Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232362e302f32342d3234203d3e20323731363737.roa
File:                     3137302e3233312e3232362e302f32342d3234203d3e20323731363737.roa (raw, json)
Hash identifier:          3+5peJ57MLlAfhzobkET1rQO6ynPg6DGfKUIEMS8Hkg=
Subject key identifier:   89:3D:DF:BB:9E:A4:2E:54:10:78:D5:09:33:2D:62:57:73:26:22:FA
Certificate issuer:       /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
Certificate serial:       5CB5BBCD81CE61F4A9307B41EA63D85F915647BA
Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232362e302f32342d3234203d3e20323731363737.roa
Signing time:             Tue 07 May 2024 19:23:25 +0000
ROA not before:           Tue 07 May 2024 19:18:25 +0000
ROA not after:            Tue 06 May 2025 19:23:25 +0000
asID:                     271677
IP address blocks:        170.231.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl
                          rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b5:bb:cd:81:ce:61:f4:a9:30:7b:41:ea:63:d8:5f:91:56:47:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Validity
            Not Before: May  7 19:18:25 2024 GMT
            Not After : May  6 19:23:25 2025 GMT
        Subject: CN=893DDFBB9EA42E541078D509332D6257732622FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:8a:8d:45:a9:09:63:1a:11:ef:9b:ae:57:
                    1e:93:81:5b:d0:1f:fc:1c:18:6d:26:f2:73:fb:d3:
                    fa:18:1d:6f:71:4b:0d:c8:1b:ad:94:b9:0b:04:f4:
                    b4:92:e4:ac:9c:5e:e2:cc:82:82:ce:32:b7:65:5d:
                    24:26:98:21:93:79:6a:bd:dc:a6:18:39:40:5f:e8:
                    75:4f:30:6f:c3:95:ec:1a:f7:ff:28:db:01:45:3f:
                    5d:26:45:51:e6:ad:f8:ac:4e:ba:d0:dd:6d:87:6c:
                    a3:72:f5:c0:3c:fd:55:d6:3d:74:dd:e6:59:7f:7a:
                    0f:a4:a1:a2:89:02:e8:04:90:18:b4:ee:99:50:45:
                    2d:eb:b9:f0:5c:4e:a9:39:32:58:3d:92:4c:4c:d5:
                    3c:63:04:32:b0:48:9d:8c:6c:1d:5b:3d:be:6e:d8:
                    3f:92:9e:a7:ee:ed:e1:52:86:e7:87:e7:d0:8a:13:
                    3b:98:75:2d:66:8b:57:6f:04:20:1d:4f:85:79:ac:
                    f1:34:d8:cb:bd:22:32:51:9a:49:28:c6:a8:00:ad:
                    b6:3d:88:5f:73:ac:48:57:f8:b2:aa:31:2f:59:3c:
                    e4:16:04:d3:5c:0c:54:1b:2b:a7:6c:76:83:b4:b5:
                    89:08:73:f3:17:b7:80:e7:6d:d8:39:6d:cd:e0:5d:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:DF:BB:9E:A4:2E:54:10:78:D5:09:33:2D:62:57:73:26:22:FA
            X509v3 Authority Key Identifier:
                keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232362e302f32342d3234203d3e20323731363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:fe:68:10:c4:36:da:a8:93:72:22:59:4a:06:6f:ce:ec:8f:
         0f:dd:e9:e6:13:61:3d:43:27:16:b9:86:38:1d:b1:ca:11:45:
         02:3e:1b:ed:39:89:bd:e1:cd:50:43:54:b2:ff:f3:dd:c6:3d:
         1d:d3:5f:e4:b6:3d:45:1d:5a:28:e7:55:03:77:ce:23:79:85:
         28:eb:20:78:2d:15:2e:ba:00:69:5a:ee:cb:7b:a5:05:c2:61:
         bb:32:7e:89:b8:4a:ca:05:8d:63:52:0a:5c:51:c5:80:25:58:
         87:3b:20:87:9f:d2:2f:40:fe:f0:76:a1:d9:f5:a7:b4:a1:98:
         52:65:14:89:30:11:ac:cf:25:52:44:39:a6:c3:62:49:4f:a1:
         95:55:f5:b1:de:79:17:4b:d2:28:1c:e3:40:8f:bf:29:04:95:
         47:84:5c:84:8e:42:dd:05:ae:dc:08:9b:88:67:99:03:8f:62:
         ec:b4:01:d1:f8:89:ad:bc:30:bd:8c:c3:28:1f:89:81:a1:92:
         c3:65:9b:7c:81:07:8f:2d:e8:a6:88:23:3a:03:fc:1f:2a:80:
         5a:3d:d0:b0:d1:d9:a3:d8:21:0a:4d:5b:22:05:ef:f8:5a:06:
         ac:be:0e:e1:6b:17:88:96:65:45:34:23:c5:6f:47:93:25:7c:
         ba:f1:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org