Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          d/iJfVih5r21UtsnWdjSEFNRwLKlm0+j8GHf3zhmIxw=
Subject key identifier:   75:66:AA:F1:9B:CB:64:A1:51:FD:A6:33:1B:B9:D6:FC:1C:63:82:71
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       4BFB756FC1DB019D95506E54E2411F6BEE598C5F
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa
Signing time:             Mon 01 Jul 2024 20:54:55 +0000
ROA not before:           Mon 01 Jul 2024 20:49:55 +0000
ROA not after:            Mon 30 Jun 2025 20:54:55 +0000
asID:                     267513
IP address blocks:        168.194.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fb:75:6f:c1:db:01:9d:95:50:6e:54:e2:41:1f:6b:ee:59:8c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Jul  1 20:49:55 2024 GMT
            Not After : Jun 30 20:54:55 2025 GMT
        Subject: CN=7566AAF19BCB64A151FDA6331BB9D6FC1C638271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:97:c6:eb:b0:c8:12:50:4d:38:c8:c1:fc:
                    5f:17:1d:d6:c7:33:45:c6:fd:7c:c5:7a:11:82:06:
                    34:99:38:4a:50:96:b4:4b:4c:fe:88:84:16:f4:1a:
                    c3:85:ee:30:82:1f:1c:68:86:29:73:ba:90:fc:1d:
                    b2:38:a9:54:cc:8f:62:46:32:25:36:0d:1d:7f:7d:
                    57:38:f0:a8:ec:52:4a:87:75:4d:b5:3a:92:bb:7a:
                    0c:28:35:d7:0d:36:f5:d2:ce:d6:cb:e4:4b:8b:ef:
                    75:4a:79:b3:a8:ab:54:da:b9:b9:fc:ea:79:fc:3f:
                    a7:7e:17:46:40:8f:9f:dd:42:ed:db:c2:7e:43:42:
                    c0:09:52:d9:50:36:18:f0:b8:05:36:d3:e4:ef:08:
                    51:97:39:c1:27:c2:ea:7e:a0:6b:54:70:6a:8a:bc:
                    f2:a2:10:60:79:02:0f:64:38:f8:d4:3a:d2:18:1a:
                    a1:18:ca:36:ec:f8:3b:8b:04:cb:ac:e6:3e:b8:b6:
                    b5:70:f9:7f:86:2a:44:1f:8c:aa:15:7e:86:a0:47:
                    4a:a1:b0:5c:a9:f6:ba:9a:5b:98:38:ba:e4:21:fd:
                    d4:f4:b7:e3:6d:32:56:5f:a2:f0:23:35:42:4e:c9:
                    96:e6:f3:16:d5:1e:09:a5:39:c7:31:53:53:d1:d1:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:AA:F1:9B:CB:64:A1:51:FD:A6:33:1B:B9:D6:FC:1C:63:82:71
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:26:c9:b1:3e:f6:f6:c1:83:a9:14:6d:25:3f:92:cd:9e:72:
         90:05:fb:74:d4:e5:7e:ee:d8:0b:94:7c:f2:24:08:3e:56:d0:
         6b:3f:71:1d:04:b8:07:c9:e8:02:7a:ef:65:36:bd:34:f3:6e:
         66:16:30:4f:f3:a4:5b:23:12:8a:13:5d:94:46:c4:ff:39:f5:
         fd:1d:ef:45:76:4a:b5:c9:2a:4d:e5:63:88:df:dd:05:26:6d:
         f2:ba:e0:95:08:93:32:87:d3:b5:4a:11:49:da:98:1b:4f:4f:
         77:18:4a:5d:ad:0b:fe:1a:f7:5c:1a:ab:00:86:5a:f4:2d:e9:
         c0:c3:d3:e1:fd:46:aa:2b:de:c0:b0:c1:e0:76:2f:b1:86:65:
         e2:b6:2d:27:9b:32:c0:7b:7c:d2:53:3a:c3:6c:1c:6f:36:0b:
         69:b0:39:7c:8d:d6:69:be:10:da:17:72:ec:f2:ba:6c:df:9c:
         19:e8:a0:b8:84:d2:4d:f9:c4:b4:bb:4c:b7:57:ac:27:d1:3e:
         53:67:3e:0f:80:0f:be:77:fc:00:c7:35:f4:88:9d:b4:13:cd:
         7b:c2:c9:75:75:bc:86:d2:a4:43:07:63:d9:6a:6b:dc:59:67:
         3f:9e:2f:02:12:15:c9:35:1f:1e:11:75:86:4e:94:5b:94:12:
         1f:02:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org