Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa
File:                     3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (raw, json)
Hash identifier:          zIY+7Nmup6G8AwKW3RLe54JUDL9OEzUxHURu2kANdlY=
Subject key identifier:   58:35:B1:5D:48:91:8D:7C:98:05:CE:90:6C:21:BC:76:63:C3:F7:86
Certificate issuer:       /CN=A665DF6E8BF7E4004707184C93756CB086A86795
Certificate serial:       764CE6B68783274331A0CD713A73CFCD8CBC0E88
Authority key identifier: A6:65:DF:6E:8B:F7:E4:00:47:07:18:4C:93:75:6C:B0:86:A8:67:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A665DF6E8BF7E4004707184C93756CB086A86795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa
Signing time:             Wed 03 Apr 2024 21:58:37 +0000
ROA not before:           Wed 03 Apr 2024 21:53:37 +0000
ROA not after:            Wed 02 Apr 2025 21:58:37 +0000
asID:                     266309
IP address blocks:        170.79.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/A665DF6E8BF7E4004707184C93756CB086A86795.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/A665DF6E8BF7E4004707184C93756CB086A86795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A665DF6E8BF7E4004707184C93756CB086A86795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4c:e6:b6:87:83:27:43:31:a0:cd:71:3a:73:cf:cd:8c:bc:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A665DF6E8BF7E4004707184C93756CB086A86795
        Validity
            Not Before: Apr  3 21:53:37 2024 GMT
            Not After : Apr  2 21:58:37 2025 GMT
        Subject: CN=5835B15D48918D7C9805CE906C21BC7663C3F786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:95:3b:2a:16:d6:37:b1:57:30:0c:cd:36:
                    9d:09:47:01:3c:4b:22:f7:d5:e3:90:36:28:54:d3:
                    25:8d:f4:d0:3e:5c:85:bc:c4:60:33:70:38:34:01:
                    8a:94:4c:6b:79:5f:8f:80:43:11:b4:dc:9c:db:00:
                    96:47:ed:e4:33:66:f6:17:6a:7f:85:65:68:47:f7:
                    68:87:20:a7:1b:be:db:7a:e4:c6:44:3a:0d:e7:0b:
                    5f:41:79:9b:0f:a9:13:20:ca:19:c9:db:27:12:14:
                    80:db:5f:52:5e:3c:0a:b5:df:27:d2:2b:39:cf:bb:
                    fd:c4:0e:09:c3:df:07:7a:2e:3d:62:4f:ba:e8:44:
                    9a:29:2c:2e:d6:e3:b7:e4:8a:2b:26:5a:db:d1:3c:
                    cc:37:d2:54:d1:bd:2f:ee:51:1f:e6:0b:de:ef:bf:
                    36:9e:74:76:d2:fb:a0:ac:7d:42:fe:75:a7:58:c4:
                    6a:3a:e9:ed:77:6a:5a:c7:7a:17:65:0b:be:73:e6:
                    10:ce:3a:50:b3:2e:8c:ab:5d:00:3b:e5:fc:ee:f3:
                    d6:3a:a8:96:3a:1b:d3:d7:38:f0:1f:33:74:46:04:
                    43:53:71:58:50:b7:0a:26:94:7f:de:38:4f:02:30:
                    52:c7:0c:fe:fd:6a:9e:5b:0e:4a:5c:d5:4b:95:83:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:B1:5D:48:91:8D:7C:98:05:CE:90:6C:21:BC:76:63:C3:F7:86
            X509v3 Authority Key Identifier:
                keyid:A6:65:DF:6E:8B:F7:E4:00:47:07:18:4C:93:75:6C:B0:86:A8:67:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/A665DF6E8BF7E4004707184C93756CB086A86795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A665DF6E8BF7E4004707184C93756CB086A86795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:51:63:73:ec:db:bf:60:52:d8:7b:3a:94:9c:f5:38:31:
         4b:30:f0:18:84:e7:69:f9:65:ca:ed:71:6c:39:89:9e:e5:b4:
         e9:d1:e5:8d:18:a8:f0:04:75:a0:55:65:c3:62:08:0b:29:e6:
         54:f8:53:37:84:1d:9b:52:dd:cc:7f:d0:6a:bb:e1:3d:95:f1:
         50:0e:84:c4:f3:de:45:a1:1e:af:6a:2f:fe:60:9b:1a:27:0e:
         00:6d:2b:24:96:05:ae:4c:ce:e9:28:87:06:78:3c:82:ac:ca:
         a1:d2:e6:ec:74:b8:34:c0:d2:ce:54:7b:5c:06:09:82:89:d0:
         0d:5c:7c:73:8b:ed:46:88:5f:3b:0f:91:9e:84:ef:0c:da:b4:
         a9:2f:9b:d8:41:7b:db:ff:76:34:3d:62:b9:2c:bc:c7:fd:d7:
         eb:89:07:cd:f6:08:0a:d8:b1:ad:17:87:2c:c7:ec:ab:7d:91:
         d5:12:80:5b:c8:a1:31:a1:41:fa:bc:8a:e4:b6:11:96:09:86:
         df:99:23:d0:f7:54:ab:9d:e2:08:6c:a4:d0:ca:5e:47:02:c3:
         65:ea:49:cc:8d:b4:84:49:5b:b2:2a:d0:5b:51:ae:18:ae:04:
         68:db:83:1c:17:e3:fc:fc:bb:86:08:c6:fd:b4:ae:5c:0f:cd:
         69:71:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:56 2024 by rpki-client on console-ams.rpki-client.org