Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32332d3233203d3e20323635313036.roa
File:                     3137302e3235342e3133322e302f32332d3233203d3e20323635313036.roa (raw, json)
Hash identifier:          hKOrKBrkGjqDOoU6bLHud8QdXak29rGLcLUi4rVqTJc=
Subject key identifier:   1B:01:69:14:1E:84:2B:FF:6E:AD:BB:E6:F5:47:B6:55:E3:1D:01:81
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       43836D5F55E712E4407DA0DB780394C488CB81A2
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32332d3233203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:39 +0000
ROA not before:           Tue 30 Apr 2024 13:07:39 +0000
ROA not after:            Tue 29 Apr 2025 13:12:39 +0000
asID:                     265106
IP address blocks:        170.254.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 06:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:83:6d:5f:55:e7:12:e4:40:7d:a0:db:78:03:94:c4:88:cb:81:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:39 2024 GMT
            Not After : Apr 29 13:12:39 2025 GMT
        Subject: CN=1B0169141E842BFF6EADBBE6F547B655E31D0181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:18:1e:d9:a2:90:1e:d8:c9:84:04:63:5c:
                    75:5c:dd:0f:1b:bf:94:25:42:3c:96:18:be:3f:c7:
                    ec:75:f7:d0:1c:cf:9b:39:0e:2e:73:e6:1a:6b:51:
                    91:b3:7d:cd:5a:e2:fd:d5:94:e3:be:d8:9e:95:66:
                    72:52:a2:f6:41:d5:40:0d:16:4b:d9:d9:dc:09:c1:
                    dd:36:7b:fc:a1:86:3c:fd:69:5c:f5:c9:6e:57:d6:
                    4f:2f:2a:3c:95:bc:5c:9e:95:b8:0e:0a:d7:fd:86:
                    8f:d2:6a:b8:be:7a:cd:73:45:62:dc:66:ce:4a:bc:
                    d4:46:ec:89:1c:76:ec:8e:ad:51:f0:bb:f4:56:80:
                    f2:a4:6e:0c:64:82:c8:3f:92:76:9e:0c:2c:7f:4f:
                    00:e9:48:99:10:9f:d5:df:74:29:0a:67:c2:4e:08:
                    b4:4a:7c:fa:4c:96:0d:8e:0b:dd:bf:92:5c:0e:83:
                    cb:32:38:1e:16:ab:07:ce:00:c5:27:23:70:be:5c:
                    ae:bb:77:d1:1a:da:41:fb:c9:9d:75:53:fc:db:3d:
                    00:09:be:bc:95:02:17:db:db:eb:54:fd:91:7b:ff:
                    df:4d:81:0c:d2:07:92:f7:20:84:d2:77:8a:41:73:
                    f2:2f:39:31:0c:3f:68:bc:ec:df:48:06:5e:7a:50:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:69:14:1E:84:2B:FF:6E:AD:BB:E6:F5:47:B6:55:E3:1D:01:81
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32332d3233203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:a0:92:b4:e6:17:7e:4d:97:18:84:8c:cf:ee:2f:67:39:
         d7:5c:c1:d9:0e:b3:48:eb:0a:e4:0f:35:c6:c0:9f:c2:9d:29:
         26:b8:f1:b5:0e:69:e3:3b:2a:ad:87:25:ce:bd:c0:5a:49:8e:
         49:d7:86:54:67:eb:6b:18:4d:ce:41:9c:ee:62:a7:5c:9e:93:
         45:2a:b6:7c:01:a0:e5:19:30:08:a5:e6:41:59:5f:03:26:1e:
         f2:7d:a6:94:c7:05:d6:3d:5c:f4:29:6f:8e:26:dc:fe:fb:5f:
         5b:cd:dd:f0:b8:59:43:21:f1:38:24:01:4b:04:01:52:f4:9f:
         dd:1d:65:d5:c1:54:2f:6a:b9:c0:a3:8f:b1:5d:9d:1b:47:36:
         be:3d:85:ed:02:56:30:ea:72:c4:77:ae:b9:b4:fb:3a:7e:32:
         9e:f9:fb:5d:21:29:5f:6b:9b:d6:ff:07:68:d2:5d:b3:dd:f2:
         37:25:bf:25:a1:f7:9b:c9:6c:c5:72:56:e7:ca:42:4f:43:ad:
         3d:09:51:7f:e8:2d:c2:c5:1e:cd:1c:2b:d8:ed:92:fd:08:43:
         0a:0c:43:cf:56:d4:02:1b:3e:f5:a7:86:15:cb:28:db:d3:46:
         6c:8b:19:71:43:93:41:d9:bc:b0:c7:ff:4e:73:c1:2b:db:d2:
         71:00:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:31 2024 by rpki-client on console-ams.rpki-client.org