Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
File:                     3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          /BxhL6EmFQfkEusH5SasEPc0bTbTNwydbVARFjFfmWQ=
Subject key identifier:   8F:72:F5:7B:A3:A7:F9:52:12:D2:61:CB:80:03:74:60:26:D6:3C:69
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1CB30F0AA4FE2915F20E4ED97403B66134A28F5B
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:33:23 +0000
ROA not before:           Wed 10 Apr 2024 12:28:23 +0000
ROA not after:            Wed 09 Apr 2025 12:33:23 +0000
asID:                     28201
IP address blocks:        170.239.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b3:0f:0a:a4:fe:29:15:f2:0e:4e:d9:74:03:b6:61:34:a2:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:28:23 2024 GMT
            Not After : Apr  9 12:33:23 2025 GMT
        Subject: CN=8F72F57BA3A7F95212D261CB8003746026D63C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:d5:2c:9d:a3:9b:de:1f:09:0a:c5:26:59:
                    bc:7c:38:92:f4:c7:87:16:60:a2:fb:b2:f9:9e:0c:
                    f5:96:cb:6d:2c:fb:8a:7e:05:7d:e9:9b:36:ac:61:
                    c8:3e:fc:6b:53:e7:53:d3:25:34:e2:23:7c:55:f0:
                    1d:9e:38:3e:05:94:02:57:1a:5f:28:1b:c7:21:b1:
                    76:95:6f:ac:ac:35:84:f8:91:18:ae:4f:76:3a:31:
                    52:25:79:b9:63:da:77:29:e1:64:35:f1:b6:fa:92:
                    84:d5:03:ea:f6:2b:37:b2:56:97:dd:c4:38:ca:60:
                    f6:b0:ac:12:2a:95:6c:8a:11:ec:1b:9c:43:d3:f5:
                    10:74:19:eb:87:4f:28:a3:c6:67:87:e7:74:46:71:
                    19:a3:96:ec:10:ec:89:be:56:a0:cf:26:01:7f:5c:
                    06:99:1b:1f:73:ae:25:03:6d:1c:0a:e2:60:d4:9f:
                    18:9e:54:37:a4:bd:d4:02:91:c3:e7:9a:99:9c:1c:
                    f1:be:a2:37:64:c6:d6:96:6c:16:f1:54:1d:13:27:
                    7f:4a:c5:fc:7e:f0:17:05:b2:77:e4:26:68:8d:25:
                    e3:61:a2:0d:fe:39:ca:8e:ef:a5:d1:a0:96:d6:83:
                    d2:85:12:af:7e:99:49:c7:84:c4:ca:b4:a1:26:38:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:F5:7B:A3:A7:F9:52:12:D2:61:CB:80:03:74:60:26:D6:3C:69
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:34:ae:93:b4:09:0a:6b:0e:34:db:8d:6e:86:9c:88:1a:44:
         4f:97:18:58:fd:27:4c:a0:5d:2a:1e:a0:ef:8e:2f:6b:61:17:
         9c:b7:7d:b4:1a:82:5c:1c:12:0d:5b:21:2f:43:1e:f4:38:b6:
         59:69:96:5e:f9:4c:24:68:13:09:08:f6:bb:55:15:80:af:5a:
         53:9a:e8:e0:8c:74:72:58:52:32:56:fc:3a:0f:3e:e9:60:e1:
         df:9c:9f:16:d4:d0:e9:1f:c2:6a:bd:81:e3:6a:ef:13:8f:c8:
         f4:3c:89:58:e7:3d:c4:77:13:e5:57:fb:7f:99:40:63:e7:fc:
         73:22:cc:f9:12:7b:82:33:3c:8b:a0:b0:66:c6:52:d8:7f:8c:
         c4:7b:7a:e5:16:ad:68:17:b4:ca:5c:4d:68:9c:e7:79:16:d3:
         b0:75:d1:8f:af:c7:11:52:bb:e3:89:56:2c:c6:6d:8f:d1:c2:
         7a:24:fb:b6:27:2a:f7:0c:5a:de:d6:31:28:fa:46:fd:95:8a:
         6f:99:77:22:6c:4c:0c:b8:1a:61:07:b0:dd:dd:03:a4:bf:ff:
         fb:ef:f4:e9:3b:51:9d:ae:8e:97:8f:6a:a8:2b:37:09:73:38:
         85:07:6f:ba:df:f2:10:93:85:8b:32:b5:10:33:1e:51:dc:77:
         7f:55:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org