Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137302e37392e38302e302f32322d3234203d3e20323633363530.roa
File:                     3137302e37392e38302e302f32322d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          pi1yEYgeie+30f85R6wUGuYEk95PzbrNaUoA5vukU9M=
Subject key identifier:   1C:C2:65:4E:BE:B0:09:88:FD:39:EA:76:E4:D3:D1:8B:F2:4A:2E:12
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       682CB6C17D5C841A78AF9D488A4EF9A20149D220
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137302e37392e38302e302f32322d3234203d3e20323633363530.roa
Signing time:             Thu 04 Apr 2024 21:58:13 +0000
ROA not before:           Thu 04 Apr 2024 21:53:13 +0000
ROA not after:            Thu 03 Apr 2025 21:58:13 +0000
asID:                     263650
IP address blocks:        170.79.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2c:b6:c1:7d:5c:84:1a:78:af:9d:48:8a:4e:f9:a2:01:49:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Apr  4 21:53:13 2024 GMT
            Not After : Apr  3 21:58:13 2025 GMT
        Subject: CN=1CC2654EBEB00988FD39EA76E4D3D18BF24A2E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:4b:cc:bf:b4:a4:2f:f1:1a:d3:bd:23:01:
                    72:d5:33:52:a4:81:65:a0:bb:98:f9:a7:c0:b7:30:
                    dd:63:28:8d:48:ba:1f:c1:6e:14:ad:10:4c:70:8b:
                    28:a1:67:33:f2:f7:94:2d:93:75:e7:6c:8b:4a:b9:
                    e8:36:27:d0:3d:77:94:20:f7:96:39:26:38:8f:7d:
                    62:22:ab:2a:af:dc:02:e7:de:07:c8:4b:7c:f5:2e:
                    da:b7:0d:ca:09:03:18:a1:e0:a1:80:19:04:25:3d:
                    86:e1:be:26:2b:2e:ba:ed:5b:d8:12:86:31:b6:f0:
                    85:d9:26:7d:b5:2e:fb:6e:fe:ff:bb:f6:71:18:40:
                    ee:32:da:b6:d5:75:0c:0b:a1:b5:84:07:d5:32:80:
                    e0:27:8c:a2:6a:2b:6b:6d:a0:e8:7d:96:02:11:92:
                    e7:8e:93:b2:79:0e:32:23:09:b0:cd:42:df:a7:c8:
                    cb:cb:cf:43:ab:e9:78:2c:e5:71:7d:76:e9:2d:71:
                    7d:a1:a3:4a:c5:ad:2d:91:c7:fb:41:eb:c1:3e:39:
                    f4:ec:53:01:ad:6a:62:e4:58:85:90:68:bb:36:0f:
                    2c:fa:12:c2:c2:3c:14:49:fb:dd:56:e4:ee:83:23:
                    cb:34:73:f4:05:4b:73:2a:0a:19:5a:d7:bb:ed:f8:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C2:65:4E:BE:B0:09:88:FD:39:EA:76:E4:D3:D1:8B:F2:4A:2E:12
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137302e37392e38302e302f32322d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:57:97:6e:41:82:1e:c4:2e:4d:fa:3b:43:b2:54:40:b7:79:
         43:26:bc:43:e6:5d:87:b7:e9:bf:e6:64:56:66:2a:48:66:ac:
         4c:c8:92:2e:0a:ed:ea:18:a9:79:6f:9d:e7:94:66:15:70:4f:
         c4:6c:df:d7:0a:0a:62:f7:6c:10:eb:80:3f:57:b6:be:f0:1e:
         c9:aa:be:14:06:05:96:d0:8b:66:ec:ef:e0:f0:7a:62:8a:e2:
         e9:09:9e:12:0c:cf:5d:b8:30:56:aa:6e:dc:b7:0f:ea:91:9e:
         80:55:a8:41:6b:9f:28:72:4c:86:b3:8a:00:c3:5b:bd:ca:9e:
         5b:70:20:66:4d:54:13:09:7a:69:9d:58:71:b5:34:ef:55:f2:
         d6:ad:c6:90:1e:8c:15:9b:8a:0d:65:61:16:b6:77:22:8f:ef:
         21:ef:23:6b:fe:a4:e7:a7:34:d1:87:c0:51:50:87:28:d1:20:
         c9:c8:e2:15:06:02:bc:7f:06:a6:1d:6b:df:27:5f:a9:52:1a:
         f4:b4:08:08:d3:7f:9f:38:4d:6f:c3:b1:51:7f:a7:95:61:a5:
         c7:13:c9:66:ac:c4:9f:46:11:d2:90:a3:2a:3a:eb:9d:14:49:
         f0:38:5a:30:ef:d1:61:73:82:15:d4:51:34:60:01:26:5d:88:
         07:c5:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:28 2024 by rpki-client on console-ams.rpki-client.org