Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          0EhBQlWFXI9UIC5wODhfxA+5zYt6xC/HwO6BLDFbJ+s=
Subject key identifier:   B6:B8:91:35:25:D4:4A:70:91:81:7F:3A:57:32:5C:8B:77:D3:33:BC
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       358EF12A6C3A4C988DAF23D4D1DB92E8A2378D2F
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 24 Apr 2024 14:20:56 +0000
ROA not before:           Wed 24 Apr 2024 14:15:56 +0000
ROA not after:            Wed 23 Apr 2025 14:20:56 +0000
asID:                     266374
IP address blocks:        170.80.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8e:f1:2a:6c:3a:4c:98:8d:af:23:d4:d1:db:92:e8:a2:37:8d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr 24 14:15:56 2024 GMT
            Not After : Apr 23 14:20:56 2025 GMT
        Subject: CN=B6B8913525D44A7091817F3A57325C8B77D333BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:11:a0:3e:13:af:fd:7b:1e:20:02:4b:cd:
                    e1:d7:e7:ef:8b:05:e3:98:64:23:8f:36:8b:0c:90:
                    5e:74:37:5c:bb:1e:9a:32:c1:25:cd:27:90:27:d7:
                    44:2c:40:f8:9c:18:19:38:85:c0:21:79:9e:ff:e9:
                    f0:0d:36:c5:33:f6:be:d7:e2:a7:c2:4d:fd:62:2a:
                    a2:71:88:1c:25:d1:73:3b:73:09:87:8e:57:d8:67:
                    5f:45:73:00:39:f0:48:9f:06:08:cb:c3:bd:f2:95:
                    d8:dd:8a:97:7f:f7:6c:d1:ea:39:00:d5:5d:be:49:
                    15:1a:34:ae:ea:06:0f:ab:3e:5a:13:c1:60:8e:22:
                    ed:a7:f0:d7:2b:a1:d1:a7:7b:cd:c9:a4:1e:73:76:
                    74:c8:e9:2a:f7:25:46:5c:2c:b8:5d:f1:12:bb:da:
                    c8:f4:a1:4e:ca:ea:d6:29:46:bb:29:0a:5a:9e:86:
                    12:59:33:44:07:a8:f9:a0:4c:36:5a:e0:e1:a0:40:
                    61:2a:f4:a1:fb:0a:b9:bd:89:81:cf:48:66:96:6f:
                    ae:d4:fd:90:6d:91:34:2c:0a:68:9f:fc:c7:d1:ba:
                    0b:9c:8f:28:25:54:58:5d:d0:a0:30:e6:c0:2c:8d:
                    2a:22:78:e5:7d:8e:9f:63:61:13:3d:79:fc:d2:01:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:91:35:25:D4:4A:70:91:81:7F:3A:57:32:5C:8B:77:D3:33:BC
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a0:07:a5:f4:b0:76:e0:9f:d4:a4:89:30:e3:3f:d7:47:0b:
         61:6e:4d:f6:07:4f:3b:21:24:d6:ba:99:ee:53:6f:b5:a2:07:
         27:5e:10:1a:c1:46:58:6e:13:91:7d:5e:9f:f3:55:35:18:3f:
         59:5e:af:04:e4:af:77:f8:3f:9e:2d:df:b4:cc:f4:19:c6:f9:
         ab:c1:2f:6a:fe:ad:6b:d9:b6:86:f3:11:d5:35:d2:ac:7e:67:
         67:72:63:9a:67:a5:8a:1c:c5:85:bd:61:54:a5:cd:f9:e8:02:
         11:78:19:04:b8:31:84:53:20:c8:55:a3:d4:99:8f:32:d0:9e:
         25:4d:2a:a0:e4:1f:7a:ca:af:23:f3:f5:de:2e:68:cd:96:73:
         0e:0c:1e:b8:49:63:06:19:91:a1:12:cb:2d:37:46:13:1b:97:
         d6:95:db:93:31:43:b5:8f:e1:69:d8:e1:eb:a0:f0:d2:e8:80:
         ae:7d:70:96:a3:a6:b3:84:27:1f:89:28:3f:f5:f8:82:a7:c7:
         85:c6:50:4a:04:43:5d:67:da:43:29:a6:b0:eb:84:12:27:b0:
         50:50:78:e4:5d:a7:f2:e8:bd:e2:d3:1b:21:1a:d7:79:bf:09:
         c3:46:c5:87:be:4c:36:c3:13:0d:82:fe:48:4f:f6:44:78:98:
         57:fb:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:13 2024 by rpki-client on console-ams.rpki-client.org