Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa
File:                     3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          KMC3vXCdNXHbh6GzfZPa2csm9REWCNjJBV2Ulv8T6ho=
Subject key identifier:   4D:C0:0C:73:9A:28:88:6B:3F:8B:20:D5:9A:2C:F6:83:A1:2C:86:11
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       7EC23B83DAB09AA9523455FD2AC7F017832BD117
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa
Signing time:             Thu 04 Apr 2024 17:56:44 +0000
ROA not before:           Thu 04 Apr 2024 17:51:44 +0000
ROA not after:            Thu 03 Apr 2025 17:56:44 +0000
asID:                     263078
IP address blocks:        186.233.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:3b:83:da:b0:9a:a9:52:34:55:fd:2a:c7:f0:17:83:2b:d1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Apr  4 17:51:44 2024 GMT
            Not After : Apr  3 17:56:44 2025 GMT
        Subject: CN=4DC00C739A28886B3F8B20D59A2CF683A12C8611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:2b:49:2a:68:51:92:38:ac:88:48:3f:cb:
                    f6:c1:64:12:7c:83:0e:4b:be:38:cd:47:b3:c1:13:
                    41:c2:a1:14:c1:18:e8:d0:4d:12:a9:9f:93:f8:9e:
                    23:37:ab:ce:b5:e1:29:93:27:51:f0:eb:83:9d:81:
                    46:97:57:a0:e5:f2:b1:4d:16:c7:1f:d3:6f:d7:88:
                    56:4c:a8:5c:c5:16:6c:19:a4:e6:6e:92:6c:4f:8d:
                    21:cc:82:2e:3b:3f:6b:f2:37:8d:8f:97:2a:30:9e:
                    e4:6d:a4:9d:31:d8:05:68:ac:e5:06:a9:2a:f9:cf:
                    00:27:c7:b0:80:83:83:7e:b1:03:36:2d:d8:fc:19:
                    93:fd:c6:ef:33:42:3d:5c:52:84:66:1a:e9:b6:48:
                    eb:d4:00:2b:df:49:f2:d8:ba:0b:22:b7:35:82:88:
                    df:c6:27:17:e2:bb:2a:d6:3e:f2:fa:36:83:d1:62:
                    13:26:a1:b6:2d:bb:bf:1f:2e:7d:c9:4e:7a:92:b5:
                    ea:33:f9:6d:c8:cd:78:7b:ee:a9:ea:da:c1:9e:15:
                    1a:31:ba:61:bf:f4:b3:23:3e:74:1a:cd:f4:a0:f1:
                    b5:c2:fe:1a:61:ac:df:fd:32:69:e7:48:d3:a5:09:
                    e2:6a:b9:6d:53:d5:29:51:65:51:7f:c7:14:8d:42:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:0C:73:9A:28:88:6B:3F:8B:20:D5:9A:2C:F6:83:A1:2C:86:11
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8d:a4:17:ce:36:18:01:09:21:35:53:74:5c:b2:87:91:cb:
         ca:42:d7:a9:78:62:ee:b3:86:3c:55:93:d4:8b:04:ea:e9:90:
         f3:31:19:c9:05:b0:dd:cc:b6:1e:d0:94:f2:48:be:b4:90:14:
         58:ea:14:dd:ef:47:e9:22:d9:59:b9:75:bc:5f:2f:4b:91:0f:
         27:d5:4c:c4:fe:e6:04:51:39:a9:be:fc:fa:2b:de:da:1d:61:
         ae:9f:d8:be:fa:fa:12:37:c9:84:c7:47:38:14:3f:43:c9:fb:
         f8:88:cb:af:5f:3c:c0:ae:c9:36:3f:1f:ea:ab:a7:f6:9f:f3:
         2c:af:88:5b:ad:36:9b:e4:6b:53:7a:0e:58:dd:d5:8c:63:b3:
         76:8d:6c:83:99:d1:f7:39:57:82:c5:9c:03:65:36:93:2f:4b:
         d2:2a:04:6c:f9:22:55:22:28:bc:21:6c:6a:30:ab:22:c0:99:
         cc:a0:02:6f:b7:f6:7d:63:2f:6d:77:fc:a0:1f:f0:a3:10:2d:
         b5:79:01:d6:54:08:f3:0e:ca:91:8c:10:6f:1c:83:c8:43:e5:
         1d:0b:43:a5:45:5a:93:68:60:10:02:d4:e6:50:aa:38:b9:dd:
         0e:38:0c:cd:de:f9:ba:50:b8:45:60:cb:7d:a8:1d:ba:19:fc:
         26:44:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org