Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          BVPwE36a/YuSy5csVAehs5R+9gqVMlfFcHvSbLeN6/o=
Subject key identifier:   1F:F5:08:F1:4F:96:96:37:C9:72:C6:AC:72:C7:5A:A4:EC:7C:96:98
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       1538B374C146E21BDD625F90000FBE86E7FF67E0
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa
Signing time:             Thu 04 Apr 2024 15:53:29 +0000
ROA not before:           Thu 04 Apr 2024 15:48:29 +0000
ROA not after:            Thu 03 Apr 2025 15:53:29 +0000
asID:                     265041
IP address blocks:        170.150.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:38:b3:74:c1:46:e2:1b:dd:62:5f:90:00:0f:be:86:e7:ff:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Apr  4 15:48:29 2024 GMT
            Not After : Apr  3 15:53:29 2025 GMT
        Subject: CN=1FF508F14F969637C972C6AC72C75AA4EC7C9698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:37:f2:88:54:0e:50:e8:8c:8e:3e:75:6b:
                    07:fb:c5:0e:44:8c:06:89:29:67:19:b5:ad:bc:3b:
                    95:8d:8b:fb:bc:25:fd:60:93:8e:4f:26:0f:60:69:
                    33:cb:61:75:02:82:a2:3d:0e:7e:3e:0b:a5:ab:7d:
                    96:db:14:0b:5e:3f:6c:18:34:46:f1:77:08:34:8d:
                    ed:0a:b6:48:ec:c8:21:fd:25:6f:4a:ac:95:75:1e:
                    cd:a3:3d:8e:08:7f:21:dd:3a:58:11:d3:dd:cd:07:
                    98:17:86:e3:55:49:14:e6:a6:c4:0a:f2:08:d6:e3:
                    16:77:35:ae:ec:b8:d7:34:32:c0:69:2d:cf:c1:1e:
                    0b:c0:ef:25:d4:6f:83:da:02:fa:82:cf:34:bf:62:
                    5f:8f:d7:23:71:da:8d:55:1a:06:85:f6:cd:dc:85:
                    bb:00:69:ef:00:59:94:95:42:b2:49:37:ac:f5:cd:
                    b1:e3:d9:a3:24:0f:94:eb:ab:08:64:54:b8:22:a7:
                    0e:ce:e0:bc:ce:76:13:c4:b2:b7:a1:dd:d9:63:ea:
                    84:77:21:04:70:b3:42:f2:7a:63:1f:e6:88:f2:f0:
                    76:a4:0d:ca:02:c9:2a:cf:45:76:b9:4b:94:7f:88:
                    8b:b9:48:04:78:a6:5b:09:77:c4:e1:57:56:6c:8a:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F5:08:F1:4F:96:96:37:C9:72:C6:AC:72:C7:5A:A4:EC:7C:96:98
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:ba:92:8f:76:02:98:57:22:40:86:e1:08:4d:88:a8:7e:0b:
         eb:90:c7:3a:c7:20:14:28:88:08:12:75:71:45:89:38:c3:9f:
         09:5b:44:f7:8a:ee:b6:d3:ee:98:da:8a:04:c1:0a:c9:6e:93:
         e5:1d:65:23:16:7b:28:ea:26:7b:ee:bb:f2:fd:40:ee:b5:b5:
         b9:9e:fe:de:49:09:5b:d4:fd:85:3e:5d:59:8b:0d:ec:77:26:
         b9:12:4e:cb:c3:1f:3a:75:ce:bf:17:59:ed:51:a2:62:16:6e:
         17:16:d9:60:89:9b:91:18:0a:c1:80:26:1b:7c:84:23:76:5f:
         69:ed:d9:02:e4:32:a0:66:15:f8:b5:a3:ee:16:2e:bd:45:4d:
         cc:dc:1b:83:83:85:42:8b:b5:da:c5:60:ee:96:8e:65:b4:c0:
         e1:ac:32:ce:b7:e7:ab:10:3c:c7:d8:1c:5b:84:9f:9a:c3:cd:
         60:bf:28:d9:a2:16:7f:06:70:d3:15:73:82:dd:f5:47:80:ab:
         eb:fe:e9:1b:64:8a:27:3b:74:8e:22:a2:5c:cd:03:8f:2c:ee:
         7d:f2:e9:b7:cf:00:31:93:f7:41:42:7a:86:80:36:70:0f:1d:
         4b:ba:d3:84:9c:d0:e0:c3:c4:a0:2d:7b:98:3d:3f:9e:4b:b3:
         69:e7:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org