Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
File:                     3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          ddFJU9+IA3otvFo0uR5kW0ZzOW9l2VbjqtYOvm2/1y8=
Subject key identifier:   75:47:22:4C:F4:1A:91:27:E1:BE:7E:43:CD:23:A2:EB:95:37:6E:38
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1ECAA397510B243EDD2BD6EB3402BFCB1AAFDFED
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:34:03 +0000
ROA not before:           Wed 10 Apr 2024 12:29:03 +0000
ROA not after:            Wed 09 Apr 2025 12:34:03 +0000
asID:                     28201
IP address blocks:        170.254.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ca:a3:97:51:0b:24:3e:dd:2b:d6:eb:34:02:bf:cb:1a:af:df:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:29:03 2024 GMT
            Not After : Apr  9 12:34:03 2025 GMT
        Subject: CN=7547224CF41A9127E1BE7E43CD23A2EB95376E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:a0:a0:2a:94:44:6e:49:93:e2:12:ad:75:
                    5a:a1:b1:fe:34:b6:9d:2e:a0:78:e6:66:ce:b9:3a:
                    6f:73:64:83:da:0f:98:9e:0a:4a:ad:58:9b:6e:9c:
                    3d:2e:fb:6e:bc:e7:76:b8:c1:7f:f5:be:ee:d9:5a:
                    5e:8a:98:9f:22:4f:99:4b:4a:7f:64:4e:a0:43:9c:
                    0f:02:da:62:59:2a:07:98:54:80:04:b6:d0:6b:b8:
                    a1:24:4c:a8:a1:5b:26:0d:25:4c:4d:df:a8:b9:67:
                    9a:6d:5b:ca:e6:3d:83:13:73:00:b3:8f:e2:b3:99:
                    3a:7c:4e:70:81:81:13:25:3a:0d:4e:3e:c3:18:76:
                    88:3d:46:33:19:e3:fe:c2:14:69:4e:a5:37:62:06:
                    ab:2e:ef:50:1c:04:77:44:eb:ff:e9:35:60:e5:18:
                    2b:a4:b9:34:4c:42:97:3c:15:f7:3a:24:86:7f:67:
                    b0:07:65:85:4a:3c:ad:12:74:19:0a:ca:1d:ce:4e:
                    0d:b1:6e:28:cf:04:c5:b8:3d:96:1c:52:ab:34:ac:
                    bd:46:ad:50:82:69:0e:5b:70:81:c3:58:1a:a5:4e:
                    2e:24:f7:78:b4:a8:7c:89:11:47:51:26:a6:32:5e:
                    ba:b4:45:e3:5c:8a:ab:fd:eb:0b:a5:a6:d1:d4:92:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:22:4C:F4:1A:91:27:E1:BE:7E:43:CD:23:A2:EB:95:37:6E:38
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:54:6e:57:0e:34:d2:df:79:a6:f3:1b:c5:62:0b:cb:e6:12:
         54:f2:e6:1f:68:f8:b5:0c:6b:12:2f:b8:c4:07:f6:6e:c6:ec:
         b0:77:97:5e:31:3e:e7:e2:42:0a:b9:3d:1a:e7:4a:84:35:81:
         cf:0a:7e:63:3f:72:a2:84:1d:86:b4:a9:e9:5b:50:68:31:43:
         fd:9f:ae:9a:ee:f9:10:7b:23:8d:47:0b:73:8d:16:27:e7:70:
         f1:38:4b:a8:d0:b8:93:74:70:7f:8a:fa:1d:a6:4b:59:3b:9a:
         9d:ec:07:5d:9d:63:f0:e2:01:42:6e:e4:c8:98:85:17:dd:39:
         71:9f:bd:9b:da:b3:e1:ce:25:9d:94:15:f4:90:d9:da:a5:5a:
         b5:0c:af:bd:b3:40:ad:9b:20:d5:68:a1:b9:ff:cb:27:60:b5:
         82:6e:35:28:07:1f:a7:69:07:55:43:4c:44:17:92:f7:dc:dc:
         21:f5:63:42:53:92:e8:5b:76:90:07:e8:95:0d:03:1b:f1:ad:
         a8:2e:1c:cc:60:e0:f7:a7:3a:85:b8:ca:41:3b:b2:4f:1b:f0:
         11:ec:47:ac:9a:02:2f:4c:eb:71:26:b6:25:11:d5:68:42:4b:
         d3:20:61:0c:92:10:bf:14:fb:c5:27:ae:96:57:bf:e9:62:e5:
         b3:3d:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org