Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa
File:                     3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa (raw, json)
Hash identifier:          ov0sQSyrM65oiVtkSHqAySR/Fiv8MLGchlnLwSfWhmI=
Subject key identifier:   68:3D:21:1B:DF:1B:78:18:1C:C5:FA:87:75:55:C2:F1:5C:96:47:51
Certificate issuer:       /CN=A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C
Certificate serial:       62F5E5757420BF6E7905ACB140C8BDCCD810E399
Authority key identifier: A3:C4:E7:D2:04:36:2B:3A:03:17:6A:CF:88:4F:C0:B9:1E:9D:FE:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa
Signing time:             Fri 30 Aug 2024 20:17:40 +0000
ROA not before:           Fri 30 Aug 2024 20:12:40 +0000
ROA not after:            Fri 29 Aug 2025 20:17:40 +0000
asID:                     262644
IP address blocks:        167.249.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.crl
                          rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f5:e5:75:74:20:bf:6e:79:05:ac:b1:40:c8:bd:cc:d8:10:e3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C
        Validity
            Not Before: Aug 30 20:12:40 2024 GMT
            Not After : Aug 29 20:17:40 2025 GMT
        Subject: CN=683D211BDF1B78181CC5FA877555C2F15C964751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:20:aa:fa:67:f6:79:b6:cf:8b:f8:52:19:
                    65:a8:c9:7e:25:32:b7:ff:aa:48:d2:85:05:33:57:
                    a5:c5:06:56:fb:96:ce:fb:3d:3b:3e:84:8d:3e:27:
                    42:c5:bd:44:fa:be:0b:74:69:ef:90:4d:57:a2:b9:
                    ce:97:9b:f5:1e:62:dc:fc:7b:7c:30:f7:c9:d3:61:
                    5c:d4:f9:9c:53:30:97:65:f8:74:ed:90:43:7a:2f:
                    c3:09:09:1d:e0:ad:18:2a:4e:eb:07:9b:64:7e:dc:
                    2c:af:ba:53:ad:e1:c7:9a:eb:82:81:aa:a2:11:27:
                    78:3b:81:45:52:af:1d:d8:25:91:80:5f:71:11:c1:
                    00:bc:ef:88:88:9b:01:c9:15:b4:8e:c6:f5:e6:21:
                    9e:ae:15:58:15:15:6e:79:08:ab:a3:dd:d2:cd:39:
                    65:2f:79:f4:56:2b:25:2d:79:75:92:ee:a9:ad:6b:
                    a2:76:5e:e5:6c:2c:a3:f6:0d:d2:72:2a:f5:1d:10:
                    90:8c:99:e7:7f:f2:5f:fd:15:25:98:f5:f1:5b:59:
                    71:82:6c:23:c8:4c:5b:15:2a:0c:de:13:a6:93:5a:
                    d0:cb:af:ba:bb:96:9f:bf:05:ff:92:fc:4d:47:a3:
                    e3:b4:c6:41:ad:8d:b0:8e:11:f4:ff:2f:57:6d:56:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:21:1B:DF:1B:78:18:1C:C5:FA:87:75:55:C2:F1:5C:96:47:51
            X509v3 Authority Key Identifier:
                keyid:A3:C4:E7:D2:04:36:2B:3A:03:17:6A:CF:88:4F:C0:B9:1E:9D:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:63:2a:d8:44:f3:16:3b:96:21:40:c7:27:e0:35:7a:eb:
         2e:43:ea:5c:0c:f3:6b:a1:83:e3:54:0d:76:56:78:e6:fb:ff:
         84:b0:e5:08:b6:4b:39:89:43:45:58:52:7b:60:78:24:b9:c0:
         e1:af:a8:7b:f2:df:34:cf:20:bb:45:1b:52:a6:1f:fd:0e:cf:
         1f:9c:06:b4:c5:5a:25:9d:b6:87:a5:9c:5c:8e:13:c8:61:fa:
         19:f7:3c:29:db:33:2d:21:1d:1a:70:72:07:79:6f:57:23:41:
         81:82:31:3c:a3:52:b0:54:d2:38:d3:56:79:3f:a3:e3:11:5f:
         2c:de:4b:8a:34:c2:5c:be:37:6a:41:57:ed:d4:f6:f7:d7:16:
         49:6a:01:e6:9d:26:fd:1d:39:a4:1f:b5:74:cf:9b:16:02:c5:
         42:3d:40:f5:22:93:a7:c5:3c:d6:80:35:1e:29:b6:d5:97:a1:
         8b:44:ae:56:52:d3:83:fb:1b:0b:aa:fc:79:e2:d5:bf:27:5d:
         84:a4:c8:c9:21:a2:d9:cf:92:66:a0:fa:b6:62:fe:88:18:f9:
         82:1e:1c:9e:a4:f5:82:2d:08:fc:7d:04:20:70:45:da:3f:2e:
         5b:39:0e:36:81:93:3d:b6:95:49:5f:86:7c:35:f0:6e:e2:93:
         72:39:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:59 2024 by rpki-client on console-fra.rpki-client.org