Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          kAGxIKrZCfTlHMeozoGnwGDMjOg4C2LBzelYOu5YHaw=
Subject key identifier:   28:A2:98:A0:D2:55:2E:E2:94:44:26:28:73:6F:75:7C:B6:C7:DC:AD
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       530E85047E6BFE815FCDCA23E3B75CD79156806F
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa
Signing time:             Thu 26 Dec 2024 11:37:35 +0000
ROA not before:           Thu 26 Dec 2024 11:32:35 +0000
ROA not after:            Thu 25 Dec 2025 11:37:35 +0000
asID:                     267513
IP address blocks:        168.194.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0e:85:04:7e:6b:fe:81:5f:cd:ca:23:e3:b7:5c:d7:91:56:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 26 11:32:35 2024 GMT
            Not After : Dec 25 11:37:35 2025 GMT
        Subject: CN=28A298A0D2552EE294442628736F757CB6C7DCAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:40:bd:ea:db:99:66:e2:7a:db:a8:8c:42:
                    b1:d8:d6:eb:ff:2e:8c:39:0d:6d:ba:cc:cb:94:89:
                    ad:1f:28:97:88:03:07:2a:2c:92:7c:72:8e:e4:de:
                    e9:5a:80:18:5b:da:1f:7e:da:69:39:c3:5b:d2:9c:
                    4b:6b:8b:30:3a:09:b2:a2:ee:92:d7:2b:51:c1:e3:
                    25:ea:20:cc:a3:0a:92:a7:7c:28:42:ec:fc:ff:00:
                    ba:63:b7:fe:8b:98:b0:83:5b:27:41:2a:6c:1a:b5:
                    2e:ef:35:b4:7f:39:4e:2d:27:99:7f:f6:c7:04:07:
                    8b:c6:22:dd:d0:e2:67:d8:1c:fe:c3:a0:7c:5e:6f:
                    c9:02:12:cd:50:40:4c:44:8a:93:95:e1:4b:3a:5d:
                    e9:75:97:ca:08:a7:ab:70:33:b3:2b:c1:bd:db:b9:
                    cf:04:66:85:71:cf:32:54:70:89:69:2d:e6:d0:e6:
                    a4:fa:18:64:26:be:7d:c6:5c:a0:b5:19:a7:bb:ae:
                    ea:84:6a:5d:06:3d:fa:08:d2:e5:06:27:cb:8c:87:
                    25:f9:19:b8:ad:36:5d:e4:e5:4b:df:5d:56:78:6e:
                    e1:24:eb:13:74:87:c0:b5:23:23:a4:d2:73:47:6f:
                    dd:03:b6:94:1b:c3:a9:b4:3b:a5:13:af:26:51:ae:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A2:98:A0:D2:55:2E:E2:94:44:26:28:73:6F:75:7C:B6:C7:DC:AD
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:3d:8f:c5:0a:f4:3d:9a:2a:53:71:ac:d9:06:5d:16:d4:
         48:c6:f5:76:66:5f:82:b5:f1:20:66:87:b3:00:62:00:5c:c0:
         36:8a:9b:5d:e8:f3:15:c6:53:e0:07:12:5b:fa:c8:63:ac:13:
         b4:77:f4:13:28:ed:5c:8e:0c:fa:f9:c4:65:9c:f5:e1:6e:2f:
         00:a9:83:dc:96:ca:8b:03:bd:f8:0c:56:29:56:ad:54:a0:d4:
         45:28:f6:72:8d:8b:3d:71:74:28:99:d9:96:2a:75:d6:84:d0:
         2d:8e:ff:88:fd:a8:f1:9c:f0:fd:68:c0:55:9e:c3:ae:2a:0d:
         c9:db:c4:62:92:5a:02:ec:56:8f:f6:6e:36:d6:d4:c3:97:c6:
         a4:92:ca:af:df:ee:0b:c1:c9:51:ef:34:d3:86:53:7c:75:52:
         51:cc:48:f4:4e:b3:61:a3:ee:18:e0:34:54:a1:bc:71:21:0d:
         38:96:7f:a5:ac:9b:0b:81:46:29:67:dc:97:5e:1b:52:06:35:
         56:8c:75:e8:c0:cb:7d:b6:3e:e5:7c:8e:c2:7f:01:c3:4d:3f:
         cc:31:d8:98:a1:3c:01:08:fd:ca:81:d3:73:b7:15:64:0a:96:
         0e:17:c5:f9:dd:9c:4b:d8:3e:12:a6:fa:2d:f2:f5:20:26:b7:
         00:46:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:30:41 2025 by rpki-client