Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          zTbg6ivOJEGKq/yNXHIEXIAbXd5rDOfrkRNBBqAD0XU=
Subject key identifier:   04:1E:A7:87:66:18:DE:B5:1A:09:1A:D6:A0:ED:76:C8:A0:88:CF:FF
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       3B225805114A262AD8DB15EE27482C4F2ADBEA96
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 03 Apr 2024 18:33:18 +0000
ROA not before:           Wed 03 Apr 2024 18:28:18 +0000
ROA not after:            Wed 02 Apr 2025 18:33:18 +0000
asID:                     61918
IP address blocks:        170.150.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:22:58:05:11:4a:26:2a:d8:db:15:ee:27:48:2c:4f:2a:db:ea:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Apr  3 18:28:18 2024 GMT
            Not After : Apr  2 18:33:18 2025 GMT
        Subject: CN=041EA7876618DEB51A091AD6A0ED76C8A088CFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:60:1f:8f:7c:a0:a7:82:1d:c3:66:16:9e:
                    07:55:05:10:9b:29:4d:cb:bc:ab:d8:9e:f4:27:93:
                    b4:45:b4:53:86:43:99:13:fc:66:b2:ae:56:56:d7:
                    09:a2:3b:1b:97:62:f0:6a:62:c3:a0:d1:3f:28:42:
                    26:bc:0d:c6:23:71:b7:c5:ca:1f:5c:eb:0d:e6:e2:
                    63:23:2f:b7:52:d0:84:4c:c4:bd:6b:37:31:a9:1e:
                    ba:3f:35:26:cf:89:1b:6c:56:a0:85:14:25:24:f2:
                    95:15:3f:4a:1d:47:6b:e1:7c:a3:39:d2:81:25:62:
                    a7:c9:b1:fe:77:a0:0a:53:3e:84:5f:c2:7a:c3:dc:
                    53:5d:29:da:22:fc:3a:c2:95:91:46:1e:15:c9:10:
                    1a:25:ac:57:0e:0a:2a:70:18:86:d2:fb:ef:18:8d:
                    fc:ce:2e:e2:08:66:15:72:53:01:4e:81:59:5f:69:
                    d4:eb:20:10:fa:18:e5:6c:d8:c0:2e:00:62:e6:1f:
                    39:74:5c:9c:12:0a:b8:7a:7f:74:f7:a8:9a:f1:0b:
                    80:4a:54:06:00:60:93:02:f6:f8:b3:e9:4c:a1:19:
                    cb:b0:fe:ac:b9:58:a7:61:25:0d:aa:d7:a3:0f:65:
                    14:11:b2:4a:1d:f6:64:36:28:23:d7:26:ae:ec:62:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:A7:87:66:18:DE:B5:1A:09:1A:D6:A0:ED:76:C8:A0:88:CF:FF
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:09:15:2e:1a:63:b3:e8:e7:bc:78:9c:33:d0:fd:33:b8:
         15:6f:bb:3d:79:74:58:c0:a1:c2:07:96:10:d4:6b:88:e6:0b:
         a1:8f:77:8b:2f:87:23:c3:01:06:8a:e1:22:41:66:b2:dc:40:
         48:75:30:ff:c1:71:07:55:22:e4:18:fc:dd:63:bc:8b:04:5b:
         74:b4:90:cd:8d:02:94:15:7f:89:a1:98:4a:59:9b:2b:ce:8a:
         db:e4:4b:81:56:72:01:4a:26:40:66:5f:26:77:72:ff:a6:93:
         26:8b:73:ba:1d:e4:9f:ea:a1:9e:4e:ff:e6:49:d6:74:51:a9:
         20:62:4f:d6:1b:96:eb:ee:0a:01:04:f2:56:9c:f6:81:99:07:
         27:4f:44:89:19:fe:90:46:9b:de:e5:ed:e8:84:c1:23:52:71:
         62:b7:e9:5c:d9:0f:9d:08:be:fe:fa:d9:2d:df:5a:5c:b7:74:
         27:84:76:1f:85:d5:19:ca:6c:57:d6:93:0b:20:5a:87:50:05:
         78:87:08:0d:25:18:70:1f:55:f5:ed:35:ec:7c:b0:a6:77:87:
         97:f4:9d:eb:c9:d1:fe:aa:bd:e7:63:6a:0e:7c:c9:88:cb:e3:
         11:40:4c:97:40:9b:06:76:d4:df:0c:5f:f1:35:a9:9d:9b:7e:
         8b:f9:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:49 2024 by rpki-client on console-ams.rpki-client.org