Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136342e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          AUr6v+0RzWSDK/5PxmEKwf5cIeUhYV6uyrvXZ5ky6aw=
Subject key identifier:   89:D7:BD:66:08:98:8A:6C:34:4A:94:87:47:E7:65:F2:49:10:E3:DE
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       076E2C65262937EC21583E36E3E9485769C45D8D
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
Signing time:             Wed 14 Aug 2024 11:54:38 +0000
ROA not before:           Wed 14 Aug 2024 11:49:38 +0000
ROA not after:            Wed 13 Aug 2025 11:54:38 +0000
asID:                     266196
IP address blocks:        191.6.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6e:2c:65:26:29:37:ec:21:58:3e:36:e3:e9:48:57:69:c4:5d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Aug 14 11:49:38 2024 GMT
            Not After : Aug 13 11:54:38 2025 GMT
        Subject: CN=89D7BD6608988A6C344A948747E765F24910E3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:a2:2e:ea:5c:d0:46:d4:1f:b7:7f:27:c2:
                    1a:1b:07:80:b7:7c:57:ac:5e:c0:65:f4:58:a9:2a:
                    92:f2:40:5c:ff:e4:f8:4b:68:92:bd:e4:b5:2b:b2:
                    95:3e:7b:a8:6a:dc:b9:d5:5a:0e:72:c7:4c:8c:f4:
                    02:9f:87:b3:8d:ff:9e:e8:cc:b1:9c:7d:68:95:4b:
                    c9:c1:5e:68:d0:18:72:b3:b5:fc:8c:74:2b:5f:a2:
                    72:72:a1:df:bd:cc:16:b5:7d:94:f4:e9:10:1e:8c:
                    59:52:d1:06:52:0f:cb:45:9a:0a:8f:75:b8:1b:6f:
                    fa:d0:7a:d8:73:0f:fa:1b:45:44:15:a3:25:a8:26:
                    ae:c9:53:33:e9:99:22:93:06:b9:ca:fb:06:fd:3c:
                    6a:f9:06:e4:99:1b:1a:14:9a:85:2e:cb:49:b2:b5:
                    70:80:94:1f:2e:6d:26:51:56:7d:00:a7:9e:89:7a:
                    ce:b2:9b:fe:5f:48:14:c1:d2:78:02:23:e8:31:2c:
                    f0:f7:66:b7:13:d1:9b:fc:bb:0c:26:51:41:7c:10:
                    01:ce:3f:b7:03:d8:44:9d:d3:f5:35:81:41:17:d9:
                    93:cf:c4:3e:38:a1:4e:bb:6c:f4:60:da:fc:3a:5a:
                    5a:48:eb:74:fb:f5:6d:7a:86:b1:e7:20:28:e5:82:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D7:BD:66:08:98:8A:6C:34:4A:94:87:47:E7:65:F2:49:10:E3:DE
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:17:32:da:4b:00:8b:c9:f2:0c:90:e9:e3:65:ce:ec:93:
         2f:9e:20:00:55:96:6a:c1:97:3b:e7:a3:32:41:1b:e3:d5:b0:
         7a:21:6a:cd:8a:ae:f4:5f:78:f4:c9:b0:a3:e4:e9:09:30:29:
         a0:9b:62:63:67:b4:00:8d:e3:d0:51:a7:f4:41:e7:63:b6:df:
         e2:da:d7:7f:80:f2:88:f5:d5:ce:10:88:ad:51:ea:49:32:64:
         74:1d:6b:de:03:de:5c:9c:30:eb:4e:4d:5b:a9:dc:fc:cd:c8:
         ac:64:59:41:fe:62:12:ca:b0:9f:b8:45:57:18:49:24:57:d2:
         2e:62:d8:3a:50:18:d5:07:b8:28:24:8e:b7:28:3b:08:a8:ad:
         55:6b:fe:63:ba:44:10:70:60:fa:b9:b7:9c:ee:c6:e1:11:99:
         c9:8d:77:e6:d5:98:86:78:93:40:3b:73:f8:0e:bd:bf:dc:de:
         a9:99:03:22:f1:2c:0e:a8:a4:f5:0f:7f:26:63:d3:67:a8:85:
         16:37:f9:e8:99:ea:bc:a8:34:c0:a0:8e:32:b7:8c:a5:73:59:
         e0:5a:a8:5d:62:c7:f2:ac:b9:96:6d:b6:de:c1:2e:d7:24:7d:
         c2:d2:34:b5:c4:2b:50:cb:ea:77:6d:1b:05:2c:5d:e9:0b:e5:
         d4:d6:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:59 2024 by rpki-client on console-ams.rpki-client.org