Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa
File:                     3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa (raw, json)
Hash identifier:          yKFc4vF5JAPPGJmssTVtxFlAR4HXmSsj+LtAkjCJ4JQ=
Subject key identifier:   BC:61:DA:5C:EF:5A:61:1B:1F:2F:6F:9F:DA:56:81:21:7A:B8:35:3F
Certificate issuer:       /CN=212063977863A474A988E1839F9F6296FA77E899
Certificate serial:       39427E09F9A621DAC422424447A8DB64F794A951
Authority key identifier: 21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa
Signing time:             Thu 04 Apr 2024 05:18:45 +0000
ROA not before:           Thu 04 Apr 2024 05:13:45 +0000
ROA not after:            Thu 03 Apr 2025 05:18:45 +0000
asID:                     265274
IP address blocks:        170.80.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.crl
                          rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:7e:09:f9:a6:21:da:c4:22:42:44:47:a8:db:64:f7:94:a9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212063977863A474A988E1839F9F6296FA77E899
        Validity
            Not Before: Apr  4 05:13:45 2024 GMT
            Not After : Apr  3 05:18:45 2025 GMT
        Subject: CN=BC61DA5CEF5A611B1F2F6F9FDA5681217AB8353F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:42:af:74:a1:92:b0:ba:85:9a:80:f1:6b:
                    e8:95:3d:89:11:09:c7:c9:b3:1d:60:42:b8:0b:c2:
                    e5:86:b1:16:7b:1c:9e:2e:5b:77:34:8c:1e:49:8d:
                    61:7a:bf:41:87:88:ee:a8:03:71:ed:e4:10:52:bb:
                    5a:e6:33:2a:b5:90:cb:6e:20:55:4e:2e:b0:df:95:
                    76:9f:05:76:20:c8:c7:27:f2:08:e3:ee:9c:fb:15:
                    d0:cd:72:13:58:74:50:88:26:7f:32:7e:f8:b6:8d:
                    f5:00:08:36:c1:cb:5f:07:9a:c8:5a:15:31:10:ea:
                    6d:75:c9:13:cd:fc:57:8e:32:49:8e:5a:be:4e:5a:
                    d0:70:7b:9e:7f:93:38:7e:c1:b4:68:02:eb:78:fe:
                    da:e9:0f:ea:c7:ce:5b:2c:e5:76:de:fc:e9:f4:7f:
                    d4:a3:8e:c0:8f:4d:b2:83:e6:e9:46:ae:c9:80:76:
                    3f:14:37:cf:f5:eb:1c:bd:e6:76:6f:b5:0d:3c:d1:
                    9d:69:f9:fb:47:62:d5:0b:cb:c5:4d:ec:04:56:93:
                    86:46:59:d2:f5:9c:cd:24:33:45:1f:40:cd:f4:7c:
                    5a:b7:26:84:54:11:42:fd:0a:90:45:9d:5d:9f:23:
                    cd:ad:50:0f:a3:44:66:ac:f8:14:13:6e:47:28:65:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:DA:5C:EF:5A:61:1B:1F:2F:6F:9F:DA:56:81:21:7A:B8:35:3F
            X509v3 Authority Key Identifier:
                keyid:21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/3137302e38302e3232302e302f32342d3234203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:d8:69:53:4e:91:24:62:e3:40:39:f6:f7:ef:1c:79:56:
         2c:4c:78:37:11:65:25:57:d6:7d:c8:45:ae:a9:e1:ff:bf:8c:
         d7:6e:51:87:d6:4a:ed:53:f8:f0:05:1b:fb:8a:dc:44:ae:4f:
         d9:84:7c:07:f4:b9:b2:e7:95:cd:2d:50:21:7e:af:16:3e:0e:
         5a:53:62:49:44:67:9f:03:bd:14:a0:3c:9c:ca:2b:71:71:50:
         ba:a5:c7:0f:1e:6c:5e:3e:81:c0:63:96:12:b9:30:01:9d:21:
         ea:af:ee:46:94:c9:f0:8c:51:d9:19:b3:2d:b6:49:48:b3:17:
         8f:52:04:52:9d:f3:19:fd:1c:24:12:01:99:79:e7:82:e3:c4:
         09:60:50:54:5c:bd:29:70:fd:3e:a8:4a:e6:21:4d:96:8a:77:
         df:f6:c1:d9:9d:09:0d:be:42:f8:34:1f:25:c6:4c:4b:88:62:
         05:2a:a5:69:eb:a0:0e:d7:bb:bc:53:87:98:12:74:16:fa:e2:
         a0:43:39:6a:87:2d:f4:bb:f7:eb:a6:26:99:10:23:c4:67:d0:
         5c:af:f0:71:f4:c7:ac:84:03:71:9d:9a:4a:18:38:4a:45:d4:
         84:30:be:73:e7:1c:87:59:08:51:05:2b:c3:27:84:a2:0f:76:
         91:0c:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:16 2024 by rpki-client on console-ams.rpki-client.org