Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa
File:                     3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa (raw, json)
Hash identifier:          jrnwxPSaz1xJuvq4IPZaCR+jcmdPPCJ/WXyn9QjUmM4=
Subject key identifier:   F5:CB:0E:4F:DD:9C:80:45:9F:02:E6:19:4B:23:7C:6D:E8:C4:E9:52
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       6D246C5BE44BB96A953D49BB7E3EA2AD7267A2FD
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa
Signing time:             Thu 04 Apr 2024 14:29:41 +0000
ROA not before:           Thu 04 Apr 2024 14:24:41 +0000
ROA not after:            Thu 03 Apr 2025 14:29:41 +0000
asID:                     266385
IP address blocks:        170.80.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:24:6c:5b:e4:4b:b9:6a:95:3d:49:bb:7e:3e:a2:ad:72:67:a2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr  4 14:24:41 2024 GMT
            Not After : Apr  3 14:29:41 2025 GMT
        Subject: CN=F5CB0E4FDD9C80459F02E6194B237C6DE8C4E952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:3a:1b:da:73:e4:73:1d:96:8a:7a:0e:db:
                    83:99:51:93:ca:ec:54:61:c3:0e:41:3a:66:96:2c:
                    c7:b9:b9:a0:8e:68:6e:dd:91:3f:4f:ca:7d:04:dd:
                    f9:e5:b3:6e:de:b8:dd:69:bc:07:2d:90:22:26:de:
                    a4:f2:bf:ef:bc:45:7a:ee:16:b9:2e:85:8a:95:19:
                    2d:f9:e6:79:c0:74:4d:97:75:ec:71:4f:88:b7:e3:
                    43:6d:ee:a4:3b:fe:e1:1d:91:d1:6b:13:45:25:f6:
                    15:35:73:07:7b:83:7a:57:29:e4:16:04:b1:3f:31:
                    d0:49:67:88:1f:2f:77:f7:74:63:3a:35:6e:d1:5e:
                    98:2c:38:c2:00:db:7e:5d:68:ba:e8:6b:21:8f:54:
                    78:37:95:e3:1c:e8:f6:b0:65:fc:81:1b:29:da:a3:
                    be:79:f5:30:37:48:5b:d4:6c:38:bc:e3:e1:1a:47:
                    f1:6a:9a:b7:3f:72:00:68:ef:20:5c:60:cb:37:52:
                    de:b0:3b:45:e8:63:b2:57:0d:0f:cf:73:43:b9:9e:
                    b2:e7:60:8c:b2:c8:a7:06:64:64:ca:37:c0:6e:8a:
                    cb:b9:31:a2:61:f7:bc:51:2a:f6:ae:b0:2a:59:6d:
                    90:21:ca:10:57:b9:1f:92:77:4a:62:b8:b3:4d:83:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:0E:4F:DD:9C:80:45:9F:02:E6:19:4B:23:7C:6D:E8:C4:E9:52
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:88:86:33:e1:04:fa:59:21:dd:fc:5f:40:d8:a7:47:36:
         27:b7:99:52:a9:95:f5:0e:c9:a9:dc:f2:41:dd:34:b6:1c:4b:
         06:59:ae:11:02:a2:9d:92:e7:20:68:4b:87:fd:00:e6:a8:7a:
         40:3a:ce:b7:92:34:35:c8:f5:ea:55:3f:40:c1:10:16:56:f1:
         16:ca:d1:98:ba:29:62:e5:4a:ca:1e:d1:0a:ac:2b:53:5e:f5:
         a6:67:22:89:33:1c:86:03:3b:fe:37:dd:f0:e8:52:3f:43:b0:
         e7:e6:31:4d:f4:d1:81:d0:95:20:00:ec:57:e1:36:73:85:f4:
         a5:65:99:2d:0e:1e:29:c0:0a:cc:23:b8:02:ef:80:81:13:53:
         11:97:02:c9:68:2d:a8:22:05:65:9b:c7:76:e9:b1:83:56:2a:
         32:2e:6b:01:a3:0d:06:d7:1f:89:77:e1:a6:b4:15:b2:20:26:
         d1:17:66:e3:1c:9b:a9:0d:31:77:d6:a9:dd:f2:53:96:50:3f:
         61:95:94:c2:9e:db:ad:2e:e1:74:d1:52:27:07:4b:66:9f:47:
         5f:73:83:28:8a:32:8c:42:f8:bb:8d:4f:8b:c8:fc:da:39:d3:
         92:83:d6:3f:b7:6a:9c:cf:c0:89:99:23:59:6a:13:6a:55:93:
         ad:74:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org