Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323733343637.roa
File:                     3137302e3234352e3137322e302f32342d3234203d3e20323733343637.roa (raw, json)
Hash identifier:          ny7vey7Q/7T1hKYnCT17Ky3eoUzX3OfYBhrUZux3B8Y=
Subject key identifier:   55:DB:6F:5F:72:46:E8:DA:C6:47:89:6D:FD:09:34:3A:F1:51:FA:0B
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       676BC763BF636923CA15EEA8904F74DCC9214923
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323733343637.roa
Signing time:             Fri 24 May 2024 13:40:48 +0000
ROA not before:           Fri 24 May 2024 13:35:48 +0000
ROA not after:            Fri 23 May 2025 13:40:48 +0000
asID:                     273467
IP address blocks:        170.245.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6b:c7:63:bf:63:69:23:ca:15:ee:a8:90:4f:74:dc:c9:21:49:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: May 24 13:35:48 2024 GMT
            Not After : May 23 13:40:48 2025 GMT
        Subject: CN=55DB6F5F7246E8DAC647896DFD09343AF151FA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:8f:94:e2:a3:30:97:f7:77:81:fc:69:0a:
                    b9:20:e7:06:a8:a3:4a:0c:86:c4:9e:e7:e1:99:ef:
                    5c:fb:89:b1:0f:4f:fc:89:ab:35:dc:62:59:e1:f0:
                    1e:46:98:b4:92:2e:98:6d:e7:0a:54:94:21:90:77:
                    21:69:94:2c:11:91:33:2e:33:d2:ad:cb:ea:00:d7:
                    36:c6:0e:b2:46:bd:2c:2d:e0:b1:81:e2:2f:90:38:
                    d0:de:71:24:db:92:1d:19:14:53:de:40:0f:71:6d:
                    a7:0e:61:63:52:3c:45:55:db:8a:5f:d0:e9:0a:86:
                    84:30:00:e3:50:e9:0b:83:07:e1:18:9c:e5:f4:de:
                    87:74:23:e4:5c:c1:1d:cf:6f:e3:87:36:c7:85:b9:
                    1f:b0:cc:48:77:be:c4:32:98:b9:9c:83:3b:d0:cb:
                    20:74:46:99:c2:13:1e:fe:f9:8b:62:fc:2d:a5:36:
                    c0:70:00:9d:cf:e0:06:38:7e:01:58:23:77:f8:af:
                    39:35:9f:f9:32:e7:b1:3e:26:61:8c:8c:71:9e:f0:
                    83:92:48:01:8d:24:d8:ac:35:64:d9:99:84:d7:97:
                    75:14:a5:be:71:ef:26:cc:6e:a7:19:6d:d9:71:9f:
                    81:80:38:2f:e0:ed:a2:e1:db:3e:bf:d8:07:85:2a:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:6F:5F:72:46:E8:DA:C6:47:89:6D:FD:09:34:3A:F1:51:FA:0B
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:92:b2:32:0c:85:24:5d:a2:8c:a0:e0:bd:bb:5f:af:ab:d5:
         9c:ec:b0:f1:e2:29:96:f0:6b:b5:29:75:f0:f5:92:9a:14:f1:
         66:33:7d:d2:be:95:8d:b2:0a:40:a6:c1:e9:86:e4:29:f7:d8:
         f2:bd:a1:b0:81:4b:04:95:32:0b:ca:28:ba:8f:1a:43:55:31:
         fa:11:44:36:e8:30:b2:5e:2e:55:37:35:bf:9e:a1:3c:02:e1:
         03:da:d3:e8:6e:a8:65:3d:ec:14:c4:ce:9a:04:5e:25:b3:c0:
         e5:0f:30:32:e6:71:94:64:d1:fc:4d:52:09:ed:bd:12:5d:9a:
         de:fa:f3:c7:a8:99:b1:62:38:ca:55:50:51:3f:b3:b2:05:71:
         0c:f1:ba:58:0f:09:a6:01:36:c3:f3:29:79:97:ae:1a:f6:33:
         34:a7:f3:c7:9b:da:b4:a4:04:1d:89:7a:67:55:71:ba:af:62:
         aa:dc:b4:99:1b:f0:cf:9b:39:ce:03:3f:90:31:05:68:53:25:
         bf:07:ee:41:4d:79:3f:aa:f6:a5:c3:b5:aa:e6:0f:21:ce:e7:
         09:8d:b3:4c:f0:d8:4d:6a:af:35:ce:86:ff:c3:17:7d:a7:09:
         99:bf:69:24:0a:9e:75:5a:5b:e6:d7:c2:fe:60:45:cd:4c:44:
         fc:92:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:48 2024 by rpki-client on console-fra.rpki-client.org