Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa (raw, json)
Hash identifier:          dKTZzU9rE4D30IFMbYhV0L6Qv7MwFYOA59HHsj+J09g=
Subject key identifier:   D2:10:21:90:18:C2:48:AC:A9:FF:B4:70:B1:F9:7C:9D:E6:AF:01:EB
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       776564F88A52BD2453A51CD96AE25776521F964C
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa
Signing time:             Thu 04 Apr 2024 14:29:40 +0000
ROA not before:           Thu 04 Apr 2024 14:24:40 +0000
ROA not after:            Thu 03 Apr 2025 14:29:40 +0000
asID:                     266385
IP address blocks:        170.80.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:65:64:f8:8a:52:bd:24:53:a5:1c:d9:6a:e2:57:76:52:1f:96:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr  4 14:24:40 2024 GMT
            Not After : Apr  3 14:29:40 2025 GMT
        Subject: CN=D210219018C248ACA9FFB470B1F97C9DE6AF01EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:82:2f:c5:1f:fb:9a:91:43:de:50:d2:91:
                    0d:f6:22:0d:30:36:e1:ad:fc:11:eb:fd:e7:6a:eb:
                    dc:aa:98:fd:63:e4:62:51:14:8d:04:dd:f1:93:a0:
                    1a:d5:b6:c6:31:4e:27:7f:65:71:a1:0a:e1:1b:83:
                    35:30:10:24:2c:2d:75:b2:c1:89:6e:11:89:dd:1d:
                    00:33:6f:0e:13:77:bc:44:d7:e3:e8:fe:37:ef:91:
                    72:7e:e4:62:c2:e6:0a:dc:b5:2b:fd:ab:81:87:5c:
                    c5:35:6a:22:95:58:a7:d8:69:1b:92:29:4a:5b:ee:
                    cc:fb:71:41:93:86:ca:b9:02:12:93:0a:bc:1b:7d:
                    1f:01:bf:88:4a:23:6a:96:19:45:ea:1f:0e:ff:0b:
                    91:24:71:bc:6c:5f:f9:6f:fd:79:3b:e3:5e:34:ef:
                    98:3c:b5:63:29:5a:6b:88:85:f5:02:83:ed:67:30:
                    29:22:2f:13:b2:be:46:f3:16:35:2e:85:c8:86:e0:
                    bf:05:c8:c4:55:39:8e:1c:6a:c2:2a:11:40:c7:ab:
                    ab:9a:f3:85:de:70:44:1d:16:9f:8a:73:f2:ac:57:
                    78:82:1c:b8:c7:39:81:d7:1a:3a:46:86:68:92:aa:
                    f7:e1:43:42:8d:8c:59:df:7f:cd:88:a9:46:81:ab:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:10:21:90:18:C2:48:AC:A9:FF:B4:70:B1:F9:7C:9D:E6:AF:01:EB
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:88:ea:bd:01:70:9e:81:a9:0a:34:82:06:3e:86:59:71:41:
         9e:f6:a7:f3:12:76:39:de:3e:9e:d1:69:74:0d:6e:59:14:56:
         d8:c7:1d:bf:70:47:d6:8f:2e:84:98:04:a2:ad:14:3c:1a:1b:
         b2:cd:72:f4:6a:e8:2d:79:d7:af:89:d0:ff:35:98:9f:ca:f4:
         e6:a6:9b:12:d1:f0:b5:ea:9d:69:3a:50:49:ca:12:d3:2b:ab:
         c8:13:f4:85:b1:b5:bc:65:18:ce:92:67:70:1a:d3:db:12:47:
         eb:df:03:45:e7:18:55:d3:e5:6b:63:bc:68:ca:bb:67:63:b8:
         cb:1b:5b:df:8b:f8:b6:d6:75:ad:0c:34:8a:fb:5b:d0:fc:50:
         2c:cc:78:8d:04:66:ca:f0:af:45:3f:bc:bc:0f:c2:c9:f7:a1:
         2d:50:5e:e2:60:81:95:10:9e:8c:23:40:7a:84:02:da:64:50:
         a2:bb:e7:2e:ca:9c:d4:7c:a2:96:fc:bf:24:c6:a5:74:8b:c6:
         10:e7:64:0b:ec:e5:4c:11:3a:0f:69:f1:e6:81:d2:74:30:65:
         ed:a2:55:55:18:8b:31:f2:18:be:ed:b4:63:69:87:0b:c7:e9:
         4b:c6:79:e3:78:05:5e:ed:27:c9:04:86:97:02:6a:8b:f3:a3:
         69:09:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org