Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35382e302f32332d3233203d3e20323637353133.roa
File:                     3136382e3139342e35382e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          bEE1o07mdqJtAxPSy0HgNz7kPUBHGIUd44pz6lKxbVw=
Subject key identifier:   F1:ED:34:78:45:49:5F:C9:4D:E2:FE:68:C8:3F:E4:72:EA:AC:F4:D5
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       770F09454269997D3664526ED63717618F736D35
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35382e302f32332d3233203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:49 +0000
ROA not before:           Thu 04 Apr 2024 18:03:49 +0000
ROA not after:            Thu 03 Apr 2025 18:08:49 +0000
asID:                     267513
IP address blocks:        168.194.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0f:09:45:42:69:99:7d:36:64:52:6e:d6:37:17:61:8f:73:6d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:49 2024 GMT
            Not After : Apr  3 18:08:49 2025 GMT
        Subject: CN=F1ED347845495FC94DE2FE68C83FE472EAACF4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:e0:64:3a:d1:d5:a5:67:45:57:16:cd:cb:
                    d3:51:3f:bc:bd:e1:51:82:e5:f1:34:61:b6:9b:de:
                    6c:55:e2:48:8e:bf:b2:cc:d8:67:e6:47:43:44:7f:
                    14:c5:2e:e4:f2:75:68:6d:d3:51:c6:d3:10:ad:71:
                    35:9f:11:3a:d0:5e:bb:56:36:59:8b:d7:b0:e4:cc:
                    71:92:9d:c6:60:65:a7:29:1b:4b:cb:de:cf:76:e5:
                    ef:11:84:1b:49:d1:bb:86:7d:c9:2c:ef:59:70:be:
                    62:81:f3:f3:a4:b1:33:cf:31:a0:9e:d1:92:5b:ea:
                    50:4d:42:67:b0:48:36:98:2a:1c:4b:bc:c0:cc:f1:
                    b3:24:3c:46:26:fc:cf:4f:97:a6:d9:63:c5:36:df:
                    2d:c1:5f:ce:20:9b:b2:2d:97:a2:63:82:64:5d:51:
                    68:68:24:e4:e8:0e:45:54:d6:1b:3e:d1:67:ab:2f:
                    38:b1:f5:d8:c3:25:0c:da:ef:cb:8b:29:c2:af:44:
                    7b:e8:73:b0:eb:35:17:43:32:a0:9e:d4:07:82:1c:
                    84:d6:03:88:f2:8c:1b:95:b5:72:4a:47:5e:05:b1:
                    7f:f3:63:0f:e7:c0:ea:34:6b:70:55:79:10:d5:1f:
                    95:c7:d9:ff:8b:c9:fc:55:cf:23:79:33:97:a4:f8:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:34:78:45:49:5F:C9:4D:E2:FE:68:C8:3F:E4:72:EA:AC:F4:D5
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35382e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:d4:c9:3d:ba:08:f3:e2:c1:8e:4e:65:b4:74:f9:58:3a:
         22:1f:23:a5:bd:ba:23:f4:0d:be:2f:a4:65:67:a5:50:af:51:
         30:16:bc:fc:54:ea:b7:15:cd:60:68:30:c7:b9:7b:e8:8a:78:
         e5:72:26:2a:2a:fc:63:75:90:66:5c:aa:e8:66:a1:fd:0f:e7:
         9e:ef:10:d2:89:72:6d:e8:69:75:a8:d5:63:2f:f8:6e:62:15:
         ee:ce:de:a5:b3:24:06:4a:db:5c:52:cc:4b:54:f1:dd:6b:92:
         ac:aa:0f:9b:05:62:02:de:bc:3b:64:62:64:a0:2a:cf:5c:d3:
         80:69:55:3f:ff:3d:31:4d:5c:b2:57:93:b4:ed:4a:e7:76:d8:
         57:2a:61:12:49:70:bc:a4:0b:df:e7:8d:41:f3:ef:fd:fb:86:
         2a:f1:2b:16:f7:ea:8e:6b:10:6e:21:ca:6a:35:41:0b:67:0b:
         cc:9c:42:d1:37:2c:90:c6:30:99:31:99:07:6b:6e:28:b6:ac:
         19:c3:e4:e0:2b:65:3e:ed:c8:d9:db:80:d3:d8:9d:a9:f7:03:
         21:dc:b2:fd:66:88:f9:12:5e:a1:36:fa:6f:26:21:23:2e:e0:
         c9:c4:ca:bb:15:66:2a:84:4c:50:99:da:2e:d1:b5:a4:f2:c4:
         d1:9d:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org