Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa
File:                     3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          Krzyu7gM0Pkbs3pswW4qtlopqnbjbWmM2DJ/LHlM+f4=
Subject key identifier:   10:5D:E6:77:A9:46:06:6C:D3:BE:DD:50:21:01:8C:06:A2:97:2F:F8
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       575895E5D032EFFB3D06104EBCCFC435712A3B80
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa
Signing time:             Thu 04 Apr 2024 22:03:20 +0000
ROA not before:           Thu 04 Apr 2024 21:58:20 +0000
ROA not after:            Thu 03 Apr 2025 22:03:20 +0000
asID:                     265377
IP address blocks:        168.194.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:58:95:e5:d0:32:ef:fb:3d:06:10:4e:bc:cf:c4:35:71:2a:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  4 21:58:20 2024 GMT
            Not After : Apr  3 22:03:20 2025 GMT
        Subject: CN=105DE677A946066CD3BEDD5021018C06A2972FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:f9:de:66:b4:fe:ca:ed:0a:45:68:8a:94:
                    f6:c5:03:d2:f7:fa:d3:1a:a6:ca:85:e9:b9:85:bb:
                    4b:3b:fe:99:71:dd:13:25:af:06:ea:ac:93:f5:c3:
                    3e:68:af:09:3b:90:3c:d5:cf:b8:89:ee:ba:ba:46:
                    dc:15:e1:b3:94:f8:59:6e:d5:de:40:45:73:cd:83:
                    c4:07:84:b6:7f:3d:16:a9:05:35:4c:f1:98:c9:ee:
                    a5:d1:25:54:c0:46:c2:32:50:70:95:78:c3:c8:1c:
                    58:04:92:c0:56:ec:ee:6d:8e:9b:3d:80:cb:8c:6a:
                    a9:90:24:99:65:46:9d:0f:65:76:90:5a:c7:77:70:
                    7b:22:61:87:08:00:69:ae:cf:50:cb:08:4e:90:da:
                    a8:d2:d3:f4:f7:74:11:1e:27:a6:1c:09:a0:7c:8c:
                    d2:7f:bf:15:4e:61:ad:8a:6a:90:c1:13:56:00:27:
                    a8:10:8d:e1:81:e2:2f:a7:7f:26:0f:f8:7f:4f:ee:
                    c5:7b:1c:a9:f5:13:28:7e:1a:02:60:b9:1e:ac:e5:
                    23:11:4e:0f:68:50:a0:7c:6c:87:6d:59:6c:90:6a:
                    92:90:d5:06:a6:1f:df:0a:08:4a:cf:4d:2b:c8:6d:
                    63:5c:09:8b:ba:24:21:81:ce:d9:21:01:49:f6:04:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:E6:77:A9:46:06:6C:D3:BE:DD:50:21:01:8C:06:A2:97:2F:F8
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31332e302f32342d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:63:25:84:9d:b7:92:ab:57:0e:62:82:ae:e0:00:dc:89:41:
         30:4e:16:20:3e:20:e8:70:d6:19:f7:b2:16:db:df:e9:c8:66:
         ca:5f:18:87:0d:33:6a:94:dc:0a:f2:34:e2:6e:82:0a:f2:f1:
         f2:26:06:c7:c5:f9:26:2a:b9:1d:ea:9f:e5:ec:bc:1c:c7:0d:
         87:f6:87:4d:3b:c6:71:1e:38:6d:2d:ff:58:0c:53:e5:47:6c:
         1f:38:99:1f:4b:b1:07:83:ab:08:ee:a7:f9:16:c3:74:5d:cd:
         87:d8:45:0e:53:15:85:b3:c3:aa:67:d4:91:3d:95:e0:6e:43:
         b9:9c:1d:97:10:53:44:d9:02:9c:d8:6b:92:3a:bf:d4:ce:ac:
         71:75:e6:a4:3e:40:9a:80:52:82:8a:f9:dc:ef:e7:26:a0:2c:
         b0:ae:60:d8:9b:30:15:0d:1c:9c:9e:3a:7b:6e:1b:8c:f8:15:
         f8:51:41:63:2d:53:2b:bd:3b:1e:21:34:a9:a8:63:1c:93:99:
         91:a9:ca:29:a6:c8:44:69:8a:92:1d:a8:56:02:75:88:03:bf:
         62:df:96:fc:8b:f6:fb:8f:f7:2a:a2:10:d8:ce:5f:d1:cf:1b:
         50:bd:7b:9b:1f:2d:dd:cf:50:ce:5c:ee:b1:64:29:04:f4:29:
         cb:af:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:07 2024 by rpki-client on console-ams.rpki-client.org