Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e302e302f32332d3234203d3e20323635323430.roa
File:                     3136382e302e302e302f32332d3234203d3e20323635323430.roa (raw, json)
Hash identifier:          8KI+tCEBFMXzNfUrzjZatb5OfGu8qz0b1Vm00Vx55Ps=
Subject key identifier:   A1:15:29:33:90:86:65:13:37:18:65:D1:E2:76:89:2B:3C:5A:41:00
Certificate issuer:       /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial:       4F6DC1B1F56CCECD4C6F381BB750A8E1922D1FA5
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e302e302f32332d3234203d3e20323635323430.roa
Signing time:             Mon 16 Sep 2024 20:26:44 +0000
ROA not before:           Mon 16 Sep 2024 20:21:44 +0000
ROA not after:            Mon 15 Sep 2025 20:26:44 +0000
asID:                     265240
IP address blocks:        168.0.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl
                          rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6d:c1:b1:f5:6c:ce:cd:4c:6f:38:1b:b7:50:a8:e1:92:2d:1f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Validity
            Not Before: Sep 16 20:21:44 2024 GMT
            Not After : Sep 15 20:26:44 2025 GMT
        Subject: CN=A115293390866513371865D1E276892B3C5A4100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:21:69:fc:df:32:ab:e8:ed:04:85:5a:5c:
                    9f:61:cf:87:8e:2e:71:f7:f2:3e:f9:3a:34:d9:36:
                    cd:18:7c:35:ab:e3:53:c4:c3:2d:4c:62:16:cb:7b:
                    ec:51:11:48:35:9c:08:b9:5e:d0:a8:ed:14:98:14:
                    7c:58:f3:31:0e:47:c9:b1:c9:0c:0b:b4:0b:d4:86:
                    2e:f7:69:1d:f9:b8:c1:aa:8b:2e:69:32:93:6c:68:
                    8f:2a:47:55:c3:91:26:c5:34:e0:68:c9:38:81:23:
                    ed:e0:8f:b6:3b:8e:4f:d5:a2:33:9d:f0:b5:83:e0:
                    10:5b:b9:a4:e8:41:06:c7:4b:df:cb:02:f2:93:17:
                    27:03:73:c1:ef:9f:22:17:34:33:16:54:24:c8:b7:
                    c3:b6:22:6d:e7:b8:ea:0b:89:ae:7f:c2:c4:22:a2:
                    de:3b:0a:5a:0a:df:18:d6:52:f9:e6:87:f1:ca:22:
                    ea:40:05:80:b2:2d:c4:29:79:9c:65:02:64:13:d0:
                    43:5c:fe:f8:7b:f1:e6:5b:b8:4d:28:80:55:b3:32:
                    5d:c9:88:67:ab:1e:62:3c:a0:28:8e:7a:11:63:b1:
                    db:63:66:bd:70:f5:c1:49:7e:b4:e9:11:ba:19:32:
                    fe:94:48:2c:18:5e:b8:0c:14:58:58:d9:6d:de:d3:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:15:29:33:90:86:65:13:37:18:65:D1:E2:76:89:2B:3C:5A:41:00
            X509v3 Authority Key Identifier:
                keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e302e302f32332d3234203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:51:48:b7:51:41:4a:a4:84:fc:55:27:fe:86:98:80:d7:
         08:45:e1:07:e1:9a:cb:a0:3e:be:a0:ce:70:94:bc:10:de:9d:
         f1:56:49:91:10:5f:22:90:f3:29:d1:2e:19:fc:91:60:cc:b3:
         7f:e8:61:ee:0f:ec:05:02:95:16:2c:3e:a0:df:aa:00:d4:d0:
         78:28:31:de:38:78:c8:60:8b:85:2f:39:2d:0c:8c:5b:53:c5:
         62:d4:1a:63:2b:ef:49:03:00:3d:6b:b2:1c:2a:27:6b:69:1f:
         60:33:35:66:b4:7a:68:e9:ee:97:b5:83:49:6c:7d:05:99:8d:
         5a:86:3e:e0:4d:d7:52:6b:b5:c5:23:1b:7c:15:0c:6f:40:52:
         65:64:b7:1e:e0:af:50:32:2f:9e:9f:eb:d0:9d:7a:8a:28:2a:
         d5:ea:3e:ed:f2:f8:b7:50:3a:07:8a:13:c8:01:77:c6:d3:4a:
         74:6e:9f:ff:f3:75:41:e6:cd:cb:4a:78:d8:ac:67:a6:dd:cd:
         4f:9d:ed:c9:e5:61:0e:81:ef:62:6c:35:0c:71:e9:c1:ae:a4:
         2d:b1:b8:6b:97:d3:de:56:ad:c4:60:e5:2a:98:d5:d9:bd:96:
         51:5a:58:cc:ca:63:a8:c1:f5:6e:92:ff:09:c4:e9:d4:cf:cb:
         07:ba:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org