Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa
File:                     3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (raw, json)
Hash identifier:          EKaVZ3AXi5s07l+FMOXw+AGcib+Sj0Qj22leWSg9Gfs=
Subject key identifier:   44:E4:81:2D:AD:28:2C:E4:FC:EF:77:06:A3:3C:34:19:8C:3F:98:4D
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       44D4127348F7497DBEE0E0F272A93C94F41FDCF5
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa
Signing time:             Fri 17 May 2024 14:38:42 +0000
ROA not before:           Fri 17 May 2024 14:33:42 +0000
ROA not after:            Fri 16 May 2025 14:38:42 +0000
asID:                     265173
IP address blocks:        167.249.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d4:12:73:48:f7:49:7d:be:e0:e0:f2:72:a9:3c:94:f4:1f:dc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: May 17 14:33:42 2024 GMT
            Not After : May 16 14:38:42 2025 GMT
        Subject: CN=44E4812DAD282CE4FCEF7706A33C34198C3F984D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:9d:75:e0:73:01:88:6e:05:46:d8:54:e9:
                    db:94:79:96:61:b5:6b:98:7d:e2:16:b9:46:cb:28:
                    91:38:71:81:d4:f7:55:f7:0b:53:d3:52:fb:b2:ea:
                    d4:f6:bc:e0:29:56:0d:81:f8:9f:52:db:67:9b:98:
                    68:cd:e4:ec:f9:8e:08:17:a9:d6:6a:f2:ba:9d:30:
                    d4:1a:6b:cf:07:e8:65:13:6a:b1:3d:39:f5:5e:40:
                    22:c9:86:b9:38:f8:14:3a:f4:27:1f:4f:4c:e1:08:
                    8e:f4:1d:46:dd:4a:89:71:14:2d:d6:f0:32:83:a6:
                    92:f8:07:23:aa:34:10:ee:df:33:fc:b8:d7:4c:04:
                    ba:14:b1:e0:d5:1f:3f:7f:94:45:64:ab:d4:ac:7d:
                    34:8b:8e:07:cf:49:8e:5f:80:57:4d:a9:4c:d7:55:
                    e4:55:8f:4d:0d:6e:d4:e7:b7:ab:ca:30:e9:42:db:
                    56:48:98:fc:eb:3d:5e:42:ba:20:84:bc:60:20:12:
                    47:20:33:fc:90:b7:72:d1:2b:6e:ad:3b:12:59:54:
                    be:df:08:5c:99:34:ce:f4:1e:95:b1:78:07:d2:9d:
                    bb:b8:1f:a1:5a:a1:8b:a5:3f:e8:09:2b:88:53:55:
                    3a:8e:10:50:17:9a:e1:47:89:64:84:fb:b4:f2:bd:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E4:81:2D:AD:28:2C:E4:FC:EF:77:06:A3:3C:34:19:8C:3F:98:4D
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:ef:d7:58:f0:59:d2:15:16:c0:ad:87:e2:3e:1d:a3:2c:
         3b:28:c1:aa:2e:11:5b:c8:0a:b8:fb:25:60:c5:25:c8:6b:78:
         e0:80:8c:9a:e2:fd:0b:e6:fc:b9:58:cf:a8:93:7f:f9:df:4a:
         db:24:6e:b9:84:50:e1:30:37:ea:63:81:7b:c0:59:66:2f:00:
         e9:cd:c3:e4:09:da:c5:02:88:a4:b7:1a:9c:87:21:31:1d:8d:
         49:aa:50:1b:a5:bf:e0:38:2f:6f:0a:57:67:7f:aa:09:a9:f3:
         65:c7:a8:4f:c0:48:6c:aa:6e:6a:92:24:11:7e:54:10:71:97:
         25:35:bd:b0:2a:ca:f2:c8:d5:8e:d6:f9:1d:fa:8e:b8:4c:07:
         2a:bd:e4:47:d7:43:93:11:1b:b4:07:69:aa:58:5f:4f:67:4c:
         6e:70:0a:3d:5f:f1:3d:45:a4:f5:e5:79:c2:a8:16:47:d4:b4:
         7a:86:4e:6e:62:f4:dc:2d:29:29:09:32:43:82:4e:58:86:29:
         1a:96:29:fd:06:02:17:7f:e9:fc:e9:ec:29:97:2a:e3:5b:4e:
         f5:f2:2f:dc:06:a0:68:91:1e:ca:86:6c:5b:d9:2a:bf:06:b2:
         4d:04:b8:44:70:79:8f:41:4e:b4:80:94:f0:a4:9c:51:97:3d:
         64:24:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org