Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/1/3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa
File:                     3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa (raw, json)
Hash identifier:          JZjs72f9G3O5Q6Lcf0FVUrec8sVGPruEnI6Obylm93E=
Subject key identifier:   6F:BA:0A:ED:42:61:AC:CC:15:4D:90:45:E6:15:7F:40:93:04:28:59
Certificate issuer:       /CN=F45C6CE4C4413F6E8DA0DE820A50034741216AB0
Certificate serial:       65DE1B0ACECDFFFEFA691DB558120BB2716CAC75
Authority key identifier: F4:5C:6C:E4:C4:41:3F:6E:8D:A0:DE:82:0A:50:03:47:41:21:6A:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45C6CE4C4413F6E8DA0DE820A50034741216AB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/1/3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa
Signing time:             Wed 03 Apr 2024 23:50:09 +0000
ROA not before:           Wed 03 Apr 2024 23:45:09 +0000
ROA not after:            Wed 02 Apr 2025 23:50:09 +0000
asID:                     271430
IP address blocks:        186.209.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/1/F45C6CE4C4413F6E8DA0DE820A50034741216AB0.crl
                          rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/1/F45C6CE4C4413F6E8DA0DE820A50034741216AB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45C6CE4C4413F6E8DA0DE820A50034741216AB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:de:1b:0a:ce:cd:ff:fe:fa:69:1d:b5:58:12:0b:b2:71:6c:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45C6CE4C4413F6E8DA0DE820A50034741216AB0
        Validity
            Not Before: Apr  3 23:45:09 2024 GMT
            Not After : Apr  2 23:50:09 2025 GMT
        Subject: CN=6FBA0AED4261ACCC154D9045E6157F4093042859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:2e:2e:25:4d:22:9f:b7:38:30:4b:5b:ef:
                    55:b1:35:75:fc:d8:8a:93:c5:d0:b6:c2:aa:ee:b6:
                    e4:a8:fc:bf:87:c5:76:51:55:0e:6f:cb:f9:e6:7a:
                    5c:e1:c8:e3:00:5c:9f:2a:a8:66:e2:86:e4:29:bf:
                    cc:ec:e1:43:eb:aa:d7:d3:c0:0a:8d:d7:01:c9:70:
                    8f:9d:4e:fc:9b:27:a3:55:49:a3:ad:a2:cd:e2:7e:
                    52:d5:59:8c:45:40:eb:c8:a9:09:f8:dc:68:7e:ae:
                    7c:af:5d:f6:de:f7:0f:b0:26:c0:12:29:60:05:5a:
                    2c:a0:e1:90:ab:49:42:26:08:76:44:c9:cf:f4:c4:
                    87:04:0f:b7:ed:a2:8e:85:bb:45:00:08:ca:98:78:
                    39:d7:bc:6b:56:f3:69:14:3a:52:71:b9:b7:d6:40:
                    55:7c:a0:e7:e5:10:77:42:3d:40:a4:17:c3:8c:ce:
                    7a:df:a8:73:6f:17:dd:9c:c8:0a:9b:2a:b0:65:69:
                    26:15:a3:78:ce:90:9e:e2:6b:93:2e:c8:ab:0c:c0:
                    20:9a:ce:8b:32:76:7e:5c:ac:0f:f6:ff:5d:13:a6:
                    fa:43:0d:9e:cd:77:aa:e1:db:b6:b3:d0:80:72:ca:
                    f5:46:eb:fd:6a:10:54:6c:65:d4:91:b0:07:45:29:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:0A:ED:42:61:AC:CC:15:4D:90:45:E6:15:7F:40:93:04:28:59
            X509v3 Authority Key Identifier:
                keyid:F4:5C:6C:E4:C4:41:3F:6E:8D:A0:DE:82:0A:50:03:47:41:21:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/1/F45C6CE4C4413F6E8DA0DE820A50034741216AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45C6CE4C4413F6E8DA0DE820A50034741216AB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/1/3138362e3230392e3136342e302f32322d3234203d3e20323731343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:95:03:e5:b2:0f:80:a2:1b:64:ed:38:52:1f:43:6c:00:88:
         3f:62:2c:63:b5:7d:10:2b:40:8f:eb:51:6e:ca:ec:97:d6:d4:
         ce:05:56:24:95:12:ce:41:ee:a9:e2:30:87:dd:13:6c:37:bc:
         3f:a6:10:e9:58:c9:71:c4:db:2d:cf:0e:cd:62:e7:5d:09:3d:
         fc:30:c4:31:20:f5:93:4f:06:32:2c:28:d7:36:d9:eb:f1:71:
         32:6f:88:2c:f0:af:2a:cb:fa:5f:07:fd:b1:ba:de:7a:b5:45:
         00:77:5d:7a:de:f9:f8:3e:c0:fa:ab:35:87:8a:ac:d3:3b:6d:
         51:e7:50:b0:e6:f0:3b:08:99:44:cb:65:01:2e:85:54:dd:8b:
         55:b2:52:2a:ad:6a:36:ba:ff:52:db:56:61:64:fa:1b:db:16:
         60:c7:16:44:b0:f0:85:b6:9d:9a:c5:b6:14:ee:1e:13:ec:4d:
         31:2c:93:75:57:d6:d2:59:df:19:4e:d2:23:c7:fe:33:98:08:
         d9:a0:ed:d1:d6:ef:e5:06:25:e7:d9:01:32:b4:20:89:88:e4:
         53:46:f0:3d:d3:21:8e:c6:dd:dd:19:04:d5:be:2b:d9:cc:53:
         d5:55:6a:a0:b8:80:34:63:a1:0a:05:66:a3:08:3f:e2:c3:5b:
         ab:bb:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:25 2024 by rpki-client on console-fra.rpki-client.org