Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/3137302e3233332e32302e302f32322d3233203d3e20323638323839.roa
File:                     3137302e3233332e32302e302f32322d3233203d3e20323638323839.roa (raw, json)
Hash identifier:          +a8r/m6iN+NDRFdpYeecdUzhlnZnR6bttus0xK9439A=
Subject key identifier:   BC:75:A9:D4:14:7A:96:B6:19:5D:9E:27:39:FA:1A:CE:C9:D8:67:66
Certificate issuer:       /CN=B56EEE7304E8D507FC1F8793090E1D975EFC96F1
Certificate serial:       02A05C0AF63F2939B8F9D0F38536CB1FA7EF17D2
Authority key identifier: B5:6E:EE:73:04:E8:D5:07:FC:1F:87:93:09:0E:1D:97:5E:FC:96:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/3137302e3233332e32302e302f32322d3233203d3e20323638323839.roa
Signing time:             Sat 29 Jun 2024 17:33:38 +0000
ROA not before:           Sat 29 Jun 2024 17:28:38 +0000
ROA not after:            Sat 28 Jun 2025 17:33:38 +0000
asID:                     268289
IP address blocks:        170.233.20.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.crl
                          rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:5c:0a:f6:3f:29:39:b8:f9:d0:f3:85:36:cb:1f:a7:ef:17:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56EEE7304E8D507FC1F8793090E1D975EFC96F1
        Validity
            Not Before: Jun 29 17:28:38 2024 GMT
            Not After : Jun 28 17:33:38 2025 GMT
        Subject: CN=BC75A9D4147A96B6195D9E2739FA1ACEC9D86766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:79:9d:bb:ca:2d:09:ed:ae:7e:0c:a0:07:
                    b9:49:7c:a3:a5:f6:c6:7d:66:b3:ae:2b:f9:30:10:
                    2f:ee:60:b2:8a:aa:9c:21:75:94:e9:53:66:83:70:
                    4d:f4:08:4d:c3:5f:0f:25:d8:ac:5e:c0:6e:85:f8:
                    c1:95:9a:82:65:6f:10:f7:dd:8f:ac:50:50:08:10:
                    a1:c6:32:84:c5:b2:35:f5:57:66:46:3c:6a:10:5e:
                    f6:65:ae:34:a1:ed:1b:b9:f6:c1:fa:06:dc:47:41:
                    15:99:5a:e2:eb:b6:48:d0:d3:b2:b6:44:9f:9e:e9:
                    1d:cc:cd:d0:03:11:dc:c8:1e:b5:3d:d4:5f:29:f6:
                    f0:30:e1:23:7d:70:fd:89:f2:e7:4c:37:11:fc:c4:
                    d5:96:10:a6:c1:83:6c:55:e8:3d:a6:44:26:88:73:
                    79:f2:84:b1:97:8a:c2:a2:fc:4d:9a:f2:9b:8d:9b:
                    01:25:6b:ff:98:ee:54:f4:e5:15:4f:f5:36:f1:0b:
                    6b:6a:d7:2d:0f:2d:8c:e4:31:1f:4e:f5:ae:09:58:
                    72:a3:61:7d:b9:aa:60:9a:1d:f7:89:a8:8a:1d:0a:
                    23:8c:9f:d6:db:0f:45:7c:94:6a:24:b2:58:7f:0d:
                    ac:5a:55:43:de:59:37:9e:6f:eb:9c:2d:0b:11:ac:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:A9:D4:14:7A:96:B6:19:5D:9E:27:39:FA:1A:CE:C9:D8:67:66
            X509v3 Authority Key Identifier:
                keyid:B5:6E:EE:73:04:E8:D5:07:FC:1F:87:93:09:0E:1D:97:5E:FC:96:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/3137302e3233332e32302e302f32322d3233203d3e20323638323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:92:ae:0c:0f:1f:1a:02:2e:4e:dc:74:6a:cf:24:da:22:f7:
         ae:ad:09:3e:8b:35:bb:91:d9:78:3e:38:87:93:e1:b7:28:57:
         b0:2e:f1:74:e9:64:42:05:0b:ba:3b:89:3e:6d:e1:b6:39:fb:
         da:a7:b4:6b:d0:a0:95:19:6c:68:27:7e:67:89:cb:40:cf:77:
         de:13:27:2c:75:4a:86:aa:1d:96:81:06:52:29:56:b1:19:00:
         dc:77:37:7b:94:4c:04:7b:f1:d2:1c:6e:52:0e:6f:69:2d:4b:
         58:98:19:53:31:c1:47:bc:23:18:90:7d:b1:1d:39:65:c8:0b:
         18:fe:be:e9:0c:da:86:ce:d4:15:61:cc:89:96:ca:01:d0:f3:
         3d:3f:0e:3f:d8:dc:9b:40:bc:6b:b5:10:e1:de:2b:80:23:10:
         08:16:71:4d:7b:a6:08:5b:60:b5:fd:b4:9e:db:f4:ad:a0:52:
         9f:d8:2b:e3:eb:ec:86:f1:4d:5f:f5:ef:2f:df:76:66:38:51:
         cb:a3:f3:57:23:81:b5:45:b7:cd:18:32:5f:ff:fe:e2:33:04:
         e6:e6:17:2d:d8:08:dd:f3:8e:05:01:11:0e:e3:3f:4d:60:e3:
         eb:b1:a5:c0:59:fe:ce:b1:fe:f1:0c:8c:f2:6d:a0:3d:0e:9c:
         e4:6c:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:23 2024 by rpki-client on console-ams.rpki-client.org