Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          eBAGHeYmSpTYNJT8DgDsumE7u9YD2ercFex+tnI6UiE=
Subject key identifier:   1A:9B:CB:A7:D3:79:B9:24:76:EA:23:74:78:5A:9F:A5:F3:BF:FE:AD
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       4186BA42DE53AF2B456859E820DF8A708D921A94
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     266348
IP address blocks:        170.239.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:86:ba:42:de:53:af:2b:45:68:59:e8:20:df:8a:70:8d:92:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject: CN=1A9BCBA7D379B92476EA2374785A9FA5F3BFFEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:91:ed:9e:be:ce:67:2d:d0:6b:25:5a:fa:
                    98:7c:7e:de:1f:4b:ed:42:b2:3c:70:03:20:75:9d:
                    ab:f3:89:af:a5:85:8a:f9:10:34:78:58:ec:f2:b8:
                    b7:3a:88:1a:50:df:ab:cc:0c:b0:0b:12:cf:59:41:
                    e4:ff:26:fe:41:14:e1:ae:95:75:c4:ef:ac:b9:ef:
                    a3:00:88:f0:b1:7d:57:71:da:7b:51:09:83:40:6c:
                    b3:8e:f1:31:0a:78:56:90:12:d5:80:38:8d:d9:d4:
                    34:b8:35:08:53:82:a9:5a:12:40:a0:03:16:fc:fc:
                    00:f5:8e:aa:4c:05:fa:ec:ce:20:3b:d0:71:cb:47:
                    52:fe:50:73:06:e4:73:dd:73:ec:99:3d:cc:5a:e6:
                    d1:58:74:ea:ff:de:58:e3:7d:bd:ee:1b:1c:8e:71:
                    85:11:11:7b:48:d5:cd:ab:0e:01:94:cc:9d:91:3d:
                    d1:3f:3d:13:34:84:21:8e:59:cc:27:2e:a4:4a:b4:
                    ed:e5:b2:39:63:89:89:7f:26:4c:34:d5:3e:51:af:
                    b9:f0:42:7e:b5:25:ba:21:80:0d:7a:36:e4:7a:f5:
                    1d:00:e1:a0:57:20:0a:79:9a:fd:40:06:3d:f5:31:
                    c1:fc:79:e8:8b:92:f7:14:b6:8c:6f:df:fb:51:d7:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:CB:A7:D3:79:B9:24:76:EA:23:74:78:5A:9F:A5:F3:BF:FE:AD
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:45:aa:91:ec:eb:0b:fd:97:04:60:e0:bf:09:4a:31:23:24:
         53:ea:03:42:84:3c:5f:73:ca:e5:75:f6:01:dd:14:9a:f5:d8:
         f5:b6:57:ce:21:a6:c4:5c:fe:e4:05:e8:04:9d:51:c6:69:69:
         de:46:94:88:c1:cc:73:c5:6e:27:cc:0c:22:24:37:a7:25:c3:
         47:49:f4:9c:dc:f2:bf:88:89:2d:7b:32:67:ce:5e:29:64:43:
         0b:39:8a:e2:eb:8e:71:5b:01:0e:3c:ab:9b:3d:b3:77:34:fb:
         12:26:d4:85:34:0f:92:28:c1:ac:03:5f:98:8c:b9:da:73:45:
         a2:9f:4d:07:29:28:cb:da:a0:d8:81:c9:ea:03:19:64:c0:88:
         d2:ad:2e:41:60:e3:66:92:21:b4:d4:9c:40:c0:d7:d3:17:25:
         3d:2e:56:f3:c4:da:69:f8:17:c5:a5:40:78:f6:a0:b3:57:c7:
         b9:2e:e7:66:a9:dc:a7:8d:68:69:eb:16:cd:f9:1d:6b:1c:5e:
         08:39:4d:8d:97:cd:73:ff:a5:e7:38:e1:1a:0f:28:30:d9:b0:
         c1:bc:9c:16:be:18:20:08:e2:d3:02:c4:61:27:96:bc:23:82:
         d9:47:72:7e:88:df:21:3e:0d:ea:9a:eb:ff:a8:1f:12:de:aa:
         cd:12:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org