Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/3137302e38302e34302e302f32322d3234203d3e20323636333830.roa
File:                     3137302e38302e34302e302f32322d3234203d3e20323636333830.roa (raw, json)
Hash identifier:          QIP9MPr2RDPjYFiTrmFUX+qhM1nAHD7hqLJ+OK42QxI=
Subject key identifier:   40:5A:FE:7F:22:3F:A1:2D:E5:37:E9:CF:80:39:76:0B:03:22:41:8D
Certificate issuer:       /CN=6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80
Certificate serial:       20B18E77BE5E3C38437ABCD54A5C3A63BFC363FB
Authority key identifier: 6A:C8:9C:99:B5:C4:5A:ED:F3:4E:75:74:3D:EA:3E:E0:68:9E:8D:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/3137302e38302e34302e302f32322d3234203d3e20323636333830.roa
Signing time:             Tue 25 Jun 2024 18:16:17 +0000
ROA not before:           Tue 25 Jun 2024 18:11:17 +0000
ROA not after:            Tue 24 Jun 2025 18:16:17 +0000
asID:                     266380
IP address blocks:        170.80.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.crl
                          rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:8e:77:be:5e:3c:38:43:7a:bc:d5:4a:5c:3a:63:bf:c3:63:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80
        Validity
            Not Before: Jun 25 18:11:17 2024 GMT
            Not After : Jun 24 18:16:17 2025 GMT
        Subject: CN=405AFE7F223FA12DE537E9CF8039760B0322418D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:24:4d:f7:ee:66:07:6c:9b:8e:02:81:79:
                    ad:4e:53:35:49:41:23:8b:46:6c:00:c8:07:f4:09:
                    37:3b:46:3d:df:95:0b:88:85:21:08:d5:9e:be:34:
                    6a:18:72:a3:d1:41:bb:7c:e2:5a:4b:3b:f1:9a:ee:
                    4e:df:e2:a3:18:83:53:23:50:e2:c5:06:16:0f:ef:
                    48:b8:b9:cc:17:09:35:33:4a:87:12:db:9c:5b:09:
                    94:1c:12:51:f0:fe:f0:70:54:11:2d:ef:6c:0f:cb:
                    e0:c4:7a:bd:08:c9:9b:43:d4:6a:11:8f:ed:a6:b0:
                    5c:4b:02:dc:6a:65:a3:33:73:1b:55:b9:2a:5d:96:
                    16:fb:bc:45:4c:f9:e9:d3:a8:a8:58:21:8f:36:3f:
                    d5:25:25:36:7d:09:2f:fa:0f:1f:7e:b5:6e:20:19:
                    27:db:d5:fc:0f:51:6d:51:44:89:5f:e7:bc:5b:27:
                    aa:13:58:92:60:68:85:f8:f3:0f:30:a6:13:d4:a1:
                    56:92:61:a1:e4:62:ab:89:72:15:eb:4d:c7:47:44:
                    a9:e1:a6:24:82:be:98:7e:d1:c7:04:cc:f6:d9:2f:
                    b5:59:83:e0:fa:d2:03:ae:25:bb:87:bd:a4:7d:1b:
                    62:cc:82:60:4d:0f:f1:b4:3f:0b:fa:2a:f5:43:fe:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:FE:7F:22:3F:A1:2D:E5:37:E9:CF:80:39:76:0B:03:22:41:8D
            X509v3 Authority Key Identifier:
                keyid:6A:C8:9C:99:B5:C4:5A:ED:F3:4E:75:74:3D:EA:3E:E0:68:9E:8D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AC89C99B5C45AEDF34E75743DEA3EE0689E8D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ia7sKTWH9W25o8v4jUzNCBzeDdmbYTmgWKtT2chCLHw/0/3137302e38302e34302e302f32322d3234203d3e20323636333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:6b:d1:30:03:a9:d9:e0:e5:d5:61:73:d1:98:c1:ea:41:
         14:ba:a5:7f:30:46:38:5e:48:52:63:70:09:aa:71:4f:f6:63:
         f7:dd:88:e6:5a:19:ce:8e:25:63:7b:42:5b:04:64:2e:7f:84:
         59:fe:d3:1e:dc:ab:aa:6d:2f:5f:f3:a8:3a:d7:eb:c8:f4:f0:
         43:9a:06:25:af:f8:cc:e1:47:4c:41:e6:d2:02:7d:fa:c2:cf:
         c1:ba:1c:24:cc:53:0d:72:44:84:9d:e1:2f:f9:87:ce:03:05:
         2c:73:55:60:8d:88:ad:59:04:0c:57:df:6f:c9:2b:42:44:ee:
         ee:e8:66:09:15:4a:0c:c6:db:d3:d0:a6:4d:23:34:9e:bf:a6:
         75:a8:68:5d:15:40:ed:fd:3b:d7:67:a8:2b:ab:51:1e:54:b2:
         6d:2a:70:90:a8:20:01:c5:9a:0e:ff:4a:7b:36:a4:46:c9:72:
         e9:0a:d3:76:c4:2e:e2:14:27:db:67:9a:14:c4:46:27:a9:a4:
         3a:9b:3e:14:28:55:e9:4f:81:82:16:88:e4:a8:94:7a:30:ee:
         73:96:71:bf:d5:0f:73:ad:29:18:b9:b0:4a:73:8b:43:7c:78:
         0f:2b:f0:a5:cd:e0:2d:e0:39:b6:c0:72:31:9e:58:9e:77:c3:
         1e:cb:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org