Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (raw, json)
Hash identifier:          pVaYyjfkwcUPeguWWPP72xDpcJHpSfzPq5JI1kzL18w=
Subject key identifier:   E8:38:38:24:45:96:85:D9:89:64:F0:8B:BF:83:48:99:CD:85:12:04
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       0DDA18202F4F0F10753BC9DB084F235B7D068366
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa
Signing time:             Wed 03 Apr 2024 18:33:17 +0000
ROA not before:           Wed 03 Apr 2024 18:28:17 +0000
ROA not after:            Wed 02 Apr 2025 18:33:17 +0000
asID:                     61918
IP address blocks:        170.150.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:da:18:20:2f:4f:0f:10:75:3b:c9:db:08:4f:23:5b:7d:06:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Apr  3 18:28:17 2024 GMT
            Not After : Apr  2 18:33:17 2025 GMT
        Subject: CN=E8383824459685D98964F08BBF834899CD851204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:73:18:74:43:0b:11:b4:fc:58:3e:c0:92:
                    9d:ab:af:b6:55:50:89:78:a8:c4:68:15:7e:13:5a:
                    05:b1:25:0b:bd:9f:18:5c:ab:c3:c8:2a:83:6a:6f:
                    5e:74:40:ef:e7:b5:29:71:cd:7e:ac:2e:f0:3f:77:
                    ec:eb:80:a3:64:59:fd:19:7a:c7:43:a7:c1:44:c8:
                    e4:2d:87:2b:23:1a:ed:b1:c3:d4:33:63:4a:08:da:
                    48:a9:d1:cc:33:66:ae:02:cf:6b:84:61:b6:63:af:
                    c3:0a:e6:9f:1f:b2:e3:24:62:51:22:27:e2:3e:dc:
                    9b:94:f1:14:9d:4c:7d:b1:86:06:c9:ae:42:98:3f:
                    17:ac:e6:42:20:3b:79:55:c2:27:7c:2c:2c:57:e6:
                    d9:b1:8c:58:69:4e:70:a9:db:cf:0e:28:9d:c1:d4:
                    37:94:9f:ce:7c:a3:de:e6:53:43:60:35:9f:d6:fa:
                    a9:34:46:5c:c0:db:f4:e7:a5:78:bf:bd:16:2f:ec:
                    d5:53:a2:9e:55:46:6f:1f:8f:40:69:45:ad:92:54:
                    f6:40:e9:c7:7d:f2:0c:44:51:40:28:53:3a:91:b7:
                    bf:3d:8e:b6:ba:87:31:d3:c6:48:4b:b1:99:bd:55:
                    0d:40:6f:e3:be:c8:39:cc:e9:cb:26:74:a0:ea:72:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:38:24:45:96:85:D9:89:64:F0:8B:BF:83:48:99:CD:85:12:04
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:ae:fc:e8:37:65:e6:77:13:92:95:37:c6:d6:8e:73:ac:
         b9:53:5a:96:4a:7e:f6:17:52:ee:b9:ec:83:95:ff:89:5f:70:
         77:8b:a6:24:18:c7:3d:cc:c9:54:3f:df:bf:5a:4e:7e:84:29:
         1f:79:8c:16:86:ab:a2:37:0e:6e:e8:90:7f:8c:14:59:08:b4:
         ce:13:9c:cb:eb:fe:3f:33:dc:7d:14:fe:47:4d:8d:0c:e3:2c:
         03:ec:83:94:f0:8b:43:3f:8f:28:51:45:d4:2b:08:cd:f8:41:
         74:d9:f5:e9:bb:45:fb:df:17:f2:32:e9:e8:aa:c0:17:75:9c:
         ee:42:fb:fb:67:c8:23:d3:7b:2b:5e:a4:12:75:03:24:d7:96:
         e3:45:3d:ed:8e:83:a7:c9:46:32:35:a4:86:b5:0e:b0:e4:e8:
         b5:02:5e:0b:11:75:5b:4e:c4:80:a9:bf:b2:ca:3f:8b:56:38:
         7e:cb:43:26:8f:d4:df:b8:c1:f7:fc:05:c8:32:fc:53:01:9a:
         d7:f1:9f:32:2f:d1:d2:17:ef:aa:f9:f2:0a:69:0b:25:4b:0a:
         0a:e4:eb:c7:f8:47:aa:f8:95:8e:2f:db:75:d2:6f:07:b5:c7:
         80:c4:3a:20:48:92:f1:f8:6a:55:0d:48:6a:27:d7:5c:85:9d:
         a1:e4:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:00 2024 by rpki-client on console-fra.rpki-client.org