Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa
File:                     3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa (raw, json)
Hash identifier:          YY1YEPWNbPHbtZr56VYJzmPwjzbYRelAycV+hBxhzmg=
Subject key identifier:   F8:DE:96:64:C6:6F:CB:6D:71:32:F4:C6:FD:54:46:A9:2F:DE:7D:90
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       421A53C15A1E45B909AD619CE25FB3F694F7AEC2
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:38 +0000
ROA not before:           Tue 30 Apr 2024 13:07:38 +0000
ROA not after:            Tue 29 Apr 2025 13:12:38 +0000
asID:                     265106
IP address blocks:        170.254.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 09:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:53:c1:5a:1e:45:b9:09:ad:61:9c:e2:5f:b3:f6:94:f7:ae:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:38 2024 GMT
            Not After : Apr 29 13:12:38 2025 GMT
        Subject: CN=F8DE9664C66FCB6D7132F4C6FD5446A92FDE7D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:d5:b6:5c:1b:8b:57:5d:51:a9:23:04:da:
                    56:8b:ec:2e:76:2e:4f:8f:b3:33:3e:e4:b1:7c:c2:
                    12:74:38:04:de:5f:20:7b:51:6f:98:71:e7:c6:d4:
                    6c:3e:09:02:c1:d1:8e:46:68:89:10:8a:5f:fc:cb:
                    2b:53:e7:dc:30:50:21:38:ec:ea:26:3b:52:40:f7:
                    60:71:0e:0e:c1:93:c5:36:ca:6b:4e:c6:9f:0a:a4:
                    d0:c6:5d:94:75:e8:9a:38:a4:7a:23:43:b9:54:b0:
                    c9:d8:74:1d:1f:22:d2:ad:71:a1:e5:49:e0:ba:e5:
                    a8:cc:b0:ab:6a:93:0c:56:2a:7d:5a:07:1b:be:e2:
                    1f:4f:8c:58:76:ed:a7:fc:a4:75:11:ff:24:fa:3d:
                    d0:a7:de:68:b8:83:7d:c3:fe:42:d2:a2:37:39:44:
                    a3:66:dd:60:78:07:65:b9:18:19:ff:c5:c1:02:ff:
                    8f:e2:9f:c8:49:04:ce:51:bb:e5:2d:6a:da:bc:52:
                    47:b5:4a:d4:0f:0a:89:0c:91:6e:90:17:cb:d5:b2:
                    0b:64:a3:75:15:6f:51:a7:60:4a:83:1e:50:a3:3d:
                    98:e9:0c:a9:59:92:46:66:30:f1:82:0b:06:b3:eb:
                    93:f7:f9:2c:59:1e:16:31:51:81:da:04:58:0b:69:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:96:64:C6:6F:CB:6D:71:32:F4:C6:FD:54:46:A9:2F:DE:7D:90
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:61:dc:2b:7d:1a:aa:d1:b5:19:e5:ad:5d:09:85:3e:28:4c:
         14:aa:7c:34:e3:b0:20:d0:60:25:16:13:c4:af:ad:98:91:23:
         3a:3a:99:f0:96:c8:ce:9d:b2:31:a1:f3:65:07:e6:ca:53:f7:
         e1:0e:c3:9f:ac:f0:9c:74:e7:98:8d:6c:b0:1c:19:0b:34:fe:
         00:98:fb:b6:e3:b4:6b:71:c0:ce:20:56:84:58:31:8a:32:90:
         3c:95:6a:a8:b4:cf:da:61:ed:c2:85:17:b8:d5:6f:4e:09:40:
         3e:4d:20:b7:41:f4:95:5f:da:b9:c7:b3:44:6b:24:81:a4:51:
         46:13:9c:13:92:dc:13:d0:98:d1:21:0b:86:81:e0:a7:ec:31:
         14:28:2d:8d:01:46:2a:94:dc:5c:1d:8a:b5:91:b2:89:51:f4:
         5a:36:f2:2d:b5:39:8f:1b:5f:c9:76:5c:17:51:79:d8:2d:1f:
         b3:09:e8:2f:79:0f:89:fb:58:1d:ba:4b:68:e4:0f:8e:2f:a6:
         c6:77:98:98:55:0f:74:80:e5:02:89:fd:b0:d2:12:14:6e:a1:
         2f:79:e6:8c:6d:9d:c6:f4:1a:85:3d:ab:8f:08:9d:9a:4c:b8:
         e1:c2:3e:91:c1:2c:b9:e2:c2:af:e0:6c:58:6c:4e:70:2a:93:
         e6:a3:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:06 2025 by rpki-client