Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa
File:                     3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa (raw, json)
Hash identifier:          CH5hPEPBbOTGvnzP6s9Xjw9MDAbxdcYyDdVci3IR5qU=
Subject key identifier:   7E:C0:70:D2:92:3C:A6:EC:57:91:2B:23:68:EC:9F:77:CE:56:53:13
Certificate issuer:       /CN=8751E96659F5A7068467CDEEF4776A74DF917289
Certificate serial:       1178E09FBDFD114D9FA85D80F0233DE69B4B7F03
Authority key identifier: 87:51:E9:66:59:F5:A7:06:84:67:CD:EE:F4:77:6A:74:DF:91:72:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8751E96659F5A7068467CDEEF4776A74DF917289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa
Signing time:             Thu 04 Apr 2024 22:54:28 +0000
ROA not before:           Thu 04 Apr 2024 22:49:28 +0000
ROA not after:            Thu 03 Apr 2025 22:54:28 +0000
asID:                     266030
IP address blocks:        170.245.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/8751E96659F5A7068467CDEEF4776A74DF917289.crl
                          rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/8751E96659F5A7068467CDEEF4776A74DF917289.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8751E96659F5A7068467CDEEF4776A74DF917289.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:e0:9f:bd:fd:11:4d:9f:a8:5d:80:f0:23:3d:e6:9b:4b:7f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8751E96659F5A7068467CDEEF4776A74DF917289
        Validity
            Not Before: Apr  4 22:49:28 2024 GMT
            Not After : Apr  3 22:54:28 2025 GMT
        Subject: CN=7EC070D2923CA6EC57912B2368EC9F77CE565313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:7d:55:f7:0c:84:6f:a7:38:dd:86:f8:f3:
                    8b:51:79:71:2f:39:d2:1b:26:02:f1:7d:85:ab:c0:
                    f0:99:b1:9c:28:2f:77:74:32:8c:a1:a6:f3:3e:8b:
                    ab:eb:d0:b0:69:61:99:2b:e1:c2:2f:15:3e:8d:2a:
                    9f:a0:2d:cd:0f:a8:ed:d6:18:6d:57:db:d9:be:3c:
                    01:41:1f:b0:b3:d7:52:52:80:88:58:e4:8a:11:29:
                    ea:e0:d3:91:4f:54:73:55:51:3f:83:26:e8:db:63:
                    05:be:08:64:26:50:37:d6:19:51:3e:43:fb:55:a8:
                    05:3e:81:65:4c:7b:10:55:fe:6c:78:f0:a9:c0:61:
                    b9:bf:23:97:31:72:f4:3d:83:84:e7:46:8b:a5:52:
                    26:48:21:55:b2:e1:4a:0f:d5:d3:3c:66:e9:d6:7f:
                    d9:1d:45:24:3c:e1:1e:8e:51:20:32:bf:18:00:6d:
                    1f:d6:66:8e:90:0d:19:2b:48:e4:36:c7:d1:7a:a0:
                    01:a0:43:cb:fb:fb:97:b9:03:98:8e:fd:92:d6:0c:
                    51:6c:74:e4:7b:af:b1:59:d3:8b:b5:53:d7:7a:56:
                    b5:5e:14:82:d7:dd:da:ea:7a:d6:72:1a:6b:61:b8:
                    bf:41:17:c8:3d:41:cc:43:6c:5a:a0:e0:1e:0e:c5:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:70:D2:92:3C:A6:EC:57:91:2B:23:68:EC:9F:77:CE:56:53:13
            X509v3 Authority Key Identifier:
                keyid:87:51:E9:66:59:F5:A7:06:84:67:CD:EE:F4:77:6A:74:DF:91:72:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/8751E96659F5A7068467CDEEF4776A74DF917289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8751E96659F5A7068467CDEEF4776A74DF917289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/3137302e3234352e3234342e302f32322d3332203d3e20323636303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:15:ff:3d:bf:01:aa:92:17:1d:d6:2d:7e:c4:97:44:8c:a6:
         ef:52:b0:a3:0d:5e:2f:fb:e2:2c:b3:83:13:5f:f5:c2:2d:bb:
         d7:c5:d3:92:fb:f5:95:56:61:e9:d1:83:f4:85:46:52:5d:e1:
         01:31:b6:13:b3:52:a7:56:8b:d8:a0:de:f2:cb:8f:78:64:d2:
         b9:70:14:11:e8:9c:cc:05:bf:8c:fe:b9:d7:11:02:53:ff:8a:
         4b:11:1f:00:3f:60:46:28:93:6d:ed:e7:70:50:f8:e1:a7:72:
         e8:17:37:14:ba:43:73:8d:5d:45:bd:cf:d8:49:b5:85:d8:ae:
         d0:83:42:13:25:ae:a5:03:8e:a4:df:f3:60:8c:bb:ed:6a:87:
         ca:cf:d2:df:ea:e1:30:c4:db:06:59:02:ca:5d:c9:c1:45:cd:
         ce:b1:18:30:bb:d4:53:29:7a:ba:a3:74:b4:3d:57:fc:17:16:
         88:d7:62:3f:ca:21:52:70:b3:2e:4e:8f:b8:ac:f5:a1:02:03:
         0a:79:a5:87:bf:85:ad:91:37:75:6f:c8:4d:8b:00:11:e6:a8:
         3e:ca:52:f2:60:4d:75:a9:31:55:d7:71:82:2c:d7:4d:55:c8:
         c4:66:8c:dd:10:83:f9:da:1b:9a:69:bb:d7:93:39:70:65:ed:
         b6:3c:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:54 2024 by rpki-client on console-fra.rpki-client.org