Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa
File:                     3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa (raw, json)
Hash identifier:          4ejn204SktSX+1RLSBSXWp4Fa3YaEcGth17296R9D54=
Subject key identifier:   6A:8E:E7:DB:26:72:04:DB:12:D7:DA:4C:0E:5B:B9:8B:D0:A6:32:FA
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       1B75A75E4CBA4C1366B88786E3EA4CC0AE6C7D25
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa
Signing time:             Thu 04 Apr 2024 15:53:29 +0000
ROA not before:           Thu 04 Apr 2024 15:48:29 +0000
ROA not after:            Thu 03 Apr 2025 15:53:29 +0000
asID:                     265041
IP address blocks:        170.150.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:75:a7:5e:4c:ba:4c:13:66:b8:87:86:e3:ea:4c:c0:ae:6c:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Apr  4 15:48:29 2024 GMT
            Not After : Apr  3 15:53:29 2025 GMT
        Subject: CN=6A8EE7DB267204DB12D7DA4C0E5BB98BD0A632FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:7e:d0:cd:af:83:19:e0:f8:43:38:45:61:
                    db:b3:2c:66:43:1e:0f:4e:ce:88:f7:c4:cf:5a:64:
                    f5:e8:b8:89:47:20:da:6f:b8:36:bf:80:09:d0:90:
                    df:fa:7c:b3:af:df:e7:23:d9:dc:fb:a9:fd:07:eb:
                    e6:c0:ef:f7:8a:9d:35:5b:c2:0a:c0:cd:a9:e9:f9:
                    42:0f:ab:63:22:8a:e6:fa:82:e7:da:b0:d9:2a:45:
                    8a:ae:26:0a:aa:5d:9e:5d:8d:21:51:9a:6b:b7:66:
                    da:e8:9c:87:fb:74:af:e9:43:29:97:28:eb:27:bf:
                    04:eb:47:58:60:fd:04:fd:56:77:00:20:73:c1:22:
                    7c:af:ca:08:21:87:12:6f:3b:6a:56:6b:ca:1d:f5:
                    2f:1b:9b:70:3e:eb:4a:eb:d1:9a:88:a2:7d:14:95:
                    e2:5e:a1:87:24:d4:9b:df:b0:11:52:15:53:40:71:
                    8d:4c:33:5e:c9:4d:79:d9:a1:66:21:ff:a3:de:58:
                    d6:69:85:79:a7:c2:e8:a5:ed:11:b5:73:17:18:93:
                    c0:c4:c3:3a:b8:23:83:61:87:63:29:9a:2f:eb:7e:
                    67:6d:32:d6:86:16:d8:1f:1a:94:34:1e:6a:a0:02:
                    cc:11:38:78:ad:5d:44:78:db:78:c0:0c:26:a3:90:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:E7:DB:26:72:04:DB:12:D7:DA:4C:0E:5B:B9:8B:D0:A6:32:FA
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:8a:12:e7:88:57:08:b7:d4:6b:de:02:2b:c1:5d:da:d1:
         dd:61:4b:c3:2e:32:ba:1f:be:a8:13:32:6e:fb:b4:af:05:ba:
         96:43:bc:c2:98:6c:16:38:f3:31:9b:13:1e:6f:01:a6:ec:fc:
         d4:6e:c1:1b:2c:a0:11:04:fb:c9:a3:0a:e8:b2:2e:5e:24:97:
         c8:9a:52:28:f5:04:44:67:72:fb:52:be:ae:ef:69:c5:2a:83:
         d8:76:ec:6c:64:e6:45:fa:f6:81:d4:80:92:3b:bf:e2:38:a0:
         86:20:2e:e5:0d:bd:a3:5a:22:4e:1d:5e:6a:69:41:78:d1:3b:
         29:47:96:54:ef:d0:9b:f7:1c:3b:17:41:87:ae:8b:77:2a:9e:
         ab:42:a5:a1:f3:85:e5:fe:89:e7:be:96:b8:08:ab:29:84:30:
         e2:1b:93:3e:a0:c7:cd:ce:e0:2c:21:5c:f4:67:af:22:30:86:
         de:c7:51:dd:28:ac:82:e0:6a:2d:8f:9b:de:82:a5:52:08:41:
         5b:c4:1f:d1:93:71:b7:ad:df:c0:27:9c:3a:df:68:3c:8d:c3:
         66:cb:2d:4e:ff:d3:03:a0:6f:53:a5:52:65:8d:ac:5d:32:25:
         19:01:bb:c7:b7:7f:74:9b:c8:a0:d1:8d:78:93:05:06:2a:c7:
         2e:a0:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org