Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/3139312e362e3136362e302f32342d3234203d3e20323633313634.roa
File:                     3139312e362e3136362e302f32342d3234203d3e20323633313634.roa (raw, json)
Hash identifier:          KXgb8Vzvt7zp0BfCRNjVTDZEjyuxygrHX5f9K+PI2JI=
Subject key identifier:   A5:4E:8C:FC:F2:92:81:E0:20:7B:51:F7:06:8D:53:9E:42:86:FF:81
Certificate issuer:       /CN=D90441ECB74943D30081300B753529BADC36D40B
Certificate serial:       5DBE31B51C034BD8ADC81B085D5A65203D626CC6
Authority key identifier: D9:04:41:EC:B7:49:43:D3:00:81:30:0B:75:35:29:BA:DC:36:D4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/3139312e362e3136362e302f32342d3234203d3e20323633313634.roa
Signing time:             Sun 07 Apr 2024 22:18:12 +0000
ROA not before:           Sun 07 Apr 2024 22:13:12 +0000
ROA not after:            Sun 06 Apr 2025 22:18:12 +0000
asID:                     263164
IP address blocks:        191.6.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.crl
                          rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:be:31:b5:1c:03:4b:d8:ad:c8:1b:08:5d:5a:65:20:3d:62:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90441ECB74943D30081300B753529BADC36D40B
        Validity
            Not Before: Apr  7 22:13:12 2024 GMT
            Not After : Apr  6 22:18:12 2025 GMT
        Subject: CN=A54E8CFCF29281E0207B51F7068D539E4286FF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:c0:bc:a6:09:95:f6:ea:29:de:bc:3d:c8:
                    82:90:76:10:7a:b6:99:2f:5d:47:ed:a1:64:11:8f:
                    bf:ce:40:88:c4:52:b7:d2:2e:87:c5:dc:30:af:96:
                    df:db:d8:f8:f7:ff:3b:d1:9b:86:ca:53:90:b8:62:
                    52:db:24:b0:c7:ae:c0:bd:a2:ee:97:10:ed:ce:59:
                    1e:51:0f:38:e9:c8:70:8f:62:8a:6c:e4:d5:e9:67:
                    e8:66:f3:2b:30:09:39:0d:10:26:61:0f:d2:f7:07:
                    3c:b5:14:25:3e:70:af:a4:e6:df:6c:ef:25:c6:07:
                    06:96:de:c5:e5:54:a0:dd:de:cd:7a:18:ad:0b:c0:
                    19:73:bd:7a:60:2a:29:8b:c2:4f:63:74:e6:8c:3d:
                    f6:61:fe:d0:45:98:d7:df:c2:9f:0f:89:74:4b:0d:
                    0d:1b:54:31:f5:56:36:7e:94:26:94:3b:7d:52:5a:
                    a8:47:87:f9:58:0a:1f:16:a0:71:41:50:93:11:84:
                    ba:a3:1c:3f:e4:f1:c5:74:7c:7e:9b:38:21:af:ca:
                    67:ba:63:da:bf:ed:8c:bb:d6:1f:0a:9a:98:aa:61:
                    3a:1a:6f:f7:d4:64:4d:20:3f:2d:c5:29:00:c2:04:
                    bb:c0:22:76:21:82:46:2e:5d:48:3a:63:50:16:a3:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4E:8C:FC:F2:92:81:E0:20:7B:51:F7:06:8D:53:9E:42:86:FF:81
            X509v3 Authority Key Identifier:
                keyid:D9:04:41:EC:B7:49:43:D3:00:81:30:0B:75:35:29:BA:DC:36:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/D90441ECB74943D30081300B753529BADC36D40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90441ECB74943D30081300B753529BADC36D40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/3139312e362e3136362e302f32342d3234203d3e20323633313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:42:18:f7:f7:64:30:9b:3c:45:29:4f:63:d5:77:4b:7a:
         45:5b:bb:4a:0b:ba:3c:67:03:01:cf:2e:b6:38:98:08:d2:1c:
         7e:a5:10:99:ee:47:84:f9:4c:0d:0c:41:0b:2c:a0:4b:30:c5:
         38:c1:2d:bc:a8:86:20:22:b6:7b:01:2d:54:49:85:67:3f:68:
         f0:28:92:7e:e5:2b:f3:e3:b4:96:f8:5c:47:38:75:87:bd:a4:
         6b:08:64:d4:9d:aa:e9:0d:4c:52:a3:98:af:2d:d4:86:b4:0d:
         a6:f4:25:26:c7:0d:40:8b:78:0c:2f:d0:9d:73:e1:86:6d:70:
         e8:aa:bc:6e:bd:7e:24:a5:b9:af:e3:57:e3:71:52:dd:de:84:
         f1:15:8b:62:bd:03:7c:de:b8:df:ff:b5:57:63:fb:59:cf:9d:
         ee:57:00:40:a4:d7:03:ac:99:3a:bc:23:83:d0:96:4e:84:b4:
         4c:d8:bd:b8:65:b9:a5:cf:9e:98:2e:9c:14:2f:81:86:11:81:
         7e:fd:1b:97:f6:95:51:d5:e0:02:36:dc:85:41:0f:8f:da:66:
         d2:12:16:4f:5a:68:7c:fc:d1:19:32:6a:db:68:e2:0e:3b:cf:
         ee:82:69:b5:af:d1:22:f7:1b:6b:dc:44:29:e4:75:10:7e:5d:
         ab:4c:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:22 2024 by rpki-client on console-fra.rpki-client.org