Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa
File:                     3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa (raw, json)
Hash identifier:          r6JBM7x8VeFYsNL+K9eMLIOZ1A/+o4DbcyXwQFI3/Vk=
Subject key identifier:   D5:4D:D4:2A:C4:D5:83:A5:78:0F:38:57:92:66:F5:9B:42:64:A4:1C
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       093C46F005B1FB4BC4623995B454CA4B5B1697A0
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa
Signing time:             Tue 04 Feb 2025 19:52:03 +0000
ROA not before:           Tue 04 Feb 2025 19:47:03 +0000
ROA not after:            Tue 03 Feb 2026 19:52:03 +0000
asID:                     265936
IP address blocks:        164.163.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
                          rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3c:46:f0:05:b1:fb:4b:c4:62:39:95:b4:54:ca:4b:5b:16:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Feb  4 19:47:03 2025 GMT
            Not After : Feb  3 19:52:03 2026 GMT
        Subject: CN=D54DD42AC4D583A5780F38579266F59B4264A41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:42:6c:18:ac:f1:04:70:d7:c7:41:bd:44:
                    88:fa:f1:0b:98:a4:4a:cc:d6:1c:02:b2:ca:0d:32:
                    84:e9:78:ad:61:72:47:20:a8:08:ff:f9:f0:14:1f:
                    3d:77:42:4f:53:ea:15:8d:bc:30:3c:bc:b9:37:a3:
                    31:03:de:86:c0:ff:39:82:e5:d7:6f:48:c8:56:3b:
                    6a:00:ba:73:37:00:65:c4:e1:d1:32:4c:4a:8c:c8:
                    59:f1:d6:6b:5b:63:b5:6e:78:ce:7d:77:3c:a0:d1:
                    19:8e:14:59:64:9a:c9:5b:52:7e:64:cc:84:9d:1b:
                    a6:22:6e:7e:ff:80:62:a1:d9:67:a5:ba:77:8f:72:
                    13:31:ed:db:44:8f:26:58:0a:d6:07:fc:3f:6c:ac:
                    b9:90:ff:28:7f:39:98:2e:8b:de:45:99:34:fe:ca:
                    63:14:7c:d7:49:a8:79:c0:d9:74:27:99:1d:f9:23:
                    da:0e:46:1a:f1:ce:19:09:d6:97:8e:c2:21:41:cc:
                    92:7a:3e:47:d9:7f:ba:81:8a:d4:1f:2a:a0:5e:a0:
                    ce:3b:f1:ad:bb:15:28:7b:08:09:6a:df:5b:08:14:
                    26:67:8c:30:77:ab:ca:24:ee:1d:5a:d0:88:1f:47:
                    2d:71:2d:b1:4c:29:d7:e9:a1:ca:7d:9f:8e:9c:87:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4D:D4:2A:C4:D5:83:A5:78:0F:38:57:92:66:F5:9B:42:64:A4:1C
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:70:2d:14:62:f7:b1:7d:c3:e2:9d:77:d8:d9:29:c6:71:e6:
         e7:b5:82:02:76:e4:23:9e:6d:c0:36:c7:24:1f:64:38:4f:2d:
         72:98:f9:a3:c0:30:00:c5:c4:89:5e:9b:b8:a6:cc:5f:55:83:
         e0:f1:48:31:f2:46:2a:f0:09:a2:72:af:cb:1b:ef:da:cd:e0:
         39:d4:33:34:b5:5a:af:fe:ae:a1:84:b6:c7:c8:79:2b:f8:b3:
         f3:a2:34:86:e7:e4:37:0c:ea:be:cf:30:d8:52:3e:07:ef:da:
         a3:e0:6d:3c:d5:b1:a4:c9:c8:de:a9:3f:94:fb:5d:d2:87:4e:
         77:bb:af:78:dd:b4:97:d9:83:44:b3:64:ed:22:d4:ad:8d:04:
         c0:bb:d8:32:cc:76:25:2a:3b:0f:23:3d:b3:40:59:37:d7:b9:
         89:14:5a:b1:25:07:d5:f7:d7:c0:63:50:1d:40:14:17:32:07:
         fd:a9:64:a6:b9:b9:2e:ae:9b:d0:c3:f6:3e:02:8e:e3:0e:06:
         f0:0f:e8:de:18:d5:31:96:71:16:79:15:8c:61:c1:ff:56:a1:
         c9:54:fa:30:98:65:66:42:35:90:25:f8:3b:25:10:27:c6:cb:
         e8:13:a2:80:61:b0:c7:2a:08:b1:3e:ab:61:37:3b:d6:1b:ec:
         43:de:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:37 2025 by rpki-client