Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa
File:                     3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (raw, json)
Hash identifier:          nrxzpLoj/wUqL6FBg0AV2+GkCw28sKPWu1yCJRKHLgk=
Subject key identifier:   1D:5A:C7:A0:CA:A6:57:B8:24:46:61:88:54:51:47:20:4D:14:AC:F6
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       3CAF0F8D6F48616715B4E05FCD479C7665798396
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa
Signing time:             Wed 03 Apr 2024 18:33:17 +0000
ROA not before:           Wed 03 Apr 2024 18:28:17 +0000
ROA not after:            Wed 02 Apr 2025 18:33:17 +0000
asID:                     61918
IP address blocks:        170.150.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:af:0f:8d:6f:48:61:67:15:b4:e0:5f:cd:47:9c:76:65:79:83:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Apr  3 18:28:17 2024 GMT
            Not After : Apr  2 18:33:17 2025 GMT
        Subject: CN=1D5AC7A0CAA657B824466188545147204D14ACF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:d4:a3:8e:f4:f5:b8:b0:64:31:a5:27:39:
                    df:07:41:e8:ab:43:a4:f2:f2:e0:92:4b:29:15:65:
                    23:f9:d0:e1:a8:4e:a1:a9:36:a7:16:82:21:48:57:
                    ef:31:b2:4e:32:43:52:fc:ab:8d:38:2e:a7:5e:80:
                    29:0b:ba:d3:e3:3a:e7:f1:8d:78:6c:b3:a8:b1:70:
                    5b:38:a0:3c:26:9e:b4:c5:9f:13:60:f8:cc:92:f6:
                    34:1d:e8:9d:b2:52:4e:1a:60:66:74:69:38:12:c0:
                    f6:21:57:68:fd:20:36:4d:af:5d:3c:39:a1:21:e9:
                    ba:38:84:50:2f:88:86:3c:9b:08:3d:89:56:6a:31:
                    ae:4a:2b:be:7c:9a:e8:db:69:12:7c:44:01:c9:42:
                    18:a6:7a:ca:e5:55:11:45:88:49:d6:ed:8b:6b:29:
                    d9:50:7d:c0:c1:24:ea:41:89:5b:b8:0f:d1:ad:02:
                    31:3a:2b:bc:b8:f8:09:05:45:59:c3:1e:6a:71:03:
                    da:c5:1b:6c:0b:5a:e0:f7:55:9d:1e:55:9b:73:27:
                    27:bb:50:c9:d4:0c:48:e0:f2:ff:c3:77:30:d7:3b:
                    a0:23:24:16:ec:ee:cd:d3:1f:4f:22:c9:2f:3b:1b:
                    76:fe:09:f8:08:c7:b8:ec:87:f3:04:bb:da:62:6e:
                    2c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5A:C7:A0:CA:A6:57:B8:24:46:61:88:54:51:47:20:4D:14:AC:F6
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:3f:b4:cb:54:d0:33:d7:88:45:53:01:8d:bd:17:70:cf:
         3f:7f:98:85:32:14:e3:c3:72:a7:99:40:2a:d2:7a:cc:48:ac:
         a5:39:df:40:72:96:d7:5d:09:22:9c:bc:53:47:b6:0e:85:53:
         16:4e:5c:dd:f7:a4:38:c1:52:5a:08:be:5f:4b:c5:73:cc:ff:
         46:56:eb:db:ad:60:43:9e:53:51:17:5a:45:0f:9d:17:ea:dd:
         8b:8c:61:31:50:b5:1a:f0:5c:aa:f5:9c:95:73:31:cd:84:a6:
         fe:01:f8:f3:bc:4e:12:45:98:57:61:ba:cc:dc:af:e9:54:66:
         97:c7:0b:1d:01:a8:30:4a:b0:9e:eb:d9:37:d0:86:2a:f2:60:
         ed:b5:c6:1f:88:a2:7b:5d:e8:ae:48:be:83:89:69:59:a6:c7:
         75:66:16:38:ff:26:fe:fc:49:fc:f6:ac:5a:4c:c8:d2:77:dc:
         40:94:b8:d5:3b:4a:b1:e0:34:7b:63:6b:c5:ef:34:e2:be:b0:
         46:41:e8:8b:f2:28:10:f1:1b:16:cd:58:55:49:d2:ea:03:25:
         2f:6b:af:a4:87:ea:57:9c:6c:32:f9:45:87:ba:7e:f8:37:51:
         ac:76:9a:d7:49:b6:76:9a:3b:0e:37:2b:48:11:ef:65:20:ca:
         32:3f:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:02 2024 by rpki-client on console-fra.rpki-client.org