Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/3136342e3136332e3130332e302f32342d3332203d3e20323635393939.roa
File:                     3136342e3136332e3130332e302f32342d3332203d3e20323635393939.roa (raw, json)
Hash identifier:          OOLjN9jMMutqhV+KNVhYnCzRjEGqGqjULYxqrUzE+00=
Subject key identifier:   29:57:D4:92:E0:7E:82:C6:E0:48:20:B5:59:3C:3D:37:0C:3A:BD:10
Certificate issuer:       /CN=00044362B7DB59038E4F921646D20D1238A45262
Certificate serial:       28A447133FD9714612D1BFD2A6016A9A4D1C9CFF
Authority key identifier: 00:04:43:62:B7:DB:59:03:8E:4F:92:16:46:D2:0D:12:38:A4:52:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00044362B7DB59038E4F921646D20D1238A45262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/3136342e3136332e3130332e302f32342d3332203d3e20323635393939.roa
Signing time:             Sat 18 May 2024 11:38:56 +0000
ROA not before:           Sat 18 May 2024 11:33:56 +0000
ROA not after:            Sat 17 May 2025 11:38:56 +0000
asID:                     265999
IP address blocks:        164.163.103.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/00044362B7DB59038E4F921646D20D1238A45262.crl
                          rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/00044362B7DB59038E4F921646D20D1238A45262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00044362B7DB59038E4F921646D20D1238A45262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a4:47:13:3f:d9:71:46:12:d1:bf:d2:a6:01:6a:9a:4d:1c:9c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00044362B7DB59038E4F921646D20D1238A45262
        Validity
            Not Before: May 18 11:33:56 2024 GMT
            Not After : May 17 11:38:56 2025 GMT
        Subject: CN=2957D492E07E82C6E04820B5593C3D370C3ABD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:3f:3e:3f:1a:34:06:e8:95:97:11:d7:29:
                    8f:26:0d:ed:b9:22:c4:83:a9:84:4a:10:28:45:13:
                    d4:cd:31:15:57:c1:8a:ac:a0:14:50:a7:de:92:29:
                    f7:1d:f6:48:a5:7b:93:60:df:1b:ed:23:8a:69:5b:
                    dc:d8:36:ab:a7:90:61:1b:27:1c:1f:6a:25:25:70:
                    88:60:9f:62:f5:42:5b:31:c9:28:5a:45:b5:77:2e:
                    c7:f9:41:93:fe:56:95:da:fa:c3:0d:4d:29:ea:98:
                    c0:a1:b2:d7:ff:65:b2:e1:2e:0a:4b:70:1b:76:dd:
                    33:99:5d:72:71:85:64:70:fd:de:cf:52:3d:ed:df:
                    76:87:ba:1c:e9:d6:13:a4:2e:15:ad:1c:65:64:c8:
                    1b:ba:a2:03:ed:74:0c:1b:4b:d2:85:5c:6b:b1:75:
                    22:fb:16:2a:e1:22:0b:0c:10:ff:93:44:ac:c2:db:
                    75:1d:99:7f:5b:32:70:16:7a:bb:e8:5a:43:1c:68:
                    c5:67:70:12:4f:ec:d6:5c:eb:a8:cb:27:d0:20:72:
                    3e:44:66:5e:b1:37:43:14:2d:15:37:2a:74:7b:cf:
                    dd:e3:0b:5d:70:e6:0f:89:5f:aa:3b:bc:d0:0c:0e:
                    df:92:86:7b:9e:04:e2:fa:fe:e3:81:15:5d:7f:e2:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:57:D4:92:E0:7E:82:C6:E0:48:20:B5:59:3C:3D:37:0C:3A:BD:10
            X509v3 Authority Key Identifier:
                keyid:00:04:43:62:B7:DB:59:03:8E:4F:92:16:46:D2:0D:12:38:A4:52:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/00044362B7DB59038E4F921646D20D1238A45262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00044362B7DB59038E4F921646D20D1238A45262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/3136342e3136332e3130332e302f32342d3332203d3e20323635393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:71:30:3d:44:5e:12:e7:a7:55:29:e8:0a:12:e6:cc:f3:
         da:1d:bb:fc:48:a6:a2:ea:e5:e7:99:da:de:e1:94:47:e2:44:
         5b:05:b5:61:a7:72:f5:b2:26:dc:38:93:d5:18:45:25:97:b8:
         4e:f2:bc:9d:09:75:cb:77:97:9e:87:c9:f4:bf:53:33:87:10:
         12:1b:83:5d:dd:90:ee:c0:47:8c:ef:30:7f:bd:fa:43:ac:3e:
         53:86:e0:64:45:93:37:49:43:c6:fd:a9:13:c6:37:5c:b0:57:
         bd:1f:85:cd:32:e9:72:d5:98:71:c1:45:71:f9:97:21:6e:e9:
         8b:83:e2:ef:ee:b7:3d:5b:c7:32:75:b6:b7:2e:25:35:66:d8:
         8c:4e:a3:d6:3b:b6:63:86:a7:72:ea:62:61:64:00:a1:db:86:
         7e:6e:cc:49:49:6c:79:a0:50:6f:70:46:e5:a2:ca:35:3d:c1:
         f5:16:11:2f:48:3c:77:c4:42:20:81:0c:58:79:bd:90:76:46:
         cd:26:4b:c6:69:96:57:5e:a0:1c:5f:7e:4e:d5:38:1e:ac:c1:
         c3:0b:77:0a:48:10:52:ce:ef:16:3f:cd:a5:76:23:ec:99:11:
         65:a7:e2:8f:41:2f:7f:c7:0f:c3:7d:bb:01:f0:75:9e:ea:4a:
         e6:ea:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:39 2024 by rpki-client on console-ams.rpki-client.org