Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37342e302f32342d3234203d3e20323635313937.roa
File:                     3136372e3235302e37342e302f32342d3234203d3e20323635313937.roa (raw, json)
Hash identifier:          K/mVFZZZlV979cW1EaY1yXrZxQ/SzIsyMX9eydWJxqc=
Subject key identifier:   76:E2:AE:FF:60:95:6F:C4:30:E5:91:40:D1:5E:A6:E0:12:D5:39:F4
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       3C5BE893B1B7A88CA104E016E933CB3C5EFD8DAD
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37342e302f32342d3234203d3e20323635313937.roa
Signing time:             Thu 18 Apr 2024 19:58:09 +0000
ROA not before:           Thu 18 Apr 2024 19:53:09 +0000
ROA not after:            Thu 17 Apr 2025 19:58:09 +0000
asID:                     265197
IP address blocks:        167.250.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 21:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5b:e8:93:b1:b7:a8:8c:a1:04:e0:16:e9:33:cb:3c:5e:fd:8d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Apr 18 19:53:09 2024 GMT
            Not After : Apr 17 19:58:09 2025 GMT
        Subject: CN=76E2AEFF60956FC430E59140D15EA6E012D539F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:69:c5:05:44:74:2c:1a:b1:67:96:c7:89:
                    c0:eb:d7:24:4c:11:61:cf:a4:18:fc:66:f5:c4:c6:
                    7a:57:f0:f1:96:7e:c8:41:50:cc:a8:8c:c6:e5:25:
                    0b:b8:5a:17:4c:91:5a:de:a7:3a:9a:06:2c:fc:2b:
                    03:1d:6d:d9:a2:04:da:fe:0a:b2:e9:98:e2:f5:a3:
                    5c:ea:13:19:df:bb:9c:b9:4e:26:2e:8c:ae:af:be:
                    e3:9a:a9:19:43:dd:59:c8:4a:b2:b4:e9:28:fa:cf:
                    e3:95:0b:ff:8e:81:7b:a8:ca:00:e5:5b:06:33:22:
                    e8:f9:f5:4f:f8:1f:c7:74:66:75:08:e9:10:e3:39:
                    5d:e5:b4:67:20:7d:de:29:b2:fe:88:46:47:ad:bb:
                    32:0b:50:16:b6:2c:18:4d:1b:94:31:41:45:0c:3d:
                    1a:75:c3:ac:e9:2d:5d:77:32:6f:f4:82:7c:2f:c7:
                    b0:85:a8:0a:63:95:fe:ab:a0:8d:60:ec:2e:37:e8:
                    d6:24:c2:88:3a:4d:31:0e:e0:a1:50:e9:23:3e:c4:
                    81:e2:97:13:86:0a:ad:2f:76:91:10:dd:2f:41:9c:
                    04:70:66:cd:7a:5e:8c:de:1b:14:c5:8f:9b:62:7c:
                    53:4d:56:e8:d0:ae:14:ec:97:a9:c6:9c:6d:8f:cf:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:AE:FF:60:95:6F:C4:30:E5:91:40:D1:5E:A6:E0:12:D5:39:F4
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37342e302f32342d3234203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:82:d5:5f:b8:97:1b:ce:62:d4:17:fb:45:cd:c7:e1:51:55:
         d3:10:98:6f:08:ca:36:13:9f:81:1f:a6:60:9e:df:fc:4a:fd:
         31:12:c1:67:bd:02:8b:d8:ce:2c:76:8f:c3:95:cb:4d:fc:d7:
         10:6d:47:e1:ae:7d:c7:dd:45:ca:17:34:b5:fc:74:c2:71:9a:
         97:2a:fd:a7:f2:09:57:a5:76:29:06:5e:85:17:cd:fe:b0:3d:
         d2:7c:f4:d4:e8:fd:77:e2:04:08:b2:3c:99:ff:1d:d8:80:ae:
         b6:80:f9:a3:15:80:9c:2b:74:86:37:6b:f8:8a:65:f1:eb:1f:
         ea:b5:ce:52:4d:b8:67:d6:b8:4a:20:a4:e9:e0:9f:d7:a3:fb:
         96:8f:4f:8a:d9:ba:57:6e:71:a8:19:29:c5:ea:20:d9:42:c7:
         00:20:3e:74:5b:96:3a:b0:e3:2e:9d:73:5f:0a:5a:ef:80:b8:
         b0:20:98:f8:bb:be:dc:20:2e:86:7a:91:b6:e2:d9:93:10:74:
         53:d4:fd:c1:41:08:3f:50:52:83:f5:41:74:01:97:41:b4:e2:
         d1:24:4d:c3:37:2c:02:a8:ab:ee:82:c8:62:71:fc:83:1f:86:
         3f:05:32:ae:53:c5:cf:27:be:8e:6f:bd:84:d0:42:d6:93:47:
         d8:6d:59:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:45 2024 by rpki-client on console-ams.rpki-client.org