Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232362e302f32332d3233203d3e20323731363737.roa
File:                     3137302e3233312e3232362e302f32332d3233203d3e20323731363737.roa (raw, json)
Hash identifier:          tIFCE0UviqeC335KUk2DCZb5lKB7zs4JBL5xqsSP3UA=
Subject key identifier:   2C:59:3E:08:0C:F3:BE:83:A3:B9:21:52:0E:50:5E:45:BF:95:23:EC
Certificate issuer:       /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
Certificate serial:       1E7E4B5C00BBB893D5B0D2FE5C00B047B1D05AAA
Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232362e302f32332d3233203d3e20323731363737.roa
Signing time:             Tue 07 May 2024 19:23:23 +0000
ROA not before:           Tue 07 May 2024 19:18:23 +0000
ROA not after:            Tue 06 May 2025 19:23:23 +0000
asID:                     271677
IP address blocks:        170.231.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl
                          rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7e:4b:5c:00:bb:b8:93:d5:b0:d2:fe:5c:00:b0:47:b1:d0:5a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Validity
            Not Before: May  7 19:18:23 2024 GMT
            Not After : May  6 19:23:23 2025 GMT
        Subject: CN=2C593E080CF3BE83A3B921520E505E45BF9523EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:dc:82:73:aa:ca:c8:ab:2f:3b:4c:b0:f1:
                    98:69:0b:25:48:9f:3a:47:30:1a:ba:07:b9:90:c7:
                    17:86:23:15:c4:ea:00:c4:eb:f5:7b:f1:2d:88:48:
                    e9:23:60:38:0e:16:76:e4:61:90:6c:c3:be:ee:71:
                    17:3b:7f:92:6a:f6:fe:56:17:67:3b:2f:6a:63:dc:
                    46:75:c4:2d:41:e2:c0:e1:7e:de:ad:ec:68:56:0d:
                    c6:8e:4a:28:c1:ce:a6:9b:4b:a2:cb:07:ca:d0:59:
                    64:12:51:f2:7d:5b:97:5c:97:53:86:1a:08:f5:92:
                    c7:9a:53:8f:03:c7:c4:15:08:e1:d9:88:21:77:e3:
                    41:b1:64:c7:0c:e0:d9:46:c8:ae:cb:f3:77:d8:1f:
                    07:92:e9:c4:b3:4e:0c:9c:9a:2e:d2:6c:cf:55:c2:
                    3e:cf:d7:e0:0f:55:6b:1b:69:cc:cf:40:ec:2a:51:
                    3f:53:c8:55:76:96:58:95:67:0f:e9:10:f6:ac:07:
                    fb:d0:12:f4:91:a0:b4:c5:72:46:cd:50:71:28:58:
                    a2:bf:96:70:7f:49:86:b9:1b:2b:12:8a:5a:c9:7b:
                    28:ce:70:79:91:c4:69:59:f3:bb:75:29:b4:e8:39:
                    84:e7:c3:4f:56:8a:54:71:ab:6d:1f:ce:78:c8:6f:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:59:3E:08:0C:F3:BE:83:A3:B9:21:52:0E:50:5E:45:BF:95:23:EC
            X509v3 Authority Key Identifier:
                keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232362e302f32332d3233203d3e20323731363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:7c:23:dd:7c:9c:6e:0b:b0:b4:25:45:cf:0d:9a:83:6f:
         ab:a7:ca:6d:33:9c:e1:1a:38:49:39:00:0a:18:95:86:5d:90:
         01:12:43:5d:f3:6f:22:0b:29:04:9d:26:c9:02:7f:1e:e1:50:
         3b:8f:2a:7c:fe:05:8a:0a:ce:a8:76:93:04:98:cb:d0:7e:39:
         63:c1:26:3e:d2:24:b1:df:db:c5:ff:2f:e4:60:c0:b6:0d:4a:
         a8:0b:f9:a6:11:5c:5b:76:ed:0f:4d:e3:21:8d:3a:d4:f8:15:
         11:08:97:1c:1f:d5:a7:86:c2:8e:82:fc:7e:cf:03:fb:5e:45:
         ac:db:06:d2:87:5d:fe:6a:c9:0a:fc:d9:a3:a8:14:42:6a:b1:
         75:bd:e4:8c:29:32:d0:f0:4f:b3:36:ba:7f:55:07:95:66:62:
         a1:98:2b:2f:b2:36:61:6e:77:f5:61:c3:82:b2:8f:dc:d0:37:
         35:c6:81:6f:a5:c7:bb:47:fb:60:a4:5b:f7:c8:ea:1e:03:4b:
         0b:a5:0b:b1:58:a3:31:ae:aa:69:38:a5:ca:ff:2a:96:fd:f0:
         16:21:79:7b:9c:92:a1:45:ae:eb:f6:d2:8d:8b:18:96:fd:f0:
         ad:81:be:70:f4:5f:47:aa:9a:05:80:00:e2:d1:77:cf:a2:03:
         7e:d0:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org