Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          xnpHTIXw5NOAsWCdZzalk0/kRTMqwFcZy+7og3ox6hc=
Subject key identifier:   79:8B:BB:61:AD:60:01:8B:B8:04:EA:07:E5:AF:26:75:E5:F8:E7:10
Certificate issuer:       /CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29
Certificate serial:       1B8E45AC1ED6BCA54EAEAC1E93A5B0BFA854A9D3
Authority key identifier: F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32342d3234203d3e20323633343833.roa
Signing time:             Mon 21 Oct 2024 15:47:11 +0000
ROA not before:           Mon 21 Oct 2024 15:42:11 +0000
ROA not after:            Mon 20 Oct 2025 15:47:11 +0000
asID:                     263483
IP address blocks:        168.0.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8e:45:ac:1e:d6:bc:a5:4e:ae:ac:1e:93:a5:b0:bf:a8:54:a9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29
        Validity
            Not Before: Oct 21 15:42:11 2024 GMT
            Not After : Oct 20 15:47:11 2025 GMT
        Subject: CN=798BBB61AD60018BB804EA07E5AF2675E5F8E710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:a8:66:e9:4c:5c:d3:9e:03:16:db:ab:1b:
                    7c:7e:10:a0:2d:d2:3e:80:39:13:c7:7b:4c:99:23:
                    06:e0:2d:94:d0:2a:cb:6b:21:87:8d:54:09:fb:39:
                    2f:54:ba:6e:98:fe:42:9e:56:a0:1d:86:98:06:24:
                    41:61:e6:74:44:65:c4:d9:2a:97:52:2b:cb:57:1b:
                    28:eb:a4:4b:f9:c7:b3:3f:a5:bf:e7:66:50:e6:21:
                    c5:00:21:bd:53:4f:f3:51:99:29:d9:f8:74:b7:e6:
                    9b:4b:7c:9d:b4:00:0c:f1:d7:69:71:68:c1:27:e3:
                    98:f6:bd:23:83:95:f7:89:4f:76:de:a3:10:2a:50:
                    c2:7c:d8:ac:b1:5d:e5:65:d3:41:51:a6:e5:15:d3:
                    1c:d5:ce:8a:5b:48:f7:11:44:4a:32:c4:92:b1:0e:
                    75:63:d1:0e:ee:78:58:86:6f:89:b2:ae:a3:ca:79:
                    c4:c0:41:39:25:97:0c:a1:88:b5:e2:05:53:7f:11:
                    f7:b4:4c:e9:4a:02:bb:7f:ff:89:99:54:f6:01:1b:
                    1e:f3:01:2a:bd:31:b9:86:f1:a7:07:30:79:8a:be:
                    90:75:46:03:3e:0b:49:34:0d:bd:35:a5:b2:9b:61:
                    06:2c:46:c9:63:9b:5f:25:b9:96:4d:ea:af:e0:5e:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:BB:61:AD:60:01:8B:B8:04:EA:07:E5:AF:26:75:E5:F8:E7:10
            X509v3 Authority Key Identifier:
                keyid:F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:29:90:76:02:f4:bc:14:f9:33:ea:09:21:ed:15:bd:65:
         d4:ef:e7:b1:f8:d8:20:e7:2c:98:38:93:e0:41:4f:a9:40:34:
         47:1d:85:f3:8d:c1:78:32:75:3d:2a:85:0e:70:4e:f5:a3:2a:
         6d:ac:d2:de:81:99:22:c0:fd:e5:2f:5a:82:d2:40:c2:e1:a1:
         c6:b3:b3:a9:7f:ea:7a:11:d7:e4:e1:16:67:3a:fe:a8:db:35:
         98:1b:7d:43:fc:23:c3:d4:f6:d5:b8:5f:c6:ce:fd:57:d9:9e:
         d3:ae:8d:b1:bb:46:3a:8d:34:98:13:52:df:80:8e:88:9b:36:
         7a:33:a8:b3:33:87:36:04:dc:5b:43:89:99:2e:71:b5:ae:f6:
         a2:d9:36:da:24:a7:c8:7b:c4:f2:af:bc:12:99:db:b9:5d:fc:
         1f:d1:eb:88:e5:50:4b:b0:d3:57:11:64:93:73:70:87:90:d5:
         d5:12:70:d4:4f:0b:97:48:b3:ab:58:97:01:20:3f:1a:2f:aa:
         c5:31:21:5a:fa:52:1d:a2:0b:d9:ed:32:e4:f8:38:62:79:28:
         b5:88:7e:e4:61:d2:bc:bc:9e:58:37:6d:19:63:3f:a3:e5:da:
         fe:1f:78:92:9a:1b:4d:51:6c:82:ab:83:6d:93:08:0d:1e:50:
         d4:73:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:30 2024 by rpki-client on console-fra.rpki-client.org