Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa
File:                     3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa (raw, json)
Hash identifier:          sMc2tiJ9/jIkTvw1UqJfpV+0DTwWnh4CY+VcxM+dlZo=
Subject key identifier:   E4:97:15:3C:62:BA:80:D5:6B:03:11:A6:C6:80:3C:D1:FD:6D:A4:57
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       377D885921AA7B12C29F8AE5FA9D2821A1EBA019
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa
Signing time:             Thu 04 Apr 2024 14:29:40 +0000
ROA not before:           Thu 04 Apr 2024 14:24:40 +0000
ROA not after:            Thu 03 Apr 2025 14:29:40 +0000
asID:                     266385
IP address blocks:        170.80.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7d:88:59:21:aa:7b:12:c2:9f:8a:e5:fa:9d:28:21:a1:eb:a0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr  4 14:24:40 2024 GMT
            Not After : Apr  3 14:29:40 2025 GMT
        Subject: CN=E497153C62BA80D56B0311A6C6803CD1FD6DA457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:7e:3a:3e:3c:60:9b:49:63:0c:9f:e6:a9:
                    34:73:79:4b:3b:d3:b8:8a:2b:da:5e:1b:5a:cb:70:
                    5c:fd:ad:56:a6:47:02:21:18:4b:4c:57:d5:b9:36:
                    76:bf:1f:a5:bb:3a:bb:1b:02:80:52:a5:c9:b2:1a:
                    89:cb:28:f7:8a:6a:0e:0f:62:2e:cb:bd:e1:79:e0:
                    f2:41:b0:e0:16:f0:b3:da:83:94:ca:9c:9a:94:2d:
                    63:d5:4b:59:b2:64:97:e0:5c:c1:ec:2c:17:dc:f3:
                    84:2b:90:63:35:e0:ed:46:99:27:68:c1:9b:28:43:
                    e2:a6:84:89:c0:8b:db:41:88:77:fc:4f:50:02:5f:
                    90:a8:26:bb:6a:ef:9b:18:a1:b1:18:0f:00:f1:b2:
                    1b:d7:f9:49:3c:49:25:29:39:e9:37:4a:a0:c6:7f:
                    e1:3f:d6:60:27:b3:e6:fc:ee:a3:6d:4f:05:64:3e:
                    76:a6:b1:d6:26:fb:b5:3d:ae:b5:e9:10:e1:56:a6:
                    e1:84:db:e9:9b:5e:35:ba:59:2a:a9:ad:af:c4:46:
                    78:ba:a8:ec:a8:61:42:c8:83:23:89:54:e9:9a:fe:
                    3f:c0:d4:b1:d8:0f:4c:da:0f:1b:9b:e8:e4:4e:54:
                    cd:54:39:38:1a:b1:17:d9:9b:0e:41:19:60:44:a5:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:15:3C:62:BA:80:D5:6B:03:11:A6:C6:80:3C:D1:FD:6D:A4:57
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:14:5d:8b:c6:2b:55:89:e7:17:4a:0a:70:30:70:54:74:
         ee:aa:3f:29:66:46:2b:c8:2d:89:1c:0f:89:67:ae:5d:9d:f2:
         2f:af:15:ce:7a:80:e7:00:74:83:9e:8e:4e:71:24:d5:bb:a6:
         4b:d1:c9:c8:06:a1:09:74:90:53:41:86:49:f8:ea:88:13:a6:
         63:46:3a:91:fb:7d:b3:3f:60:50:60:ec:bf:e8:cb:31:38:1c:
         e7:27:dc:27:6e:c6:aa:98:e0:a0:24:d3:6a:88:90:64:63:93:
         e1:cd:16:08:35:59:f4:61:4c:3c:c7:e4:d9:c5:cc:db:e1:27:
         7c:83:8e:d1:04:04:82:a2:7f:d0:ed:e8:18:b1:34:c8:d5:57:
         37:f4:02:45:49:a6:56:eb:b4:64:90:9c:b5:2b:d0:9f:f9:cb:
         63:c8:6b:8b:89:7a:dd:61:75:6c:25:8e:68:a7:49:4e:e4:80:
         9e:39:6c:85:ea:48:50:ca:a8:2b:33:37:ad:dd:73:ae:52:f3:
         77:7d:5e:d8:22:46:a5:95:b0:4c:e8:69:22:11:81:3c:00:2c:
         72:37:45:15:d9:b1:07:ed:13:f1:e5:7f:1e:73:6b:78:f0:69:
         80:00:89:b1:72:07:bf:a8:28:6a:f7:3f:2a:5f:eb:ac:51:c5:
         08:46:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:22 2024 by rpki-client on console-fra.rpki-client.org