Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          iJX5RDy/lmk5kq77Jok6CuTvDQqAxsz39tE96nPGb/g=
Subject key identifier:   09:0E:E9:30:5F:C6:78:40:87:07:B9:22:D1:20:8F:86:23:C3:EA:43
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5493E178660E9C46F798E98234F216DD3DF4E768
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:26 +0000
ROA not before:           Thu 04 Apr 2024 15:18:26 +0000
ROA not after:            Thu 03 Apr 2025 15:23:26 +0000
asID:                     262352
IP address blocks:        170.246.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:e1:78:66:0e:9c:46:f7:98:e9:82:34:f2:16:dd:3d:f4:e7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:26 2024 GMT
            Not After : Apr  3 15:23:26 2025 GMT
        Subject: CN=090EE9305FC678408707B922D1208F8623C3EA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a9:76:1f:5f:c3:41:37:a7:41:ee:4f:1b:0a:
                    41:c9:59:4f:2a:f9:af:57:6c:44:51:7d:61:29:95:
                    11:b9:9b:0f:99:71:6f:6d:4d:2a:ac:07:ce:03:ee:
                    ef:92:62:1a:26:96:59:da:98:8d:4f:65:99:d8:ef:
                    d4:19:7d:82:4a:75:7f:01:24:b0:46:56:e0:b0:10:
                    b1:b9:dd:e4:29:7b:cb:d0:9d:a4:b2:7d:c8:94:2d:
                    de:36:c7:c2:cc:56:b6:18:77:5a:60:e6:65:60:25:
                    22:55:b9:65:0d:e2:1b:18:59:c1:88:df:c2:ef:a3:
                    63:ad:98:ff:cd:3b:8b:e6:9c:d0:b7:14:80:f3:02:
                    11:08:66:e2:91:e8:52:fb:f1:5e:8e:e3:7f:8e:32:
                    34:14:a2:7c:c9:a3:4e:13:25:5b:12:6c:ce:8c:aa:
                    81:01:1c:80:86:46:98:63:9d:4c:0c:97:4f:cc:17:
                    30:38:63:61:40:0d:eb:5c:62:2a:e3:dc:48:58:d1:
                    31:40:be:08:76:68:51:70:49:aa:a1:c2:a7:34:5a:
                    60:92:37:26:7a:5b:82:52:14:65:65:d9:a5:15:74:
                    e3:cb:2f:da:35:f5:b5:5a:08:23:0f:66:c2:3a:59:
                    bd:f4:1f:c2:19:9a:14:38:db:69:3e:1e:14:59:c7:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0E:E9:30:5F:C6:78:40:87:07:B9:22:D1:20:8F:86:23:C3:EA:43
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:b8:bb:90:9a:1c:a0:75:a5:ba:48:25:9c:49:22:21:eb:
         ee:77:fe:7d:d3:c0:de:0d:b0:69:d6:2c:23:bf:8e:be:81:ba:
         83:da:0c:20:d9:10:ba:0e:32:7b:dc:2e:2c:74:45:44:c6:01:
         8b:49:ab:a7:9b:44:9d:92:5c:1f:59:b4:0e:19:80:56:a2:2e:
         c5:b1:18:db:aa:af:a9:79:3b:b6:b4:2c:81:10:0b:29:36:b2:
         00:78:5b:ff:fb:63:8b:7d:54:8c:92:41:da:74:44:24:d6:73:
         67:1a:83:e7:4b:a9:6a:a0:f6:9e:33:c1:ab:ac:87:d7:bf:a5:
         d0:ad:57:4f:33:5c:d4:9e:05:6b:b8:48:c9:47:76:52:d1:ab:
         af:5a:41:20:93:42:f8:91:8d:62:ca:de:aa:03:8a:6f:25:ab:
         dc:02:f1:5d:b6:bf:a9:d7:57:54:75:2e:2f:46:89:6b:1e:9c:
         96:2f:84:74:18:cb:57:76:53:ff:87:d6:10:2b:50:c7:97:bc:
         e7:ae:3f:97:ab:f0:8e:7b:67:ff:8e:4c:f4:24:50:71:49:8a:
         16:dc:14:b7:7d:54:72:88:fb:1e:4b:ec:be:fc:a8:e2:04:f9:
         44:ad:fb:bf:ed:8c:f4:80:f7:cf:14:17:2c:09:24:2f:b3:29:
         b1:34:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:19 2024 by rpki-client on console-fra.rpki-client.org