Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/3136382e3138312e3137312e302f32342d3234203d3e20323635333338.roa
File:                     3136382e3138312e3137312e302f32342d3234203d3e20323635333338.roa (raw, json)
Hash identifier:          hHDIgwwJwj5AoED0TFiG3N5XMVQOnL0S4x1LUJZ5RkA=
Subject key identifier:   F5:16:F1:4A:1A:89:D3:4C:C4:35:F1:84:D4:DD:7A:1A:88:74:70:B4
Certificate issuer:       /CN=54246B97AAFA16155E3EF41BE71027C68641702A
Certificate serial:       54BF1BEC8687D41A43C0629A9FDDDA9BB3B25CFC
Authority key identifier: 54:24:6B:97:AA:FA:16:15:5E:3E:F4:1B:E7:10:27:C6:86:41:70:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54246B97AAFA16155E3EF41BE71027C68641702A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/3136382e3138312e3137312e302f32342d3234203d3e20323635333338.roa
Signing time:             Sat 27 Jul 2024 16:41:26 +0000
ROA not before:           Sat 27 Jul 2024 16:36:26 +0000
ROA not after:            Sat 26 Jul 2025 16:41:26 +0000
asID:                     265338
IP address blocks:        168.181.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/54246B97AAFA16155E3EF41BE71027C68641702A.crl
                          rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/54246B97AAFA16155E3EF41BE71027C68641702A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54246B97AAFA16155E3EF41BE71027C68641702A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bf:1b:ec:86:87:d4:1a:43:c0:62:9a:9f:dd:da:9b:b3:b2:5c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54246B97AAFA16155E3EF41BE71027C68641702A
        Validity
            Not Before: Jul 27 16:36:26 2024 GMT
            Not After : Jul 26 16:41:26 2025 GMT
        Subject: CN=F516F14A1A89D34CC435F184D4DD7A1A887470B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:1f:7a:eb:ef:d7:6d:04:28:42:c7:a9:e0:
                    db:72:a2:c8:24:58:a3:9e:d7:f7:9e:b1:a4:9d:71:
                    db:1d:f8:06:0a:5c:7c:27:e2:0f:91:f7:ac:c8:81:
                    72:6d:09:d3:0f:de:9f:16:ef:c2:c6:c7:7c:84:5f:
                    7e:7c:76:ef:2f:d9:3d:cd:ff:d7:dc:79:5f:02:5e:
                    b6:6b:b5:b9:e3:ea:eb:be:e4:b9:ba:a4:26:16:ee:
                    73:1b:8a:21:1e:e7:c1:16:63:d4:19:ff:ab:68:3d:
                    6b:17:8a:88:5e:01:bd:0a:3c:b7:23:7b:ac:ed:1b:
                    84:5d:bb:f6:4d:94:ae:0e:92:4f:db:4c:49:94:14:
                    25:de:8e:70:da:03:26:11:67:28:98:0a:07:09:b4:
                    60:d3:87:1c:59:d2:89:99:ae:a2:19:0b:d9:a8:cb:
                    a4:14:76:4c:37:e7:7f:5c:b9:ab:0b:94:96:45:e9:
                    55:03:e3:ce:5f:66:dd:4f:8a:2b:9c:6f:be:45:f8:
                    c1:66:64:36:ab:a8:c3:58:62:86:a4:5d:d1:e2:45:
                    00:45:49:50:8e:49:be:6b:a6:b2:ab:45:18:4b:69:
                    69:f6:21:64:cd:85:a0:03:08:ed:bc:d8:d4:9b:d9:
                    66:78:b1:8b:5f:c2:0e:e9:e4:a3:50:4c:88:43:89:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:F1:4A:1A:89:D3:4C:C4:35:F1:84:D4:DD:7A:1A:88:74:70:B4
            X509v3 Authority Key Identifier:
                keyid:54:24:6B:97:AA:FA:16:15:5E:3E:F4:1B:E7:10:27:C6:86:41:70:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/54246B97AAFA16155E3EF41BE71027C68641702A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54246B97AAFA16155E3EF41BE71027C68641702A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/3136382e3138312e3137312e302f32342d3234203d3e20323635333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:99:aa:e3:96:d1:2e:c5:74:8c:7e:59:34:ef:25:19:55:eb:
         f1:c8:fe:76:75:6a:5e:3f:83:27:66:57:d0:03:4d:a2:ad:73:
         3e:7b:ed:ee:dd:2a:7c:75:92:19:ff:17:22:3a:44:62:22:f6:
         db:a8:6a:bc:2e:c3:15:3e:e9:1d:64:a3:85:a9:19:8b:f8:e9:
         a8:9b:d6:e5:ea:04:7a:fa:cd:27:2e:db:c8:2d:ed:ac:92:81:
         d1:56:6f:c4:d1:c5:28:7d:e8:8e:5e:b4:d5:9d:d5:b0:9e:c5:
         b5:e3:f7:a8:dd:30:bd:5e:b5:48:cd:d9:30:33:da:ca:48:1b:
         65:1c:ac:01:c3:11:79:90:59:53:ec:81:cb:96:8b:8d:7a:c2:
         1b:0f:66:10:6b:c5:e6:1c:b3:3e:56:67:d1:83:2c:d5:c8:35:
         5d:6e:7e:ca:cf:3c:45:ce:ec:bf:d1:01:36:75:cf:dd:55:7d:
         6b:de:4c:5d:7e:78:5c:11:4b:38:d3:65:1e:bc:66:b5:ef:46:
         3d:a4:29:79:70:b1:83:6d:c8:5e:da:85:c9:7e:99:30:8a:29:
         e2:5f:97:12:ca:2b:b8:7e:ea:cb:41:13:6b:b3:93:96:40:f8:
         4a:0b:b4:8c:30:f3:dc:e6:99:e5:cd:b1:4a:31:d3:6d:c3:f8:
         3f:81:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org