Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136352e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136352e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          ny1A870EXRvsVSMM2hcAgoWiGPWpGVUYbGgMGEqT9yw=
Subject key identifier:   6B:E4:E8:B8:14:37:F5:28:20:8A:CE:E7:4C:FF:6C:3C:25:1B:22:9B
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       3D95E064CB752F7B486FCB88578E2201D0278AE5
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136352e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 18 Aug 2024 14:43:22 +0000
ROA not before:           Sun 18 Aug 2024 14:38:22 +0000
ROA not after:            Sun 17 Aug 2025 14:43:22 +0000
asID:                     266196
IP address blocks:        191.6.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:e0:64:cb:75:2f:7b:48:6f:cb:88:57:8e:22:01:d0:27:8a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Aug 18 14:38:22 2024 GMT
            Not After : Aug 17 14:43:22 2025 GMT
        Subject: CN=6BE4E8B81437F528208ACEE74CFF6C3C251B229B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:90:af:87:dd:10:27:58:91:ae:a9:fa:30:
                    1b:20:cf:7f:43:2e:5c:28:ba:b6:5f:a9:83:9e:53:
                    d8:4f:dd:a4:2d:27:27:3e:f9:d2:e4:5e:22:b9:18:
                    34:11:de:0e:b4:72:9f:5a:02:dd:6d:f8:f8:15:01:
                    00:70:f1:92:cf:00:c9:5e:9f:67:9b:2d:25:0d:1a:
                    0b:13:34:61:20:a5:d5:25:43:1e:61:ab:03:30:52:
                    68:f2:62:8c:8c:37:bf:be:03:e0:c2:e8:61:a9:8a:
                    37:44:82:01:a6:ab:02:3f:70:06:75:f6:ec:ba:31:
                    86:2b:be:31:fe:6c:fd:1a:4b:1c:3c:e0:33:54:7f:
                    83:32:28:3a:b7:47:26:dd:b4:9e:80:cd:18:df:75:
                    c1:1c:f3:7f:06:80:78:1b:34:87:3f:6d:2a:65:3b:
                    e0:a8:89:62:dd:53:5c:82:83:05:23:4c:d8:f4:ff:
                    d2:03:f6:14:9f:10:bc:76:76:4a:39:12:01:95:72:
                    5b:8f:3e:d6:c0:f0:ae:0b:b3:45:ea:4b:88:91:2d:
                    7e:75:55:6d:c0:7a:33:87:e9:78:22:2b:e3:b7:cc:
                    92:6e:a2:cf:4d:c9:b4:49:8d:79:4d:be:d2:c9:06:
                    98:3f:8a:b0:a5:60:2c:6f:4f:4c:df:b4:fc:6e:d7:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E4:E8:B8:14:37:F5:28:20:8A:CE:E7:4C:FF:6C:3C:25:1B:22:9B
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136352e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:53:bd:88:31:a0:2e:f5:6c:6c:4a:14:0d:21:da:18:b3:
         dd:aa:bc:0b:af:07:31:0c:94:77:d7:b8:99:c4:47:81:9e:13:
         7b:f0:2c:e3:0d:40:52:3a:ff:43:27:96:67:25:0e:73:e2:64:
         98:27:78:6b:35:af:10:9f:47:0c:4a:da:63:66:17:5e:58:2d:
         04:62:97:54:e2:1c:07:3f:e9:a1:d2:63:55:3b:d3:cf:54:34:
         5e:e4:af:22:02:79:a7:48:7d:14:26:7b:4f:1f:8a:06:0e:0d:
         c0:6e:56:83:65:e2:e1:1c:30:e8:06:2a:e8:66:a2:30:5a:13:
         47:64:b4:0a:a7:4d:e7:c2:15:a3:fa:08:77:7b:5c:9c:ea:f1:
         8b:d7:c0:1e:4a:cb:c9:e4:bf:c9:61:dc:f6:c2:e2:6a:32:04:
         8d:c9:1c:a6:16:f6:0a:b3:67:b7:85:aa:45:ef:94:5f:a1:50:
         b2:aa:20:40:43:bb:dc:2d:31:85:b7:7c:51:a5:d8:06:ab:c2:
         44:3b:71:42:54:5c:ff:96:43:69:b8:1f:19:f9:29:39:4b:72:
         3e:c1:81:12:a4:5c:b6:2c:60:0b:b1:79:51:92:60:ac:e1:2e:
         b2:31:0c:01:2e:8d:e1:e8:56:d8:9c:f5:24:35:23:7f:21:22:
         62:22:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:59 2024 by rpki-client on console-ams.rpki-client.org