Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (raw, json)
Hash identifier:          tJ6GBdRqj9KrbMYEIhCJBSfpg0mSqD99slzBR01pGD8=
Subject key identifier:   6F:20:C2:36:B0:9D:31:40:65:FB:31:A2:F6:EF:53:6B:2C:08:EC:7E
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       208C832BAFA96093602FDB416683208DF4B355A5
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa
Signing time:             Wed 03 Apr 2024 18:30:32 +0000
ROA not before:           Wed 03 Apr 2024 18:25:32 +0000
ROA not after:            Wed 02 Apr 2025 18:30:32 +0000
asID:                     266505
IP address blocks:        170.244.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8c:83:2b:af:a9:60:93:60:2f:db:41:66:83:20:8d:f4:b3:55:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Apr  3 18:25:32 2024 GMT
            Not After : Apr  2 18:30:32 2025 GMT
        Subject: CN=6F20C236B09D314065FB31A2F6EF536B2C08EC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:93:b0:e4:9e:70:07:3b:c2:7d:84:57:13:
                    9a:8f:af:99:c9:ba:d5:37:c1:ca:4d:4a:b3:5e:7c:
                    1e:38:5b:d9:5a:7e:16:e9:35:20:1c:e7:66:04:6a:
                    8e:77:1a:83:fb:96:da:5a:42:8d:a6:05:fe:fd:52:
                    ef:d8:60:d6:ee:4a:4c:04:d4:d9:85:bf:b7:e5:20:
                    d2:02:e3:6f:73:af:b8:cc:30:93:f6:64:8c:1d:de:
                    f5:00:a0:ee:43:f5:cc:98:e9:63:e6:31:c6:94:71:
                    7d:d9:68:15:9d:b1:e9:85:82:2e:7a:0c:e9:bf:90:
                    a6:ae:cc:22:08:ba:fd:39:4c:da:3d:1e:2f:bc:cd:
                    1a:04:a0:e1:65:3b:bb:85:01:a8:b3:e3:4b:cb:6d:
                    7f:6c:50:57:9a:d6:cb:6c:3f:b5:ce:8e:49:d2:c7:
                    1e:cd:8e:4c:6c:26:40:ca:81:f3:e6:9c:51:2e:a1:
                    6c:77:52:9b:48:da:5c:56:e8:26:60:c7:64:bb:4d:
                    9a:bb:b1:1b:ec:78:0d:f8:57:3a:ab:f2:66:65:18:
                    17:b9:09:c9:90:44:b3:4b:c5:70:e8:57:dd:db:ae:
                    4a:68:1a:45:c8:ff:2e:2b:db:b4:80:17:fb:c2:4a:
                    5f:67:e7:27:1f:a1:ad:69:02:ac:ea:32:51:6f:c7:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:C2:36:B0:9D:31:40:65:FB:31:A2:F6:EF:53:6B:2C:08:EC:7E
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:6c:00:26:8e:e6:bd:c4:47:cf:44:b5:34:f7:ac:75:ef:
         4f:e3:09:db:30:8a:f4:a0:47:d5:ec:8b:ab:bd:81:68:26:05:
         78:66:d6:16:41:96:f2:bf:5e:4c:14:31:c3:dc:a0:34:49:dd:
         cb:c5:d8:ae:23:77:d2:94:91:f0:d7:d9:01:15:07:d4:5f:c6:
         1b:51:b4:53:1b:0b:5e:b3:0d:4b:a0:9e:dc:e0:22:48:37:0a:
         5b:42:e0:8d:f9:89:18:78:7d:3f:df:cb:a0:6c:a0:15:72:3d:
         d9:0a:21:1a:14:5a:55:46:a5:a2:39:43:e0:28:44:48:e2:30:
         e4:50:87:60:36:8a:f2:f7:ef:21:58:5f:dd:fa:39:15:8b:71:
         c6:2f:f0:cd:11:a6:a5:a8:9a:04:96:ab:c7:af:c8:5c:4a:ed:
         54:52:98:2f:96:8a:2f:1c:61:c6:74:c4:df:3e:50:8e:49:c5:
         bc:f6:fb:bd:a2:1c:4a:e0:1f:e0:e3:a0:1a:79:76:ea:f2:02:
         6a:7f:d4:87:db:7d:a5:47:b2:76:ca:66:0d:bc:22:4d:e1:fa:
         24:b5:21:53:cd:37:4e:c0:d7:19:f5:d7:9f:46:8c:54:6a:2d:
         94:1b:c1:87:29:f7:b2:e4:cf:cb:3a:a9:04:ff:9f:a2:90:ee:
         fc:76:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:58 2024 by rpki-client on console-fra.rpki-client.org