Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa
File:                     3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa (raw, json)
Hash identifier:          ksO0QJoV+d85CJrFZ3ExhQl1LMzgb/+8I3+HnC6oTzM=
Subject key identifier:   9D:25:07:F4:0D:F5:5B:A1:3C:E1:D0:59:71:F3:46:B8:DC:FA:3F:05
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4C7CCF85EF3967D4F0F26FE14DFBCDE991F087AE
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:47 +0000
ROA not before:           Wed 03 Apr 2024 18:26:47 +0000
ROA not after:            Wed 02 Apr 2025 18:31:47 +0000
asID:                     266623
IP address blocks:        128.201.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:cf:85:ef:39:67:d4:f0:f2:6f:e1:4d:fb:cd:e9:91:f0:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject: CN=9D2507F40DF55BA13CE1D05971F346B8DCFA3F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:4b:7e:30:ce:a3:bc:60:25:4d:9e:72:d2:
                    6c:64:c1:f7:36:8a:9a:84:d4:8c:bf:6c:b0:12:89:
                    56:62:46:7e:b6:ae:f5:25:b8:c0:1d:0e:14:7c:92:
                    68:aa:11:35:31:1b:b4:f1:3c:c1:7b:b2:7c:23:d7:
                    6b:2e:90:d9:54:91:e6:6c:91:b9:c4:ff:4a:bc:8b:
                    2d:74:36:7d:9d:0e:e1:ca:0a:37:3d:8d:bb:e7:c2:
                    06:1b:bb:e3:ab:51:63:74:bb:dc:f0:28:e7:5b:a8:
                    7e:73:c5:cd:e9:2d:b7:e6:2a:22:98:c2:55:7e:84:
                    2d:64:5a:ab:c6:80:01:c3:c9:a0:f3:31:9e:31:3a:
                    dd:1f:b7:ec:b3:a2:85:ca:9f:a2:54:fe:0f:0f:d3:
                    78:a3:05:82:75:c8:02:b0:0c:b1:af:f2:34:d2:be:
                    f3:83:c2:cd:bc:e0:2b:6f:9c:47:19:cd:10:c2:46:
                    8e:49:ab:80:fa:ef:c3:e2:cc:95:94:32:4b:30:50:
                    16:91:d1:8b:bb:3a:24:80:a7:8c:ce:3e:35:10:2f:
                    af:65:6b:2f:b8:53:68:24:bc:84:f0:ce:d6:30:f7:
                    e0:7f:83:10:aa:33:96:86:a7:2f:80:00:1f:b7:07:
                    e8:fa:41:3f:5d:51:a3:a2:e8:e9:cc:68:dd:a3:ba:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:07:F4:0D:F5:5B:A1:3C:E1:D0:59:71:F3:46:B8:DC:FA:3F:05
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:7a:84:16:bb:7c:bd:b2:0c:25:97:1c:c7:fd:d4:a3:0e:
         a2:ee:be:e6:08:52:53:11:1f:a9:cc:75:ed:21:c2:72:33:02:
         00:b3:d0:dd:c2:1b:7f:a3:04:c2:94:c5:c7:4e:ec:3e:b4:15:
         e9:de:62:bd:d2:78:7d:4e:d8:5c:67:34:de:7b:2c:54:4b:25:
         e5:d8:b6:55:52:53:8d:7b:79:a4:fb:83:5e:11:60:7c:af:48:
         e1:ca:d3:52:36:61:80:7f:fc:ea:f3:d6:fe:87:17:32:cf:a5:
         7b:89:55:d4:f4:7b:ab:ae:0e:39:b6:13:2d:58:d5:ea:f7:c6:
         de:d8:43:c4:41:cd:52:de:f6:b3:08:6e:0a:6b:9f:d1:41:c4:
         d2:6e:d9:cf:b5:7f:a9:bc:44:84:40:5f:8a:1c:06:b3:76:89:
         3f:4a:9f:69:0f:a2:f5:d1:46:e8:fb:a2:15:4c:20:a6:b3:04:
         05:39:ff:78:82:3c:25:45:9b:00:6f:27:44:18:aa:31:63:59:
         bc:82:54:c2:59:1f:1d:04:98:7d:70:5e:2c:25:29:98:9a:0d:
         6f:ef:47:df:88:9e:92:5d:67:13:f9:73:e8:69:ad:cd:21:94:
         8b:2e:f0:42:dc:9f:af:c8:28:dd:fd:f6:03:a4:97:4d:98:63:
         a8:9b:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org