Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3137302e302e3134382e302f32322d3234203d3e20323634343236.roa
File:                     3137302e302e3134382e302f32322d3234203d3e20323634343236.roa (raw, json)
Hash identifier:          HqwkkGeqgtIDKFdBMvzWKDZahexGghGo+UrzcCencSg=
Subject key identifier:   3D:1F:68:88:6B:4B:FF:69:21:F9:77:F5:4A:3F:AD:A8:7B:94:79:17
Certificate issuer:       /CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
Certificate serial:       1F1448DC9E5E6B4C2DBE6DC66D1B803925A88212
Authority key identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3137302e302e3134382e302f32322d3234203d3e20323634343236.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     264426
IP address blocks:        170.0.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl
                          rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:14:48:dc:9e:5e:6b:4c:2d:be:6d:c6:6d:1b:80:39:25:a8:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100BA3964A09565BF24C93A79D4615096B0C5B6EC735BDCF4F5D2E7A7F9C53C9CA65BA1E4BD99DC685EDAB717FC8204A6B8930DA9203F0A7BFD6388633E6B1EDDC9B3A5758A3671A7707BF18B2CCF71AB4DCED3EB0FE839902E88FF504F3A8518B557398CC5773697E2A13F15BE5389CEA2D5313CFEF1163336B9405C24FA4571B62499C32640F0A854A477544EA89CBA1F716541B8F5B6A111375ED4725365E34CD4CDF8D7CEEC9A4C6ADDB88F052B99CFDF603FA60E9C153E58137FA3DC70DA7E24C41EA11F7E953151F960DF30CBFA4DD285192F6E1BBBDD35BFBF51DB3807D8541724ACE219BEEA4138F1E9F124378817F9622F4B300F44FCA0E9F644C06E950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:64:a0:95:65:bf:24:c9:3a:79:d4:61:50:
                    96:b0:c5:b6:ec:73:5b:dc:f4:f5:d2:e7:a7:f9:c5:
                    3c:9c:a6:5b:a1:e4:bd:99:dc:68:5e:da:b7:17:fc:
                    82:04:a6:b8:93:0d:a9:20:3f:0a:7b:fd:63:88:63:
                    3e:6b:1e:dd:c9:b3:a5:75:8a:36:71:a7:70:7b:f1:
                    8b:2c:cf:71:ab:4d:ce:d3:eb:0f:e8:39:90:2e:88:
                    ff:50:4f:3a:85:18:b5:57:39:8c:c5:77:36:97:e2:
                    a1:3f:15:be:53:89:ce:a2:d5:31:3c:fe:f1:16:33:
                    36:b9:40:5c:24:fa:45:71:b6:24:99:c3:26:40:f0:
                    a8:54:a4:77:54:4e:a8:9c:ba:1f:71:65:41:b8:f5:
                    b6:a1:11:37:5e:d4:72:53:65:e3:4c:d4:cd:f8:d7:
                    ce:ec:9a:4c:6a:dd:b8:8f:05:2b:99:cf:df:60:3f:
                    a6:0e:9c:15:3e:58:13:7f:a3:dc:70:da:7e:24:c4:
                    1e:a1:1f:7e:95:31:51:f9:60:df:30:cb:fa:4d:d2:
                    85:19:2f:6e:1b:bb:dd:35:bf:bf:51:db:38:07:d8:
                    54:17:24:ac:e2:19:be:ea:41:38:f1:e9:f1:24:37:
                    88:17:f9:62:2f:4b:30:0f:44:fc:a0:e9:f6:44:c0:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:68:88:6B:4B:FF:69:21:F9:77:F5:4A:3F:AD:A8:7B:94:79:17
            X509v3 Authority Key Identifier:
                keyid:6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3137302e302e3134382e302f32322d3234203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:94:8b:18:a0:0f:04:55:82:4c:e4:6b:57:b1:de:87:76:
         40:2b:83:88:e8:03:17:14:31:3b:aa:55:96:da:43:4a:4a:57:
         2d:55:1a:2b:91:d0:1b:0c:51:f3:24:08:a5:d7:12:c2:0b:c5:
         86:67:ef:b9:c6:5d:ea:0f:82:cf:32:9a:09:19:a9:af:59:3d:
         56:dd:87:37:cb:19:eb:10:fc:71:f5:5f:3b:df:fe:b3:41:9c:
         b9:ff:8f:a3:21:ce:ea:9c:49:bd:52:71:a9:89:d8:c0:8d:d8:
         8b:e6:ab:b4:4f:00:50:05:45:16:e4:21:8c:11:02:c1:65:e1:
         6e:b3:9a:ef:f6:fd:82:a8:b0:d3:50:a6:0d:fc:35:95:fb:d3:
         08:97:c3:50:1d:48:c5:49:e4:aa:13:4c:a0:87:5f:9e:d8:8e:
         d2:77:55:b0:30:41:ac:04:0c:61:2c:1c:5e:07:86:54:33:be:
         80:9f:f4:e7:00:69:96:9b:62:d3:0e:93:28:f9:5c:c8:56:d1:
         27:e3:56:e7:74:e9:59:64:f9:77:8a:6d:1e:15:e0:fa:ef:70:
         ac:d7:ad:95:7d:26:74:df:0e:35:de:4c:fa:b8:a5:70:e6:35:
         9b:5c:a0:5d:e2:7d:b9:e2:8f:36:7b:d4:18:dc:90:d2:4e:cd:
         46:60:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:47 2024 by rpki-client on console-fra.rpki-client.org