:47:5f:42:a0:23:c0:9b:a1:8d:10:6f:64:
         48:0f:f2:3a:fc:e0:ee:7e:9f:1d:06:02:8e:16:88:1b:9a:24:
         cf:97:11:21:99:36:f8:c3:b4:7a:92:89:4f:58:e8:20:9f:d4:
         8f:71:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org