Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          C4uh0bHSyr5rXACHuNC6pmTFKdQCNjsLiiGS8AOgVEo=
Subject key identifier:   6F:12:6E:2F:B1:12:0B:A8:12:EA:E9:DD:66:03:C5:33:C9:47:BC:7B
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       6CBA8D8778479C433FECE4FDEE9FC369DEAF4845
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa
Signing time:             Thu 04 Apr 2024 22:03:19 +0000
ROA not before:           Thu 04 Apr 2024 21:58:19 +0000
ROA not after:            Thu 03 Apr 2025 22:03:19 +0000
asID:                     265377
IP address blocks:        168.194.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ba:8d:87:78:47:9c:43:3f:ec:e4:fd:ee:9f:c3:69:de:af:48:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  4 21:58:19 2024 GMT
            Not After : Apr  3 22:03:19 2025 GMT
        Subject: CN=6F126E2FB1120BA812EAE9DD6603C533C947BC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:66:ef:15:db:49:93:7e:e3:a3:6a:93:e0:
                    92:3b:86:76:b4:1c:e1:a6:20:7a:ca:88:89:5e:6e:
                    12:75:b4:15:25:64:eb:a3:c0:92:4d:df:80:bc:fa:
                    d3:0f:5e:af:2b:0e:e6:4f:4d:e7:f3:bf:56:9f:55:
                    0e:91:a8:10:14:fa:1e:f5:16:b7:56:82:82:dc:a0:
                    3c:b0:77:48:50:d0:d5:40:eb:23:3c:fb:5c:e2:f9:
                    23:e2:3d:b5:fd:f3:df:dd:de:08:de:8b:8c:13:dd:
                    d9:2f:fe:5e:21:95:3f:fc:a7:d5:01:1d:5e:4e:7d:
                    98:12:ba:c7:52:03:68:2a:7e:2b:49:05:4a:fc:c5:
                    35:31:1b:87:da:77:15:3c:47:6f:a8:d5:3f:f7:f2:
                    50:36:d5:15:3e:63:39:c5:b4:12:22:cc:75:57:88:
                    18:9f:93:2e:45:35:96:4a:c0:54:52:4c:46:64:36:
                    61:de:3c:09:8d:15:27:6f:af:5b:a7:c7:81:e4:9d:
                    fc:d4:6c:80:9c:29:49:14:e2:fd:ef:14:08:89:b8:
                    60:54:b6:c9:44:d3:76:31:f4:1f:c7:b2:7f:2e:bb:
                    92:49:0f:ce:6d:0d:b8:73:09:83:e2:09:16:8a:b9:
                    1f:a6:2b:ef:79:04:92:be:93:0e:ec:fa:b1:01:4e:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:6E:2F:B1:12:0B:A8:12:EA:E9:DD:66:03:C5:33:C9:47:BC:7B
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:18:40:ee:88:c4:ee:a1:bb:1f:4a:51:44:38:98:d9:70:f0:
         8c:ac:07:84:39:ac:4c:b0:28:a2:0d:f2:1e:97:9b:06:1c:37:
         10:42:1e:e2:0a:be:17:18:08:46:68:02:2c:52:43:09:91:b0:
         e7:d8:24:c1:5f:1f:33:92:ee:98:33:46:a2:9c:fe:0c:d6:d7:
         b6:7b:cc:a9:db:b7:67:27:6c:33:e9:02:0a:55:7d:f8:c8:29:
         15:30:ed:a0:67:18:bc:4a:d8:77:3f:9a:62:e1:4c:b7:ea:e8:
         5b:92:cd:96:ac:26:84:4e:74:0b:d0:9d:f5:3b:a7:7a:37:f4:
         d6:71:21:6f:81:8c:72:b0:e3:fc:0f:8d:51:72:a6:50:39:95:
         6f:5b:5b:b9:f6:86:7b:79:3f:53:34:05:71:8d:e0:b8:b2:c7:
         23:2a:a3:86:96:2b:f9:1c:a8:14:70:7d:cf:32:fa:f6:08:d9:
         3f:9e:8b:fd:97:77:85:c8:89:ad:55:df:c7:b5:05:e4:3b:85:
         31:d9:6d:77:e1:e3:47:96:6d:f6:3c:16:8d:62:df:89:35:cf:
         ff:a5:09:a4:2a:9d:79:e4:da:26:2b:86:e2:ef:54:95:6b:a9:
         f9:79:f5:b8:8f:b6:98:bc:0b:5f:61:29:3b:eb:51:a9:07:07:
         8e:50:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org