Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
File:                     3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (raw, json)
Hash identifier:          CHhyZxLHNATeTTj8kl9dX3DQr02j1xFl+7NGtoTlo9U=
Subject key identifier:   AB:A8:AD:66:F3:95:DE:AB:3A:14:A1:1F:D4:52:74:BA:97:AA:FE:A8
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       6B875C2C85E2D83264D296CEA76FF56453B2011A
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
Signing time:             Thu 04 Apr 2024 03:01:31 +0000
ROA not before:           Thu 04 Apr 2024 02:56:31 +0000
ROA not after:            Thu 03 Apr 2025 03:01:31 +0000
asID:                     265036
IP address blocks:        170.150.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:87:5c:2c:85:e2:d8:32:64:d2:96:ce:a7:6f:f5:64:53:b2:01:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Apr  4 02:56:31 2024 GMT
            Not After : Apr  3 03:01:31 2025 GMT
        Subject: CN=ABA8AD66F395DEAB3A14A11FD45274BA97AAFEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:00:27:f1:eb:f4:e8:a0:09:9f:73:17:8f:66:
                    f4:ec:69:23:4b:12:23:48:2c:4c:56:56:5d:7e:88:
                    b3:0c:90:00:16:1c:15:b1:bb:40:91:ef:a9:1b:89:
                    60:ab:6e:ac:79:01:42:af:ed:64:1b:2b:76:67:ee:
                    23:d8:ed:82:70:b7:5a:f1:fd:01:a7:6f:f2:9e:c7:
                    17:36:bd:fa:39:b6:3d:d3:26:82:28:e9:8d:82:42:
                    d1:1f:c3:30:6b:1a:3d:c2:82:6f:c9:de:9a:e3:2a:
                    ea:90:09:da:74:39:10:de:20:c7:8e:76:30:77:1d:
                    9f:46:d3:dd:f4:28:d0:fd:d4:2d:91:22:a5:47:7d:
                    a6:ef:5a:f1:87:52:c7:de:a1:06:03:cb:6d:25:ca:
                    98:d7:dd:23:48:e1:28:5e:b3:e8:e6:4c:41:6a:90:
                    c6:6f:bf:f3:cb:6c:8f:1c:d2:95:d5:28:70:a8:72:
                    78:e7:61:8c:46:44:ea:ef:26:9d:99:c7:de:3c:ac:
                    21:7f:46:81:f8:5b:15:69:45:8c:b8:9a:69:89:33:
                    f1:d0:86:3a:4f:68:59:6f:16:9f:8e:40:79:c2:e6:
                    60:53:58:15:d7:8c:45:98:34:36:47:d6:c6:17:7f:
                    5b:d8:86:15:fc:e2:bc:57:6e:3b:26:52:ee:34:2f:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:AD:66:F3:95:DE:AB:3A:14:A1:1F:D4:52:74:BA:97:AA:FE:A8
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:30:4a:4f:e2:a7:fe:d9:07:96:9e:93:6c:d2:25:cb:ee:
         64:1b:9a:89:b7:02:c8:1c:0e:b7:5c:96:c8:95:86:a9:cb:1b:
         c8:70:52:f5:7b:db:dc:bb:ec:6d:2b:e1:8d:d2:cf:22:74:f3:
         3d:00:db:bb:61:ac:83:05:ee:f2:29:ad:4b:2d:0b:3c:3c:65:
         05:45:1c:cb:3c:6a:40:c4:42:24:9b:9e:b8:82:89:5c:e9:b1:
         80:c9:30:21:5c:27:4e:a7:df:fa:e7:1a:0a:6c:c8:5c:54:94:
         23:d7:fa:ed:2d:7c:d3:e1:59:c4:b6:b3:b3:80:e0:cc:09:24:
         d1:c0:a4:a1:62:70:30:2f:8e:3f:0c:98:f0:72:a9:63:b8:0d:
         39:8a:6a:b5:fc:2f:87:2e:e4:b9:7a:30:c3:56:76:c4:60:3e:
         50:e8:19:d2:78:31:57:d0:26:0f:e3:18:40:0a:96:d1:3d:b3:
         f7:d8:2e:54:51:a2:ab:86:35:24:05:c1:34:c5:f6:db:1e:f3:
         59:bc:e2:97:f4:d5:63:4d:3e:de:98:08:fc:4a:32:a5:bb:03:
         fb:d5:9a:19:1d:8f:c2:bb:ef:8c:cd:89:b9:03:9d:3a:3d:95:
         ca:cb:9d:66:49:ff:42:b7:ff:79:83:ee:72:e5:8a:5d:55:b6:
         b9:2c:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org