Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235342e302f32332d3233203d3e20323636343630.roa
File:                     3137302e38322e3235342e302f32332d3233203d3e20323636343630.roa (raw, json)
Hash identifier:          mXJ78naCwkB7DKudBbVE1FrlBacy3HsmmPHRqPxFm+c=
Subject key identifier:   7B:FE:23:5D:36:C6:8D:BB:BF:34:B7:4B:25:73:E6:1B:20:98:99:C7
Certificate issuer:       /CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
Certificate serial:       55C615DCE250F0FD0BC9003D20BF1B1FAEEE0CF8
Authority key identifier: 46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235342e302f32332d3233203d3e20323636343630.roa
Signing time:             Tue 11 Jun 2024 13:27:42 +0000
ROA not before:           Tue 11 Jun 2024 13:22:42 +0000
ROA not after:            Tue 10 Jun 2025 13:27:42 +0000
asID:                     266460
IP address blocks:        170.82.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c6:15:dc:e2:50:f0:fd:0b:c9:00:3d:20:bf:1b:1f:ae:ee:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
        Validity
            Not Before: Jun 11 13:22:42 2024 GMT
            Not After : Jun 10 13:27:42 2025 GMT
        Subject: CN=7BFE235D36C68DBBBF34B74B2573E61B209899C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:fa:85:17:08:d5:d1:ea:de:cf:2b:44:bc:
                    61:00:ef:8a:33:00:df:c5:eb:df:71:8d:f9:b7:ff:
                    b1:f5:6c:4e:b6:56:20:a6:ce:37:d6:5e:5b:d7:19:
                    ec:70:76:1b:93:3c:e9:fa:d4:a0:34:88:33:de:cb:
                    d2:98:1c:e3:28:da:6b:14:f1:ec:e8:a7:0c:6c:f1:
                    1d:b6:3e:5e:03:0a:14:24:64:32:d5:6b:fa:36:fe:
                    56:31:50:ae:54:32:64:c2:07:0d:15:66:73:cb:ea:
                    02:bb:da:d0:19:b2:84:3e:b9:4a:70:27:02:f2:94:
                    81:0e:0a:7b:d0:9b:23:79:9d:49:84:5e:1b:8a:ae:
                    5f:9e:86:3f:71:f5:bd:bc:33:74:9b:9a:f2:67:cb:
                    59:21:8f:f6:75:ec:9a:8c:30:16:01:c5:5c:6c:3e:
                    b8:ee:04:3a:ca:a3:f0:2f:a3:ec:69:a7:76:e4:e7:
                    e9:4f:7a:18:cc:cc:e6:f1:c1:19:62:52:8e:ac:c7:
                    a4:5a:7b:d0:67:81:a5:39:cd:dc:b8:35:7b:fd:d3:
                    63:b0:5f:56:81:80:8f:df:1e:5b:4a:dc:3a:4a:08:
                    cb:fc:f7:9b:ed:24:5f:fb:90:9c:f2:2c:63:b3:6c:
                    17:7b:40:86:99:1e:54:db:58:6a:fe:93:cc:38:35:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:23:5D:36:C6:8D:BB:BF:34:B7:4B:25:73:E6:1B:20:98:99:C7
            X509v3 Authority Key Identifier:
                keyid:46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235342e302f32332d3233203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:47:29:9e:23:14:af:ef:8c:11:8f:b7:38:35:c8:2f:c4:d6:
         90:93:8a:50:ea:db:53:50:56:8f:41:7e:9a:ca:b0:b8:bc:b2:
         aa:f8:aa:a9:ed:75:96:0b:cc:e9:c7:16:4f:79:5f:27:8d:b5:
         cc:35:b1:6d:62:a6:15:b6:e2:ec:d5:93:e0:06:0b:29:21:fc:
         40:31:d2:49:4b:6f:04:a6:0d:b8:bf:7c:44:a3:a7:40:47:7e:
         9d:f2:50:28:9d:d0:97:c1:09:40:a7:94:e3:fa:09:a8:5d:ef:
         23:6b:4c:ec:20:8d:93:d4:42:30:2e:e8:72:d0:b4:ba:bb:1d:
         1e:15:06:96:2e:26:8f:29:fa:1f:56:bb:bc:f8:93:38:14:9c:
         cd:a3:d6:2e:94:d9:4d:8b:67:13:3b:2a:7a:c1:f8:5d:98:34:
         01:33:a2:f7:3a:21:e8:c7:93:9f:8a:64:59:c0:55:4f:fe:1a:
         47:ea:1a:3f:4e:68:a0:8a:68:0b:07:c9:fd:d3:61:78:37:e4:
         10:17:57:a4:5b:e0:bd:36:7b:42:89:06:cc:9c:76:af:c2:30:
         64:9b:6c:f6:76:b7:11:8f:50:0b:1f:55:1c:f8:9d:f0:ed:5d:
         74:fa:a7:d7:4f:46:d6:e8:e9:2f:d7:62:79:b1:e7:c7:aa:6a:
         88:0b:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:42 2024 by rpki-client on console-fra.rpki-client.org