Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          SQKfYSueE/Z/7Rzu2Lx0M2+c2OYjcRQVxMAgGgPtjK0=
Subject key identifier:   6E:05:31:9C:77:05:BB:09:DA:CE:1E:99:CE:B2:B8:05:3C:07:39:86
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       30AB11F21F5BC48CE7598E645F4B279C34180B2C
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:20 +0000
ROA not before:           Thu 21 Nov 2024 21:41:20 +0000
ROA not after:            Thu 20 Nov 2025 21:46:20 +0000
asID:                     266020
IP address blocks:        170.245.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ab:11:f2:1f:5b:c4:8c:e7:59:8e:64:5f:4b:27:9c:34:18:0b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:20 2024 GMT
            Not After : Nov 20 21:46:20 2025 GMT
        Subject: CN=6E05319C7705BB09DACE1E99CEB2B8053C073986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:ed:b2:dd:25:c2:fa:8a:86:dc:d8:47:45:
                    fc:d2:47:39:5b:71:ce:98:dc:cc:7e:ab:ad:23:a6:
                    a5:31:59:87:90:b3:14:1a:a1:3b:9b:66:46:26:a9:
                    6d:bc:b3:10:bf:5c:09:1b:1f:66:63:90:46:8d:df:
                    04:ad:2d:23:b6:0e:74:06:cd:91:7f:06:23:1b:19:
                    99:36:37:14:42:3a:21:ab:3a:63:eb:89:e7:71:6b:
                    18:65:4d:62:40:ca:3b:c6:e3:66:d6:f4:a6:de:39:
                    e2:f5:b8:da:8e:49:43:9f:50:46:15:b5:ac:24:61:
                    9b:3d:3a:2f:27:cd:aa:b1:18:1c:88:4e:2f:3f:31:
                    5b:7d:50:15:2a:68:eb:ee:ac:a2:ff:94:9f:29:59:
                    a4:8a:1c:cd:90:01:24:9d:d4:1f:12:67:c8:10:03:
                    03:ea:74:d3:86:eb:71:6d:30:2c:df:de:a8:37:3c:
                    2b:1d:d5:71:a2:5e:96:e9:14:4d:eb:7b:b9:25:e3:
                    e6:14:40:e6:39:c5:02:a1:6c:77:c6:6c:0c:88:ee:
                    b7:69:54:8a:47:44:55:28:26:e6:8d:a7:3a:e3:c8:
                    75:16:c6:38:46:e0:3b:4f:29:7c:4f:07:a3:cb:bd:
                    48:89:4b:2f:19:16:a8:ad:80:17:08:2a:6a:49:42:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:31:9C:77:05:BB:09:DA:CE:1E:99:CE:B2:B8:05:3C:07:39:86
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:01:6c:46:fe:c9:55:56:85:61:18:34:c9:96:47:47:3a:ae:
         55:88:c8:66:6b:a4:6e:7f:37:dc:61:3d:f9:37:bf:75:0c:e7:
         a9:b4:03:21:d2:41:99:83:78:a5:d4:d9:02:5e:d6:8b:f9:20:
         f6:dd:8f:99:93:ae:fc:9c:61:01:01:b0:35:3e:4d:d1:a8:23:
         ba:b4:f6:28:e3:0a:67:82:1a:7f:ec:59:51:e7:67:7b:3d:9d:
         74:c5:8c:f3:6d:72:08:7c:f8:fb:7b:3a:15:c7:ab:44:52:35:
         a6:b3:4e:1d:04:d4:08:d3:6f:8d:82:f3:c2:38:0e:12:42:1b:
         4f:0a:91:1e:ad:4f:c4:24:57:03:ea:f2:7d:14:26:e9:b4:7e:
         47:aa:75:83:1f:9f:3a:7d:de:8a:f1:79:77:bb:93:53:7a:b0:
         d4:64:d0:10:ec:fc:65:2d:63:49:1e:11:0e:fd:72:21:e2:a4:
         4f:0e:77:2a:13:95:99:e4:6c:fc:fe:11:31:3b:06:23:28:b5:
         c4:b6:6b:e1:7c:7c:a6:b2:2e:17:dd:ea:c2:02:11:48:18:92:
         2f:1a:e1:f9:4e:d6:23:9b:cc:a5:fb:28:86:47:60:03:3c:f0:
         70:93:97:d1:92:f8:02:44:ec:b2:a2:40:78:08:e6:fb:6f:5d:
         c8:18:25:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:11 2024 by rpki-client on console-fra.rpki-client.org