Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          WHuSdhw5qynrDA54YC7uODUPn8h3py0MXj2bXihxVfY=
Subject key identifier:   EC:54:6D:1B:49:53:AB:4B:06:D2:BF:C2:65:D7:06:99:D8:D5:7E:E5
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       58DB9DF90A0187FC3AC7BFA45101D5002A541F1A
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa
Signing time:             Thu 04 Apr 2024 15:53:29 +0000
ROA not before:           Thu 04 Apr 2024 15:48:29 +0000
ROA not after:            Thu 03 Apr 2025 15:53:29 +0000
asID:                     265041
IP address blocks:        170.150.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:db:9d:f9:0a:01:87:fc:3a:c7:bf:a4:51:01:d5:00:2a:54:1f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Apr  4 15:48:29 2024 GMT
            Not After : Apr  3 15:53:29 2025 GMT
        Subject: CN=EC546D1B4953AB4B06D2BFC265D70699D8D57EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:75:6d:dc:18:b1:43:ed:1a:7c:dc:13:c6:
                    68:11:f1:44:1b:eb:85:1d:b3:80:c0:20:70:f9:28:
                    07:ae:f2:e9:ea:30:7c:c9:06:09:5a:6e:93:5c:9a:
                    89:13:d6:28:0a:fc:be:93:90:ed:64:39:67:74:6b:
                    fc:b9:1d:8c:2d:ba:97:34:7c:72:c0:70:18:6f:4e:
                    49:f3:ff:9e:08:73:1a:c9:e2:33:40:3b:6e:85:72:
                    0d:0d:09:b1:2a:64:38:7a:4e:d8:0b:48:26:d6:70:
                    3f:5a:5f:a3:8a:c2:95:05:ed:6e:58:70:a1:34:fa:
                    d7:5b:66:c2:ab:cc:23:ae:28:73:c7:79:66:c5:2c:
                    03:8f:e4:0b:8f:c4:6e:c8:7c:0f:aa:25:77:4c:ea:
                    8a:1d:e3:c5:f0:1e:a9:40:39:5a:ff:87:2c:ff:6d:
                    32:bb:3c:99:13:d4:80:90:20:e3:12:ad:b7:69:28:
                    85:b4:6b:01:ed:e3:07:64:08:cd:0b:96:78:3d:06:
                    9d:4f:16:9d:a2:3f:f7:c2:fa:ae:5e:d4:f4:64:4e:
                    ed:31:b0:f9:72:2e:1f:29:7d:cf:b9:d1:4c:e7:f7:
                    77:f2:8d:f1:48:c3:f9:2c:80:89:56:21:23:a1:5f:
                    26:fc:4c:0e:68:71:30:dc:d4:65:9c:ab:74:19:9c:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:6D:1B:49:53:AB:4B:06:D2:BF:C2:65:D7:06:99:D8:D5:7E:E5
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:55:72:ac:be:47:f3:a7:b4:09:68:89:54:3b:eb:bd:ea:
         77:b0:1e:39:5a:17:1b:85:fd:de:c6:0f:b1:9b:a5:47:e9:b2:
         96:c9:29:2b:1b:2d:48:c8:37:0c:a5:2c:69:48:65:a3:95:ca:
         4a:5b:db:45:b8:b9:f3:2e:75:f8:6f:c6:e0:a0:bb:87:de:0d:
         95:88:45:66:df:f2:d6:27:65:2e:dc:cf:31:a7:00:ae:0c:c5:
         0f:31:56:79:f9:5b:1b:20:b8:28:ca:27:b9:0b:60:27:fc:71:
         ec:67:fc:ff:75:9f:4e:a0:be:aa:fc:bf:f0:e6:24:1c:8a:5f:
         c7:3b:66:4c:42:3b:7b:39:56:63:1f:2f:3e:38:48:b6:cf:b6:
         a1:bd:7b:fa:61:2c:d4:18:99:75:af:bd:18:49:25:ad:d0:98:
         fb:94:4c:4c:e7:15:f3:62:b9:ab:ea:1f:a5:be:c6:f1:08:0d:
         67:0b:1c:62:d1:26:81:fc:b1:95:9e:29:bf:2a:08:af:df:67:
         7e:8d:cf:fc:7c:d6:1c:92:8d:fd:c0:47:e9:d8:66:0e:23:81:
         29:85:9a:62:e0:b1:c9:f9:51:22:b9:04:71:d7:59:ba:51:46:
         90:c5:e6:00:e2:bf:f5:42:16:f9:bc:5b:c5:04:12:e5:18:0f:
         8a:41:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org