Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (raw, json)
Hash identifier:          VmJiuRq9XTn914Kk9S7UGPsX1rZ9MBJ5y7ZG2gOiztQ=
Subject key identifier:   81:E7:A0:01:EC:A2:20:5A:58:3B:98:36:7C:05:ED:B9:6A:5A:62:7C
Certificate issuer:       /CN=F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF
Certificate serial:       63DE2DE646AC84B38FE3C024D740D427C73D349E
Authority key identifier: F3:FC:F4:67:FB:0A:7C:8D:A1:A8:65:BD:B9:B4:6D:8A:BF:2D:79:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
Signing time:             Sat 08 Jun 2024 15:21:42 +0000
ROA not before:           Sat 08 Jun 2024 15:16:42 +0000
ROA not after:            Sat 07 Jun 2025 15:21:42 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:de:2d:e6:46:ac:84:b3:8f:e3:c0:24:d7:40:d4:27:c7:3d:34:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF
        Validity
            Not Before: Jun  8 15:16:42 2024 GMT
            Not After : Jun  7 15:21:42 2025 GMT
        Subject: CN=81E7A001ECA2205A583B98367C05EDB96A5A627C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5e:d1:40:9f:f3:51:1f:82:a4:f7:a3:70:e2:
                    e6:c9:8e:df:1d:cf:6b:f9:d2:32:f7:ef:19:0e:80:
                    d8:4a:1b:4f:1f:3a:72:21:95:65:d9:3a:1e:a1:f0:
                    32:be:45:5b:b8:4e:c5:5b:93:45:72:3a:36:4e:af:
                    67:8b:4e:49:f3:bb:3c:af:b6:a2:da:97:24:55:76:
                    62:aa:3b:ba:64:ba:e8:b8:bc:7e:b4:6b:65:e8:c7:
                    94:5c:5e:6c:c4:55:33:14:04:15:4a:a1:37:ab:f4:
                    80:12:ec:5d:06:e4:92:0e:3a:f7:a3:1a:1b:8e:94:
                    0d:79:e1:c9:a2:ad:f9:9a:c4:85:6b:ab:b2:c4:39:
                    5a:05:a0:4f:2d:35:77:d4:ba:ba:22:9e:ae:1e:ff:
                    a0:94:07:31:35:ea:c8:b3:dd:0b:5f:e8:1d:94:0b:
                    9c:41:ce:6e:43:56:ec:a2:81:ce:3d:09:d6:c9:60:
                    0e:6d:be:e8:03:db:3d:d7:a8:82:07:22:ed:41:9c:
                    85:2d:36:a9:a9:86:ed:dd:4e:22:cf:fb:f9:2c:6f:
                    38:78:9c:7e:f4:6f:f5:58:e6:a1:54:8d:39:01:4f:
                    bb:fc:f5:4c:ed:92:98:84:03:07:7d:67:02:de:1a:
                    cf:96:77:60:8c:06:24:40:30:05:d9:21:ec:0f:01:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E7:A0:01:EC:A2:20:5A:58:3B:98:36:7C:05:ED:B9:6A:5A:62:7C
            X509v3 Authority Key Identifier:
                keyid:F3:FC:F4:67:FB:0A:7C:8D:A1:A8:65:BD:B9:B4:6D:8A:BF:2D:79:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FCF467FB0A7C8DA1A865BDB9B46D8ABF2D79DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:84:55:df:c5:a3:1f:a1:90:72:10:69:52:f0:c7:a3:fd:8c:
         96:8c:99:f1:c5:a3:ba:b8:a0:ca:42:e1:79:87:5a:19:d1:0f:
         b7:5a:0d:8f:2b:37:fc:be:a9:94:ec:e2:b6:59:1e:0c:b8:3b:
         4a:a7:5a:9e:2f:e2:f9:e8:c7:f2:7a:50:2e:a7:ee:8d:98:96:
         0a:a5:87:8b:04:e2:5f:6d:97:32:dd:9b:25:af:57:1a:24:c5:
         4f:72:96:d4:05:21:bb:8c:8c:47:7b:86:00:c3:4a:9a:5a:c4:
         34:f6:e1:64:ea:c3:09:fb:98:34:98:d4:6a:05:a9:06:b9:04:
         3f:15:26:3f:0f:6c:28:c6:83:f6:88:1f:2a:d9:f9:d8:b6:13:
         f6:d6:c0:d3:04:65:e3:45:ac:04:82:e3:c8:a9:f0:38:ad:3e:
         c3:b6:e6:1d:b1:6b:0a:cc:a2:74:ca:cb:c0:e0:77:bb:b9:7a:
         99:7e:e4:ea:c8:5e:b7:14:7d:9d:29:c9:17:2a:b8:d2:6b:a8:
         1c:83:23:ef:9b:31:8c:f1:df:e6:81:a4:2d:bf:73:45:78:96:
         e8:24:4b:29:09:2d:ba:d6:a6:0e:34:c6:75:c8:fe:2f:b4:2a:
         f6:95:83:fc:62:f7:45:19:ae:2c:2b:9d:bf:15:1b:5b:6c:23:
         a0:72:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:13 2024 by rpki-client on console-ams.rpki-client.org