Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa
File:                     3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier:          ee3J1qRl2lRSnMthPW9r7rD6RgDb81j6584uqDTmFv0=
Subject key identifier:   35:0C:13:B8:7A:0F:6E:FA:F3:F2:44:95:1D:8D:47:F2:0C:FC:F5:D9
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       369925A549B71DFB510F1B3FDA0428AAB375BFFD
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:28 +0000
ROA not before:           Thu 04 Apr 2024 03:47:28 +0000
ROA not after:            Thu 03 Apr 2025 03:52:28 +0000
asID:                     265181
IP address blocks:        170.233.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:99:25:a5:49:b7:1d:fb:51:0f:1b:3f:da:04:28:aa:b3:75:bf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:28 2024 GMT
            Not After : Apr  3 03:52:28 2025 GMT
        Subject: CN=350C13B87A0F6EFAF3F244951D8D47F20CFCF5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:75:be:f0:0e:c4:9d:93:76:ce:e0:3e:b0:
                    07:e6:50:2d:45:65:d2:d1:ae:5a:46:e2:03:6c:97:
                    bf:4e:d7:99:81:b0:37:ac:e5:ef:f6:6e:a8:ce:ac:
                    39:34:97:da:e2:af:32:27:2e:76:6c:3b:5d:d6:b6:
                    51:d1:9f:ac:e1:c2:f6:01:90:d3:d1:06:5c:c7:6b:
                    46:08:8e:73:af:24:92:54:f7:00:c1:db:87:dc:01:
                    ec:d4:4b:8a:96:1a:a8:20:e1:09:bf:27:89:b2:9d:
                    e8:bb:c0:a6:d0:1d:57:4d:6b:da:a3:f5:be:20:59:
                    56:7c:9f:12:99:66:63:8e:30:db:c3:39:27:83:d6:
                    f9:cd:dd:21:93:8a:fd:74:53:a9:65:58:c5:79:de:
                    61:9b:13:6b:2d:3f:67:b6:04:1a:52:7a:69:eb:ca:
                    e6:e4:18:a3:7e:76:d5:1f:8e:36:31:97:49:ed:7a:
                    24:7f:54:14:1c:90:81:36:95:9e:da:2e:80:4d:e0:
                    cd:2e:11:6a:b0:80:5a:2b:0d:3b:17:f5:11:f3:35:
                    80:f7:57:ad:a4:4a:60:27:82:6c:62:81:29:5e:44:
                    40:99:d5:3d:e6:22:1a:d0:c6:b1:8d:18:04:f6:f7:
                    26:9c:a0:51:20:e9:85:1e:5e:04:fa:fc:e8:78:53:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0C:13:B8:7A:0F:6E:FA:F3:F2:44:95:1D:8D:47:F2:0C:FC:F5:D9
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:a5:8e:6e:5c:2d:0c:28:44:43:61:25:8d:d0:d3:f4:f6:36:
         00:51:52:fb:6a:c7:29:fe:eb:a3:75:97:0b:50:bf:89:c7:95:
         c8:58:70:5a:db:5c:4f:88:b5:55:d1:05:98:e6:f4:a5:8e:ef:
         4c:1a:10:16:be:13:e8:ab:16:34:11:0d:9e:57:2f:13:7d:7e:
         eb:f6:56:04:27:ba:f6:df:29:20:b9:20:d2:3e:6d:b5:a7:de:
         be:a1:d1:ea:03:45:20:34:8f:b1:ca:5f:63:7d:69:d4:ff:2b:
         c1:36:f2:0a:d9:de:0a:8d:17:4a:39:b1:e8:cf:bc:60:b4:c5:
         91:dc:76:bf:07:c9:39:70:32:26:d3:74:9f:5b:6c:f5:61:ec:
         b0:81:8e:7a:81:8f:d9:63:71:bf:03:5a:e9:11:e2:24:69:ef:
         56:75:de:2d:47:c7:1b:e1:ee:6e:82:9b:91:64:2a:73:72:36:
         7a:29:28:2f:85:ec:f9:4e:04:77:fa:84:7a:ec:73:8e:ae:2e:
         61:3f:d1:df:82:c0:e0:6f:2b:a6:c0:6c:96:99:8a:7c:31:90:
         4f:f0:a6:f0:0e:49:8e:b9:ad:89:e1:40:c4:26:0f:74:54:90:
         75:33:fc:95:62:0e:02:e7:a0:43:3b:f1:50:b2:03:50:23:ec:
         31:c6:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:32 2024 by rpki-client on console-ams.rpki-client.org