Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136372e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          Rbg4SPkZPihLWRrJpRL6B5xWK2jfa7RIh7zOpaooiV4=
Subject key identifier:   96:8E:32:31:50:64:B0:04:AF:65:49:62:17:8F:5B:AB:53:E3:39:6C
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       456EB2D2044760F3668857251BCAEFA53AD04FF1
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 18 Aug 2024 14:43:33 +0000
ROA not before:           Sun 18 Aug 2024 14:38:33 +0000
ROA not after:            Sun 17 Aug 2025 14:43:33 +0000
asID:                     266196
IP address blocks:        191.6.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6e:b2:d2:04:47:60:f3:66:88:57:25:1b:ca:ef:a5:3a:d0:4f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Aug 18 14:38:33 2024 GMT
            Not After : Aug 17 14:43:33 2025 GMT
        Subject: CN=968E32315064B004AF654962178F5BAB53E3396C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:cf:6c:36:ed:eb:09:74:59:2c:f8:18:92:
                    13:03:18:58:69:83:1f:e6:0a:81:93:b5:bf:48:a6:
                    02:7e:3a:42:4f:37:b8:4e:f3:05:33:53:60:88:c2:
                    ff:87:3c:5c:cf:70:87:ba:8c:4f:f2:75:c3:5f:05:
                    f3:5b:8e:b7:36:4f:79:2d:7e:75:6d:7a:da:ef:6d:
                    e5:98:68:25:0b:b6:72:2f:73:ce:66:75:ae:e7:16:
                    81:40:20:34:44:01:5e:3b:94:88:85:c7:de:9f:88:
                    10:3b:5d:56:f5:12:03:7f:69:de:36:d0:82:3b:23:
                    99:8d:c7:d6:84:a6:a8:46:f5:6c:6f:a9:24:c1:04:
                    14:7c:b5:86:ce:19:86:ac:d2:7c:5b:6b:b9:29:4f:
                    8e:4f:09:19:86:88:60:6c:a4:69:4b:64:3c:f9:5c:
                    1c:08:ed:56:65:98:c8:33:7c:9d:56:3c:e5:12:af:
                    f9:49:e5:12:0f:01:55:14:02:49:72:b5:dc:5a:c9:
                    fa:e4:fc:7c:ae:05:6e:53:83:01:90:66:d2:02:27:
                    55:6c:5c:21:bb:b3:a7:82:e8:7d:67:f3:85:e9:3d:
                    b4:39:c9:8f:6a:58:45:3d:74:43:ee:31:2e:35:29:
                    6e:c0:a8:8b:b1:2d:9f:55:f6:3e:fe:b8:78:98:28:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:32:31:50:64:B0:04:AF:65:49:62:17:8F:5B:AB:53:E3:39:6C
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:22:ab:7f:a4:32:3f:e8:40:84:94:fb:4d:b4:35:d8:56:35:
         e8:99:09:94:35:31:58:5c:0d:56:cb:71:b3:8a:86:31:27:f9:
         0a:7d:17:28:25:b0:95:f7:9a:e2:c5:95:8d:93:8c:8b:3d:e8:
         09:d1:19:24:fd:a3:2e:d7:60:a3:2d:fd:77:15:3d:f4:5a:88:
         77:9b:5d:55:8a:42:fa:68:7b:a0:f6:31:ac:69:d4:c0:0e:6b:
         54:0b:bd:69:e1:ad:99:7f:13:49:33:5f:b7:98:5a:12:ab:84:
         5b:64:bf:ef:f4:6b:21:2e:cd:ca:69:28:15:ef:e1:c8:43:52:
         fc:b1:3b:0d:d5:5f:ac:dc:66:e9:24:3b:5f:ea:94:10:85:9f:
         fa:06:6b:cd:fe:8a:a0:0e:f4:b3:42:d9:5a:56:8d:4a:dc:ff:
         59:61:4a:2b:ce:2c:69:ba:5d:1d:df:92:c0:bf:9a:49:d4:0c:
         f6:4b:4d:da:38:6a:e8:af:05:a8:3d:de:85:08:85:18:75:80:
         94:3b:c3:b8:a3:97:6a:35:bf:e8:0e:f8:dc:3b:df:c3:d7:da:
         3a:36:47:28:01:60:a2:ab:9f:38:c6:c8:b0:54:fd:bf:b5:8a:
         9e:94:e9:3e:30:45:80:41:11:54:d6:13:c1:0b:36:46:86:fe:
         4e:97:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:59 2024 by rpki-client on console-ams.rpki-client.org