Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130352e302f32342d3234203d3e20323632333532.roa
File:                     3137302e3234362e3130352e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          fyqCNUCng75oU9eZiNiwfCxsC2jnL0phqC65OXen7oE=
Subject key identifier:   E5:FD:AD:B0:9B:EA:60:36:DF:6F:73:07:F8:8D:A8:38:AB:D5:32:BA
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       3B5E7A93D188F4915A30820C88921408AA040074
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130352e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 22 Oct 2024 20:23:55 +0000
ROA not before:           Tue 22 Oct 2024 20:18:55 +0000
ROA not after:            Tue 21 Oct 2025 20:23:55 +0000
asID:                     262352
IP address blocks:        170.246.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:7a:93:d1:88:f4:91:5a:30:82:0c:88:92:14:08:aa:04:00:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 22 20:18:55 2024 GMT
            Not After : Oct 21 20:23:55 2025 GMT
        Subject: CN=E5FDADB09BEA6036DF6F7307F88DA838ABD532BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:63:1a:ef:04:01:21:38:b0:dd:fb:63:f7:
                    4b:0f:ca:bd:48:52:fe:d7:a1:c6:13:c1:ca:43:cc:
                    d9:21:65:3c:34:80:2f:2f:1a:e7:54:b1:fc:1f:01:
                    33:6e:46:01:b5:81:c9:75:e3:0d:7c:b6:be:17:76:
                    f3:b7:73:f9:a2:d4:36:f5:cb:38:34:9e:ef:4b:a6:
                    47:76:ae:9a:ef:70:40:a6:3c:30:45:33:23:e7:f0:
                    6b:12:c3:f3:f5:f3:29:af:fb:84:d7:fe:ce:7f:01:
                    56:7b:99:be:0e:ba:0a:0d:3d:00:22:5a:13:16:eb:
                    10:90:7f:ad:65:46:a3:8c:d7:a3:c0:54:d0:a0:62:
                    7f:d0:89:8d:78:25:7b:15:3e:0b:55:a4:67:7d:3c:
                    68:83:ff:a2:56:f9:d6:81:ab:1b:f4:a1:95:fb:31:
                    97:a9:82:7e:38:b5:aa:97:5a:b7:e2:59:88:f9:5a:
                    f9:22:27:86:c8:aa:fe:f6:20:68:c0:65:3e:2d:e2:
                    68:cd:7d:6a:c6:5f:21:a0:9c:37:c6:f8:17:f9:4e:
                    23:78:ce:f6:a6:f8:6c:0f:ea:4e:7b:c1:6b:30:21:
                    aa:f1:2f:8d:78:10:51:9f:e0:32:ea:39:cb:38:19:
                    27:b9:6f:25:8f:44:ed:35:0e:d8:bf:9e:89:98:5d:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FD:AD:B0:9B:EA:60:36:DF:6F:73:07:F8:8D:A8:38:AB:D5:32:BA
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130352e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:00:e8:68:5a:b4:cf:a8:be:11:e9:e5:67:1a:86:a6:4b:
         ed:c0:65:a9:60:a1:03:bb:84:e7:c7:5f:43:cd:d4:f7:70:72:
         71:5c:8e:62:81:a3:25:86:7e:d9:39:53:94:79:02:c0:84:92:
         7a:9a:8c:21:ec:53:04:fb:72:0e:cf:c8:92:46:06:ac:b5:fa:
         de:55:78:33:f6:76:b6:aa:43:0e:86:75:06:35:7f:f4:5f:88:
         f1:ad:fd:17:d2:fe:d6:7e:12:d7:8f:ca:69:94:03:b2:10:15:
         3e:df:55:5e:c3:b2:84:65:00:1d:cd:1f:39:fc:e1:51:fa:80:
         3b:5e:94:27:af:57:35:eb:4c:13:74:f1:98:51:4c:9a:41:16:
         91:cc:eb:2d:77:f1:3d:dd:19:e9:40:a3:bb:b1:5b:d3:cd:0f:
         c7:c9:19:65:df:09:92:91:0e:37:d8:15:5a:8a:5b:e0:27:1f:
         c9:c5:78:33:46:fd:1f:45:0b:13:35:bd:14:21:f2:be:fa:ef:
         86:d5:d5:ec:f3:6c:97:28:e2:9f:41:7c:10:70:c1:e1:ab:b4:
         9f:3c:dc:f9:71:5d:91:eb:45:c8:43:b5:fa:da:62:ab:10:44:
         6d:88:93:50:b4:c6:f8:19:a4:e0:36:f6:d7:5d:39:88:ae:9e:
         80:ea:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:51 2024 by rpki-client on console-ams.rpki-client.org