Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          RQEVahgN7OKf6rPHVKLWoc4/Xquo++jMLD7K+tLmFvY=
Subject key identifier:   DB:23:9E:14:DD:3A:1B:18:F7:FA:96:06:16:D4:26:08:37:68:0E:21
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       3B466A478CD703A6D75D2B9B8B4191CDD401A660
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     266348
IP address blocks:        170.239.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:46:6a:47:8c:d7:03:a6:d7:5d:2b:9b:8b:41:91:cd:d4:01:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject: CN=DB239E14DD3A1B18F7FA960616D4260837680E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:9f:2e:f2:ca:56:ee:f4:d8:08:65:b2:67:
                    c7:f2:b1:29:de:95:0e:ed:36:5b:66:3a:55:3e:1e:
                    18:39:78:66:d8:55:69:11:62:f8:fc:0d:96:b0:f7:
                    f9:a0:11:93:6e:46:09:2f:42:9d:c6:0a:a4:e9:e4:
                    04:91:66:e2:7e:2c:6d:36:3c:2c:63:b2:5b:84:31:
                    14:0c:f6:53:5e:a6:f0:98:54:ed:20:34:4a:cb:3b:
                    1b:b0:cf:24:9e:ad:f8:c7:34:7b:c3:eb:8b:56:4e:
                    e3:79:49:d9:1e:f7:52:8a:63:29:4e:46:7d:c9:71:
                    17:2d:d1:cf:84:82:5b:ae:6a:bb:6a:ec:ef:1c:27:
                    f8:cf:43:d5:45:40:6e:cc:7a:d1:d5:95:66:99:3c:
                    8a:ca:3c:67:4f:07:b2:da:b3:ec:c9:6f:2e:5a:67:
                    c2:df:fd:4d:ff:64:27:57:08:bd:a7:a8:9d:f0:e6:
                    c8:2f:1d:36:01:22:b3:7a:6c:62:28:61:f0:63:48:
                    2f:e5:c4:c8:19:69:0f:50:b5:08:e5:4c:dc:35:ca:
                    66:e5:dc:c0:1b:93:17:f8:a6:3e:1c:cf:5a:71:11:
                    10:18:11:1e:0f:2e:07:6f:c1:39:1b:60:f3:cf:5f:
                    8f:ef:c5:9c:77:b5:9e:4f:04:e3:7b:79:59:8d:da:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:23:9E:14:DD:3A:1B:18:F7:FA:96:06:16:D4:26:08:37:68:0E:21
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:c9:11:d6:ab:c5:9f:36:ec:1a:9f:8a:ef:98:56:d0:b9:
         57:c5:39:81:3f:3f:25:35:ae:18:50:6c:cb:0a:f6:70:dc:d0:
         66:69:c3:4f:8b:b0:0b:e7:b4:cc:05:59:b2:bb:d7:84:ba:50:
         a1:31:c0:a6:87:4b:37:ac:69:a3:0e:bd:d1:d2:59:04:81:25:
         99:ff:d7:3f:db:9e:55:53:6c:7b:60:0d:6d:5b:fb:b4:f4:bf:
         34:65:8b:cd:bf:16:b8:6f:c5:eb:62:52:b4:f0:9c:94:da:c7:
         81:b7:b1:31:f7:ae:e4:91:35:ee:31:05:0f:6d:29:c0:dc:be:
         14:bf:18:e9:d3:57:99:29:db:23:a0:e2:18:db:4d:b5:9c:53:
         30:6d:a9:44:36:a8:f3:b7:d3:2e:42:cc:a5:99:7f:3a:51:c0:
         56:85:45:6b:4a:4c:14:c4:9f:e1:bf:3e:e6:09:bc:d6:c5:db:
         eb:e0:63:c0:d2:67:bc:1a:dc:7c:3d:f7:6f:61:2f:5a:e4:a9:
         c6:cb:ef:f7:a9:15:e5:7c:0b:a6:5e:b0:72:cf:a0:17:66:f4:
         14:ba:1d:af:ed:08:4c:a9:09:29:3e:29:e4:ae:3d:15:b8:1a:
         38:a6:c3:45:16:70:81:44:6d:0f:dc:d2:72:28:3c:cd:4a:53:
         06:e3:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org