Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37382e302f32332d3233203d3e20323730343133.roa
File:                     3137302e302e37382e302f32332d3233203d3e20323730343133.roa (raw, json)
Hash identifier:          OmyLYgeG3Vm9z5QC4xzKi4Utb7otBUaUF5fakW8cMmw=
Subject key identifier:   69:41:60:E1:59:3A:D6:D3:C0:D5:D8:39:99:73:83:02:8D:C4:7B:7E
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       296F03FBC728C84DBD8D7BD4B9128AF00AFDB826
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37382e302f32332d3233203d3e20323730343133.roa
Signing time:             Thu 04 Apr 2024 00:25:31 +0000
ROA not before:           Thu 04 Apr 2024 00:20:31 +0000
ROA not after:            Thu 03 Apr 2025 00:25:31 +0000
asID:                     270413
IP address blocks:        170.0.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6f:03:fb:c7:28:c8:4d:bd:8d:7b:d4:b9:12:8a:f0:0a:fd:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Apr  4 00:20:31 2024 GMT
            Not After : Apr  3 00:25:31 2025 GMT
        Subject: CN=694160E1593AD6D3C0D5D839997383028DC47B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c0:3e:d4:ae:05:b8:46:84:1d:2b:64:71:e4:
                    10:8b:02:45:78:83:f3:c1:e9:76:1c:a7:db:c8:38:
                    eb:5b:6c:9f:af:77:01:da:aa:85:7b:5a:6e:61:fd:
                    79:e8:4d:30:89:25:cd:0c:7c:64:3d:72:4a:09:dd:
                    21:d1:c5:38:1a:11:bc:f6:7b:b3:89:e9:cc:c4:42:
                    c1:8e:9b:d9:7e:64:5d:b0:b1:02:f8:4f:6b:e1:11:
                    a7:45:b4:c9:48:b9:38:1c:c6:65:d1:84:1a:89:ba:
                    0f:37:f3:a6:47:8d:ca:cc:8f:0d:ad:18:69:75:d0:
                    bf:c2:f1:2d:1e:18:08:c1:3f:1f:d7:15:0a:d3:28:
                    77:2c:4a:e3:d5:67:53:7e:07:07:be:2b:f1:d5:9b:
                    eb:6c:a5:b3:59:b9:6b:26:ef:cd:58:0e:bc:5c:6b:
                    69:9e:bc:47:cc:09:78:d1:29:7e:0b:31:9d:71:0f:
                    66:f3:c9:4c:b8:c2:76:70:60:36:1c:39:83:1c:0c:
                    6c:2e:39:26:ab:72:f6:62:60:53:1f:26:38:70:ab:
                    0a:1a:6e:1a:80:23:7b:94:b3:2e:4f:cd:48:2a:48:
                    91:b6:90:9b:73:67:a4:e7:51:48:10:cd:03:5f:22:
                    ae:a8:32:ea:e5:79:08:54:23:90:36:a1:af:3e:70:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:41:60:E1:59:3A:D6:D3:C0:D5:D8:39:99:73:83:02:8D:C4:7B:7E
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37382e302f32332d3233203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:3a:82:e1:a4:4d:37:c2:c5:62:88:8b:70:d4:31:7b:94:
         01:8c:72:6e:ad:86:a4:e1:1d:73:f3:9a:23:7e:e3:99:a6:0e:
         06:5f:94:7b:c4:75:c5:a7:20:08:3e:b9:fd:90:97:91:3c:35:
         33:9d:f8:2d:8b:4e:62:8a:17:55:42:3b:4d:0e:fa:dd:a6:06:
         b6:fc:04:e8:0d:9e:7f:e3:92:40:8a:fe:bf:52:11:92:c2:84:
         8b:59:5d:a5:a8:51:ad:8a:fc:61:70:ca:83:0d:7e:6c:61:bb:
         5e:de:1e:bd:95:c5:fa:4f:fc:92:0f:cc:d3:8b:51:e9:60:04:
         68:8a:ab:55:ca:ab:3a:ec:ef:d8:71:b8:47:17:46:8f:90:b4:
         46:75:bf:88:e6:6b:71:6b:43:04:0f:a9:29:79:db:67:d9:7a:
         30:f9:d0:df:a7:b0:45:0b:2d:ff:42:1e:ac:78:56:5b:9d:28:
         aa:4a:cf:a7:80:f8:9d:11:3f:10:6c:bb:a4:f6:98:34:9c:4f:
         04:22:4e:00:9d:00:22:8c:a4:06:e0:47:5a:53:4e:30:1f:da:
         bd:9a:24:f8:df:b9:44:1b:ce:0c:c6:25:7b:1c:af:0b:b2:8b:
         26:b9:9b:66:1d:60:a5:bc:98:35:91:8e:e4:cd:71:eb:12:de:
         24:10:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org