Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa
File:                     3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (raw, json)
Hash identifier:          hEcffm8K02Z0Uz5tq0O8fXUPap1TjUq18EIC3DmFp4E=
Subject key identifier:   36:D0:39:5B:1C:32:43:90:8E:CF:25:89:4C:0E:1B:EC:6C:D0:D8:5B
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       72A96A9A3FDAF358C5C1E1C01F00EC75B02B3C78
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     266505
IP address blocks:        170.244.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:6a:9a:3f:da:f3:58:c5:c1:e1:c0:1f:00:ec:75:b0:2b:3c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject: CN=36D0395B1C3243908ECF25894C0E1BEC6CD0D85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:4c:f9:05:d7:0e:85:df:20:68:af:f8:4e:
                    48:db:3b:dc:96:6c:1e:04:6a:37:1f:a5:b8:f1:8e:
                    47:c5:31:86:f9:5b:c2:73:f8:90:e6:61:6c:46:c8:
                    b5:7e:ef:d8:05:02:0d:37:c6:5f:0e:09:0c:0e:e2:
                    0c:4e:4d:8c:63:7a:4b:5a:4b:96:85:e9:03:c7:6e:
                    05:0a:8a:eb:3d:e0:e2:57:65:6c:61:b6:fd:61:00:
                    f4:2a:00:08:52:1d:34:9b:c4:9b:3b:b0:9c:f1:28:
                    67:87:f5:b5:b5:45:09:ac:70:0d:ae:bf:07:e0:82:
                    65:9b:81:41:74:18:42:d6:2d:c4:06:dc:7d:02:d7:
                    ff:34:0e:a1:21:f8:d1:90:31:c7:f9:1e:68:31:83:
                    19:7f:26:4f:1e:d2:d8:ad:52:25:a6:69:94:29:d9:
                    f3:85:f4:6f:91:90:5f:37:8c:e5:8a:2c:16:6e:47:
                    f5:ce:94:92:55:be:59:c3:bd:4e:e1:44:0e:86:03:
                    81:ea:33:db:59:19:ee:6a:94:bb:37:82:5d:f5:fa:
                    2e:d9:08:90:6f:31:17:fa:f2:57:5e:4e:cc:7f:8f:
                    d7:6d:dc:e3:d5:b9:b7:d7:a7:ae:3c:5d:0b:d8:e3:
                    c6:28:54:ae:e7:12:5e:18:92:b8:ff:68:12:30:a7:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:39:5B:1C:32:43:90:8E:CF:25:89:4C:0E:1B:EC:6C:D0:D8:5B
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:32:d5:cc:fb:5c:fc:27:fe:6b:34:d1:dc:63:07:81:af:d9:
         71:84:13:50:d5:37:8a:65:d7:d8:dd:39:b5:51:39:78:22:dd:
         87:c0:f4:36:47:42:8c:fb:a3:4f:ac:a8:ca:88:42:e8:4d:85:
         21:0b:4f:d8:4f:f7:8c:4b:f4:48:cb:35:16:d6:f8:b9:2d:a3:
         78:6b:d5:c7:6d:93:5c:60:36:3c:8f:00:02:a2:07:a9:f2:93:
         ce:a1:69:e1:89:03:42:a3:f0:d4:4a:eb:25:10:dc:21:aa:dc:
         89:18:ee:8f:a1:f5:0a:63:6e:84:ce:db:71:f0:44:c4:95:dc:
         46:85:24:14:29:9a:ea:ac:35:ae:2f:33:ab:3b:63:2d:14:f3:
         c2:cb:15:2f:e4:e4:d4:69:8d:9a:d2:0d:3b:c7:22:48:f2:9b:
         c2:62:e2:25:f3:5d:47:19:46:7a:9a:d3:d1:58:5e:9c:d6:89:
         d4:49:42:ed:bf:2b:92:15:8f:14:c5:29:97:ef:5d:f8:6a:76:
         11:ef:64:f0:1c:55:25:be:18:b3:1d:23:e1:fc:6e:95:a9:6b:
         a8:9e:16:db:6b:f7:38:8a:00:8b:99:c8:68:43:2d:e4:1b:2b:
         1a:96:b1:02:69:16:f7:6d:4a:ba:45:7e:7d:c8:ea:67:36:7b:
         34:04:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:58 2024 by rpki-client on console-fra.rpki-client.org