Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          7kBR7IiFyrCo4s7ItdwKuuNxs3uu1PQA7JW+WVG5pqk=
Subject key identifier:   7D:42:79:56:64:C8:DA:F6:B5:7C:F7:2D:30:41:07:EE:A8:3F:DD:77
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       55EB898A63CC37DE6C3116F363E922E41FFB31B3
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa
Signing time:             Wed 03 Apr 2024 20:16:12 +0000
ROA not before:           Wed 03 Apr 2024 20:11:12 +0000
ROA not after:            Wed 02 Apr 2025 20:16:12 +0000
asID:                     266506
IP address blocks:        170.244.181.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:eb:89:8a:63:cc:37:de:6c:31:16:f3:63:e9:22:e4:1f:fb:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Apr  3 20:11:12 2024 GMT
            Not After : Apr  2 20:16:12 2025 GMT
        Subject: CN=7D42795664C8DAF6B57CF72D304107EEA83FDD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:d8:05:7a:fa:bf:a5:4c:32:aa:0c:35:51:
                    a7:cc:7b:61:f2:31:64:71:16:d0:7c:5e:9c:7e:fe:
                    f4:1b:53:a2:0e:cf:4f:c4:50:69:58:72:01:2d:7a:
                    e5:4a:c2:7d:d0:95:40:05:62:01:4e:1b:c6:77:ee:
                    a5:b3:af:9c:83:43:dc:d2:0b:7b:0a:89:67:de:13:
                    91:cb:b0:21:b5:e1:8f:b7:ef:72:e0:23:28:93:8a:
                    5c:f3:ad:bf:59:2c:fa:0e:b4:70:5c:0d:a3:e7:37:
                    35:34:a4:b3:c3:be:c9:d3:f5:89:b7:a7:f6:91:de:
                    5b:cb:0a:11:c9:b9:18:76:8c:9f:f7:10:53:43:4a:
                    6a:2a:74:24:88:7f:85:f2:d6:85:f2:8c:6f:75:0e:
                    5e:27:98:4a:c1:91:58:85:5f:f0:7c:c8:5b:d7:b0:
                    a0:b5:6d:42:67:38:6c:23:ca:6d:7a:b2:ac:73:d7:
                    89:67:03:a6:81:ba:b2:82:14:04:2f:7a:02:72:65:
                    f1:11:c6:33:99:69:d7:43:92:a8:67:d3:73:3f:ee:
                    e8:42:cc:f2:04:3b:cc:f5:6a:90:b1:94:8d:b7:e4:
                    bb:06:b7:81:4b:30:70:25:28:57:71:4e:2c:f8:52:
                    13:30:0a:03:ed:52:82:fe:a5:a8:54:b6:fa:fc:ea:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:79:56:64:C8:DA:F6:B5:7C:F7:2D:30:41:07:EE:A8:3F:DD:77
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e3132382f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.181.128/25

    Signature Algorithm: sha256WithRSAEncryption
         55:84:01:c3:af:64:b1:f6:4e:c3:8c:57:a7:68:c3:9f:65:2f:
         13:5d:2e:29:48:29:f5:62:c6:1f:0e:99:25:09:e4:1b:fb:8b:
         04:0e:6d:1e:c5:8a:a2:4e:20:2a:9e:4a:c7:83:74:e3:2f:dc:
         de:e7:70:c5:d0:55:81:6a:f8:83:92:92:5a:f7:cd:5e:aa:1c:
         6d:02:a0:7e:e9:73:0f:b3:05:fe:22:4a:65:45:ee:8f:d4:84:
         99:66:3d:df:10:d1:e5:a9:01:25:9b:19:3d:bf:85:5e:fc:4a:
         49:f7:3c:c2:ac:d5:3a:42:a2:d0:7b:29:5d:e9:6e:40:3f:b7:
         d0:a6:9c:19:1e:60:8d:cf:d4:b7:4b:f4:af:ae:b7:e4:e0:0c:
         af:49:8e:81:c4:7d:50:0d:f0:ea:2a:6f:17:ee:12:d5:74:90:
         33:14:11:49:8b:c9:87:5f:23:f0:0b:e0:4b:8c:66:c1:f8:66:
         40:26:89:d8:eb:70:80:5a:ed:bb:fc:d6:21:58:77:b0:54:d9:
         75:47:ac:b6:fe:03:d1:82:7c:e7:fc:86:6d:4d:fe:e7:fd:8b:
         01:9f:d4:6c:88:b1:d6:50:32:b2:89:30:bc:49:fa:14:89:f2:
         1e:3d:37:2b:0b:3a:47:b9:7d:55:91:41:f3:c6:64:e2:6f:c2:
         42:f6:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org