Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37352e302f32342d3234203d3e20323635313937.roa
File:                     3136372e3235302e37352e302f32342d3234203d3e20323635313937.roa (raw, json)
Hash identifier:          Hbq3kWIFISMFTlDMzMc7PsQ0I+qgXr6+pRdCYxJcj7A=
Subject key identifier:   45:B3:94:15:1C:AC:80:22:D5:A5:ED:05:8D:C1:C6:DF:9D:63:EA:C4
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       32799D211670B7E735CD3DECB81DE9C2BEB801DD
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37352e302f32342d3234203d3e20323635313937.roa
Signing time:             Thu 18 Apr 2024 19:58:11 +0000
ROA not before:           Thu 18 Apr 2024 19:53:11 +0000
ROA not after:            Thu 17 Apr 2025 19:58:11 +0000
asID:                     265197
IP address blocks:        167.250.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 21:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:79:9d:21:16:70:b7:e7:35:cd:3d:ec:b8:1d:e9:c2:be:b8:01:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Apr 18 19:53:11 2024 GMT
            Not After : Apr 17 19:58:11 2025 GMT
        Subject: CN=45B394151CAC8022D5A5ED058DC1C6DF9D63EAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:36:3a:20:82:e1:26:4c:59:a9:a3:4f:af:
                    17:5b:d9:98:df:70:9c:0e:58:42:f8:3f:15:8d:7f:
                    ef:b8:5b:c6:e6:d5:28:c1:1d:51:79:3c:40:d1:98:
                    6a:70:ee:47:47:0d:57:29:39:43:e5:f3:69:a6:e3:
                    b0:f4:d2:75:44:b9:bd:cb:74:08:b1:47:37:81:29:
                    be:cf:b0:53:82:2b:0c:91:2d:63:50:74:d5:fb:12:
                    bf:af:b5:3e:f3:b4:df:35:07:20:0c:6a:6d:f9:f3:
                    e0:d0:e0:12:44:80:d3:d6:c6:96:c1:09:7f:70:e9:
                    3e:82:e7:ca:18:18:55:7f:66:a2:32:9a:f2:e3:72:
                    a2:ae:ab:fd:e9:a5:ed:c8:31:0b:4c:75:de:c6:12:
                    f7:f0:95:dd:fd:80:f2:ae:4c:6a:82:ae:0f:f6:4f:
                    cf:79:fd:2c:80:76:c2:7a:f8:55:dc:3d:41:8e:47:
                    1e:44:eb:29:cb:f6:9b:26:9d:fc:d8:91:30:5b:77:
                    9c:ae:0b:d1:c2:7e:44:cd:fd:46:0d:12:02:c2:e1:
                    ac:dc:ec:ec:f4:ec:6d:2e:91:85:6b:13:6a:3d:9d:
                    e8:6f:b9:27:09:65:ce:8d:ff:1c:26:d0:cc:4a:8b:
                    40:6d:9f:36:84:4a:49:fd:0c:42:71:b8:18:69:8c:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B3:94:15:1C:AC:80:22:D5:A5:ED:05:8D:C1:C6:DF:9D:63:EA:C4
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37352e302f32342d3234203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:56:1c:9a:af:d4:a5:12:32:ec:69:8f:99:4a:36:4f:2c:
         38:36:55:c5:d7:b9:6d:ff:34:95:c5:d2:a9:fb:46:8f:6a:38:
         24:72:23:98:b6:1e:05:d1:da:54:db:57:fc:ae:d4:67:0c:1e:
         c7:c7:56:ae:6e:69:03:8b:eb:c6:60:38:fd:eb:25:1d:86:9b:
         aa:e3:0a:a2:34:23:94:0d:d0:aa:2e:98:af:31:c4:2e:b5:e3:
         58:b4:45:36:da:13:c5:73:a2:b9:52:ff:c5:44:10:d7:ad:39:
         4e:12:35:a4:58:4a:9a:e6:f4:e7:c5:42:20:1a:28:ca:09:c7:
         58:65:7c:d4:56:0e:d9:f3:de:82:e6:ee:d8:70:95:7f:7e:b2:
         d0:31:49:62:10:d8:96:ca:45:cc:b9:21:93:56:88:ec:3e:70:
         9a:72:02:67:be:45:31:0f:44:87:6f:15:c9:b1:74:55:2f:49:
         fe:98:49:28:24:4a:4c:b9:da:b8:cc:d9:bf:6f:2f:29:b4:a2:
         b3:3e:1a:b9:a2:ae:76:6b:a6:2c:e6:a3:b5:39:34:dd:d7:c9:
         58:f9:cc:f7:4b:da:c9:34:71:16:b0:14:ff:c4:48:5d:9f:cd:
         49:5d:45:bd:ad:78:78:3e:5a:c4:ba:26:52:f2:d5:40:a4:a9:
         7b:e3:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:45 2024 by rpki-client on console-ams.rpki-client.org