Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          KHRGCJKKVOOsgOSyAjW6pdMYah8AhMrQFwIyzh6xZN4=
Subject key identifier:   14:B1:5A:99:E1:5C:80:B3:0E:66:3C:61:77:B1:5C:F6:DE:64:DB:9D
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       7633565E26D2D29AAA0F3CABAC603C3093E00574
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 24 Apr 2024 14:20:46 +0000
ROA not before:           Wed 24 Apr 2024 14:15:46 +0000
ROA not after:            Wed 23 Apr 2025 14:20:46 +0000
asID:                     266374
IP address blocks:        170.80.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:33:56:5e:26:d2:d2:9a:aa:0f:3c:ab:ac:60:3c:30:93:e0:05:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr 24 14:15:46 2024 GMT
            Not After : Apr 23 14:20:46 2025 GMT
        Subject: CN=14B15A99E15C80B30E663C6177B15CF6DE64DB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:fa:fb:cc:f8:a5:6f:0d:c2:09:40:68:3c:
                    bb:d7:2d:32:76:a1:e3:7b:0a:45:0d:b8:1a:f8:fa:
                    7a:97:b5:84:3f:7c:d8:19:10:68:32:54:06:b9:f9:
                    81:64:94:91:2d:a0:4d:ea:6c:65:d6:d8:02:ac:8c:
                    ad:60:22:0e:d8:cb:c6:13:aa:4e:2d:5a:a1:9d:da:
                    e6:12:19:69:a6:d1:08:dc:61:cd:cb:a5:5d:cd:31:
                    f4:c5:5a:85:c6:ed:3c:ac:68:ab:8c:a3:bd:eb:be:
                    9a:d1:48:df:ef:96:af:8f:7b:53:97:cf:a3:37:ac:
                    71:06:a7:3f:9f:f3:7e:2a:21:df:1f:f9:5b:92:61:
                    a7:7e:7e:d6:d8:a4:58:e5:2f:5b:f3:f6:2d:8f:57:
                    74:7a:74:68:39:43:5b:72:5b:e8:e1:00:d7:cc:58:
                    20:9e:d1:67:2d:ac:46:df:3c:9f:42:c0:ef:2a:7a:
                    c2:fc:98:51:54:8f:71:d1:95:e7:b3:b1:2e:20:b6:
                    c4:b3:2d:35:a0:2a:10:8e:af:de:32:a9:0f:73:a3:
                    5a:5e:91:b7:60:08:8f:93:6e:0d:97:a2:b1:60:ad:
                    48:a5:61:f3:37:ec:4f:c5:5f:8d:c4:cf:1f:75:7a:
                    01:b0:94:81:fd:6d:e1:b7:60:65:dd:65:70:6a:87:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:5A:99:E1:5C:80:B3:0E:66:3C:61:77:B1:5C:F6:DE:64:DB:9D
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:a9:b9:3b:4f:ff:ee:71:10:a7:c7:4f:6a:f6:25:fa:3f:
         2b:78:20:a1:65:7a:8b:d6:12:71:7e:50:ba:37:3c:85:da:70:
         1e:22:56:ae:1c:d4:86:53:18:ec:19:d5:ad:69:9e:32:cb:63:
         82:6c:36:a3:e2:fb:ff:a9:03:71:1c:56:10:f5:b4:f5:12:d3:
         16:72:57:ac:44:63:5e:92:6e:2f:61:d4:03:21:4b:7d:fe:13:
         aa:18:0e:7d:20:99:1c:c7:64:80:60:7c:34:25:70:f3:0a:6c:
         de:f9:da:68:af:d7:5a:8d:d7:9f:ee:d2:ed:11:7b:c6:ce:fc:
         81:6a:3c:9e:ff:49:d5:e5:2a:8a:6a:a0:cb:52:5b:ff:12:ef:
         66:ca:06:12:f3:04:4b:22:72:1d:1f:48:4d:5d:ee:ba:e3:1d:
         40:9c:6f:7b:25:62:59:a7:5a:2d:c3:1a:b7:65:6e:1c:51:99:
         8f:20:94:f1:c7:ec:2d:99:28:be:fa:7f:4e:18:b4:bf:78:60:
         ba:f1:de:24:7e:10:17:44:93:2d:78:d8:e8:17:90:a3:f7:84:
         e0:74:41:e2:10:35:08:1e:fe:0f:58:51:04:62:b7:e0:21:22:
         ef:b3:ff:5b:4a:09:4e:3c:68:55:e1:c7:0d:29:61:29:46:10:
         55:3b:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:54 2024 by rpki-client on console-fra.rpki-client.org