Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e39312e302f32342d3234203d3e20323634313131.roa
File:                     3136382e3139362e39312e302f32342d3234203d3e20323634313131.roa (raw, json)
Hash identifier:          fhb/hc138CgbkKyKnQw73A6BnmS01E+e4xIjmaLGhrU=
Subject key identifier:   5C:FE:DB:11:0B:03:B2:FF:14:5C:6E:C1:4F:46:56:74:22:E0:82:2D
Certificate issuer:       /CN=732008C67B67B29496E25CA0E43402A0B56D183A
Certificate serial:       6D4A087049EB16C21470E8EC637B490383CECDCF
Authority key identifier: 73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e39312e302f32342d3234203d3e20323634313131.roa
Signing time:             Tue 30 Apr 2024 14:29:47 +0000
ROA not before:           Tue 30 Apr 2024 14:24:47 +0000
ROA not after:            Tue 29 Apr 2025 14:29:47 +0000
asID:                     264111
IP address blocks:        168.196.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl
                          rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4a:08:70:49:eb:16:c2:14:70:e8:ec:63:7b:49:03:83:ce:cd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732008C67B67B29496E25CA0E43402A0B56D183A
        Validity
            Not Before: Apr 30 14:24:47 2024 GMT
            Not After : Apr 29 14:29:47 2025 GMT
        Subject: CN=5CFEDB110B03B2FF145C6EC14F46567422E0822D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:d2:a2:a4:3b:c1:11:a9:d4:dc:c9:41:3c:
                    83:67:54:16:3e:bc:29:8c:ce:c6:8b:b1:c0:ad:b4:
                    ac:70:34:a8:e2:62:b8:7e:24:4b:5f:86:bf:f4:32:
                    93:04:0c:0d:7e:0a:d7:5d:fa:78:74:db:4f:a2:d4:
                    05:bb:d8:87:04:f6:4d:a5:c0:3a:bb:d2:fd:0c:75:
                    1b:a3:de:91:d6:07:87:a0:e1:10:fb:ea:01:f5:8a:
                    a0:ad:8a:d7:9c:d2:3c:55:96:80:23:ea:46:ee:be:
                    86:92:c1:13:8b:d4:cd:69:ab:a0:2a:41:05:4b:c2:
                    80:47:fb:fb:0f:fd:b2:1f:b8:74:38:da:89:db:3f:
                    1b:cd:7d:f2:86:1e:bb:5a:05:a1:66:45:34:9b:c4:
                    05:7e:e2:91:70:4e:1b:23:38:ae:1f:f1:23:2a:cc:
                    ab:c8:9f:46:53:50:73:9b:9d:a2:31:8c:b2:14:0a:
                    c7:51:16:07:4e:5b:ec:d1:08:da:d2:17:b1:c8:76:
                    8d:e4:c3:c6:e9:df:dc:95:5a:df:02:26:40:8b:2e:
                    b6:ff:f2:24:3b:ed:ea:f8:5f:64:4a:fc:63:b1:e5:
                    70:0a:ad:09:28:72:3f:f8:1d:0c:f0:90:ac:16:10:
                    bd:d3:8a:b8:4e:97:4c:4a:ad:0a:5a:78:c9:e6:b4:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:DB:11:0B:03:B2:FF:14:5C:6E:C1:4F:46:56:74:22:E0:82:2D
            X509v3 Authority Key Identifier:
                keyid:73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e39312e302f32342d3234203d3e20323634313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:e1:a0:52:d6:33:01:ac:cc:bd:5f:97:5e:43:cb:a1:02:
         57:6e:c6:ae:cf:a7:cc:5d:8e:44:83:3c:54:fa:5e:9c:f3:67:
         68:74:91:25:e9:3b:df:cf:90:0e:3a:f7:b4:9e:84:17:9b:70:
         84:0e:92:cc:a9:60:ac:27:1d:24:0c:fe:f3:d5:26:ac:7e:4d:
         06:22:4b:4f:48:c3:e9:dc:d3:f9:93:df:93:56:27:80:45:49:
         be:d5:37:60:b2:85:62:04:38:e4:71:08:3f:ca:a9:b2:7b:35:
         d5:7e:5c:61:3b:89:4b:29:36:52:3a:6c:8b:c6:a9:27:75:e4:
         15:3f:e2:a1:9f:06:11:ed:91:4d:d7:e4:1a:23:d4:5f:27:42:
         08:67:46:97:24:50:9f:f0:28:dd:41:f0:90:19:42:06:41:f8:
         87:73:0e:71:a4:cc:ef:b0:19:0a:0e:6e:db:3e:31:a3:dd:59:
         5a:26:88:d0:0b:9c:d8:b1:08:20:8f:10:f7:37:a4:da:49:d7:
         d7:12:30:75:39:ea:16:96:9b:09:69:10:ee:d8:eb:4d:52:c8:
         a6:32:a6:04:9b:23:49:d9:cf:16:0c:fc:eb:b1:4b:76:3d:e6:
         6d:ef:ea:dc:18:41:c1:63:2f:2b:76:f1:de:5c:47:81:94:04:
         03:84:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:22 2024 by rpki-client on console-ams.rpki-client.org