Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133352e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133352e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          Z19QlhQpEqGiMiZ8+6i9yX1snECXnBnl46VZ6qoFWgo=
Subject key identifier:   CE:1C:CF:11:3B:76:54:CE:5B:63:A7:0F:9E:1C:CF:08:E4:B5:95:5D
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       3C9C17375D118DB15486423664E900F9206635A8
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133352e302f32342d3234203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:37 +0000
ROA not before:           Tue 30 Apr 2024 13:07:37 +0000
ROA not after:            Tue 29 Apr 2025 13:12:37 +0000
asID:                     265106
IP address blocks:        170.254.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9c:17:37:5d:11:8d:b1:54:86:42:36:64:e9:00:f9:20:66:35:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:37 2024 GMT
            Not After : Apr 29 13:12:37 2025 GMT
        Subject: CN=CE1CCF113B7654CE5B63A70F9E1CCF08E4B5955D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:eb:f6:58:07:41:bc:7e:43:77:95:95:15:
                    a8:b0:a2:19:bd:19:e4:0d:9c:02:2b:19:55:ad:fc:
                    dd:f7:6d:f1:a3:1a:71:fb:c7:9d:ff:4e:30:54:1b:
                    1b:33:21:62:96:da:d2:8d:92:b9:46:eb:91:de:1f:
                    bb:72:c0:04:26:af:55:04:88:bf:d3:97:49:d3:b7:
                    47:29:b6:1c:40:a7:da:39:df:5e:0b:e8:1a:2d:d7:
                    4f:d7:5e:89:14:82:7a:50:f9:0d:57:d2:89:fd:a2:
                    df:b3:cc:4d:7f:00:5b:41:2c:d3:b7:75:f7:87:1e:
                    bf:30:06:b0:71:77:a3:cc:fb:fc:00:28:e2:9f:80:
                    c9:b8:7f:f6:ed:ab:d2:1c:19:a2:ea:61:de:31:29:
                    38:35:2e:d9:98:12:c2:fb:ae:df:6c:77:3b:32:72:
                    3a:1b:b2:35:d9:1f:73:11:8d:36:df:9b:e4:3e:1d:
                    3e:f0:82:35:7b:f5:14:b1:44:a1:9e:fd:23:28:6a:
                    85:0f:ac:64:96:e6:87:fd:ab:88:7a:43:86:95:ba:
                    f4:f9:52:03:53:dc:c8:6c:04:3e:9d:42:b9:dd:97:
                    8f:e6:ca:50:6e:92:cc:af:23:df:51:d3:7b:89:81:
                    f9:ed:d5:59:16:70:d1:de:51:c3:18:ef:e4:c2:b7:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1C:CF:11:3B:76:54:CE:5B:63:A7:0F:9E:1C:CF:08:E4:B5:95:5D
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133352e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:12:58:2a:84:43:44:64:4b:c0:63:bc:2e:ae:00:9e:4e:
         ef:ed:2d:48:95:58:f5:3e:33:13:58:26:f3:2d:eb:bb:06:a4:
         3e:2e:0b:71:0a:24:14:d5:e8:0f:db:27:cb:89:e0:e6:f8:53:
         f5:3c:1e:b4:7a:7c:47:ce:3c:20:6c:b0:3e:97:7a:6a:fc:18:
         c9:e6:0f:f9:28:68:9c:6a:36:dd:5c:bc:3e:c0:fe:1a:71:50:
         14:23:99:c8:62:fa:d8:f2:e4:59:26:59:a9:81:a4:fd:94:0c:
         0c:af:99:84:89:ae:91:e4:aa:75:d1:7d:fb:9d:4d:54:54:52:
         97:75:10:7c:50:73:16:c6:9c:ac:9d:84:c5:d6:3e:55:e2:74:
         67:4f:8f:4d:87:55:ba:3d:d1:1b:58:43:94:ca:6b:a8:f4:86:
         a2:e4:4b:bb:c9:50:8c:3d:30:e7:84:9d:d9:6a:ca:1b:fc:f9:
         6a:b0:53:b5:56:78:c4:bf:ca:85:71:ae:05:81:53:4e:3c:eb:
         3e:ce:49:c8:82:31:c3:e4:5a:75:db:a4:04:1a:c2:83:2a:97:
         da:eb:dd:69:f9:f5:a6:76:7c:a9:4b:e8:61:ad:af:e5:9a:70:
         a1:3e:d1:f8:09:80:9d:3b:aa:c4:22:e0:d3:53:e7:09:be:c5:
         b9:cb:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:02 2024 by rpki-client on console-ams.rpki-client.org