Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa
File:                     3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa (raw, json)
Hash identifier:          wsryl/3CMvsS/R5rpdxmQ9StVFGm+9nIOK3CDY2YLoo=
Subject key identifier:   B5:5B:BA:30:2D:3B:0A:5E:A4:FF:6B:46:E1:49:C4:87:F2:3C:66:5D
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       7046780EA6E5F716DD8142754FC4B101CDCA5F97
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:57:28 +0000
ROA not before:           Thu 11 Jul 2024 11:52:28 +0000
ROA not after:            Thu 10 Jul 2025 11:57:28 +0000
asID:                     28294
IP address blocks:        170.246.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:46:78:0e:a6:e5:f7:16:dd:81:42:75:4f:c4:b1:01:cd:ca:5f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:52:28 2024 GMT
            Not After : Jul 10 11:57:28 2025 GMT
        Subject: CN=B55BBA302D3B0A5EA4FF6B46E149C487F23C665D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:49:03:28:3f:69:0c:35:08:bb:03:1c:bb:
                    55:e7:39:43:3c:d5:b4:e7:49:12:11:61:ed:44:c7:
                    d0:25:bf:23:b9:75:e3:87:81:63:57:ec:fa:36:2d:
                    bc:68:b3:d4:1d:a4:79:ad:90:50:11:4b:14:e4:a2:
                    19:6a:70:59:0a:67:5e:bc:cb:e8:2a:59:57:c8:83:
                    6f:bc:d2:6b:86:be:9a:42:6f:11:f6:37:9f:1a:97:
                    42:6b:43:77:e4:9a:cd:19:6c:74:53:bd:eb:0a:4d:
                    cb:b8:95:11:8d:3b:b4:96:a4:61:ff:88:09:09:58:
                    7a:ff:ab:ca:10:f1:64:21:f6:a5:81:db:30:1e:b2:
                    83:fe:d0:27:fe:61:df:d5:00:16:11:61:1a:f7:a1:
                    d9:8e:c4:1b:e6:71:3d:1b:78:ea:9f:f8:e7:13:2a:
                    47:d1:75:37:a5:44:9b:26:f5:a1:b9:4c:35:ae:ab:
                    61:cd:fd:a0:4c:a0:87:93:65:82:81:cf:6e:0d:bd:
                    c6:35:92:a9:00:ec:0e:dd:d4:b6:6c:33:5a:c1:a4:
                    c1:11:7d:08:6f:88:f7:f0:65:54:53:ab:de:22:78:
                    cf:44:39:19:eb:c6:a9:27:06:91:d6:db:b5:a0:ba:
                    fb:ea:8c:a7:f6:6c:f7:8f:60:c7:a6:cd:10:44:9b:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5B:BA:30:2D:3B:0A:5E:A4:FF:6B:46:E1:49:C4:87:F2:3C:66:5D
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6c:74:ff:15:32:ec:0b:8c:d5:ad:8f:f7:ff:18:9d:49:d6:
         c8:7d:06:f4:a0:ec:99:d6:80:54:9e:9f:71:4f:2a:a1:bf:a2:
         d8:ae:49:a3:3c:8a:4e:b8:68:da:20:57:d1:5d:f0:c3:14:f3:
         da:a1:00:71:8f:22:2e:9f:9c:34:b1:a7:d0:d9:1d:4b:e0:e3:
         01:bb:eb:c3:30:3a:20:23:cc:43:39:86:2b:f5:d0:04:f7:14:
         6c:b2:37:71:ee:95:dd:e9:6d:b1:99:03:7d:e3:aa:36:5a:36:
         80:3e:f4:82:46:97:3e:70:08:e8:51:06:63:e1:47:db:4a:cf:
         c7:3c:45:3d:76:d3:d4:ea:bf:e4:8f:fd:10:20:54:65:cd:c5:
         86:6d:ae:cf:77:61:39:bb:31:16:a5:69:93:6c:8f:b1:54:d4:
         10:62:de:cc:99:15:b5:2c:4b:96:7a:74:3a:ad:62:2d:d3:97:
         9b:ed:48:a4:9a:4c:81:f1:ca:0b:ec:cf:06:1c:07:81:16:66:
         95:07:1d:c4:f9:49:74:94:6d:fe:79:d0:fe:1f:9f:c8:29:33:
         6e:a6:40:1c:18:d0:83:1a:81:ef:45:e1:60:1e:87:ff:57:0a:
         88:c3:fc:c5:cb:03:33:25:65:c5:00:55:d2:6a:ab:35:21:af:
         8e:f1:6b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org