Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/3137302e38332e32342e302f32322d3234203d3e20323636343531.roa
File:                     3137302e38332e32342e302f32322d3234203d3e20323636343531.roa (raw, json)
Hash identifier:          oWuzDNbH9jNiEb9WaFvQy/pRUUAiAUqEByPSH5umiUU=
Subject key identifier:   D3:E6:F9:A1:3E:CD:6F:13:A1:D0:DB:54:E1:87:07:0F:5E:4F:0F:50
Certificate issuer:       /CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
Certificate serial:       2CE19DD23C05E4B1888521A73FEAC957DCC02E3B
Authority key identifier: 6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/3137302e38332e32342e302f32322d3234203d3e20323636343531.roa
Signing time:             Fri 05 Apr 2024 04:25:24 +0000
ROA not before:           Fri 05 Apr 2024 04:20:24 +0000
ROA not after:            Fri 04 Apr 2025 04:25:24 +0000
asID:                     266451
IP address blocks:        170.83.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.crl
                          rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e1:9d:d2:3c:05:e4:b1:88:85:21:a7:3f:ea:c9:57:dc:c0:2e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
        Validity
            Not Before: Apr  5 04:20:24 2024 GMT
            Not After : Apr  4 04:25:24 2025 GMT
        Subject: CN=D3E6F9A13ECD6F13A1D0DB54E187070F5E4F0F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:24:e6:0d:1c:f8:9c:28:e7:53:51:90:81:
                    1c:ae:41:9b:ec:c5:31:1b:94:04:10:78:54:b1:7c:
                    58:75:2d:b2:78:b9:e4:13:d6:f5:8a:34:3b:fb:6f:
                    e2:cc:38:48:21:70:11:9a:23:4b:7f:a0:4b:75:c1:
                    4c:6e:fb:e4:d7:43:e9:c5:10:bd:ab:95:a1:4a:d6:
                    00:7c:8d:38:10:10:24:d5:fe:db:49:0c:29:b7:9c:
                    c6:73:30:43:a4:21:7e:6e:fe:26:fe:82:3f:15:5c:
                    7f:72:31:4b:2c:0e:c5:31:87:90:25:a0:23:f3:64:
                    07:c7:1d:5c:2d:05:62:e7:66:e5:8e:be:ab:30:9e:
                    0e:c7:13:cc:1d:2f:3b:21:eb:85:7e:1c:8a:84:fe:
                    d1:72:30:d7:4a:c1:d7:55:dc:5e:7b:36:48:c4:34:
                    be:95:48:08:6a:5b:77:2a:f3:62:68:f1:3a:5b:08:
                    e1:83:12:3a:54:c6:7a:36:c2:f1:33:88:94:6d:6b:
                    97:a2:a7:10:c8:69:0c:e1:81:8f:6a:96:85:8b:72:
                    d3:ca:2f:4d:80:8d:51:d3:75:36:3a:d4:dc:db:3b:
                    29:79:f5:71:b9:69:5e:a1:22:39:2b:22:1a:c1:53:
                    84:5f:1c:10:75:32:a7:bb:48:eb:81:50:60:11:61:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E6:F9:A1:3E:CD:6F:13:A1:D0:DB:54:E1:87:07:0F:5E:4F:0F:50
            X509v3 Authority Key Identifier:
                keyid:6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/3137302e38332e32342e302f32322d3234203d3e20323636343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:94:25:26:d9:3f:10:38:78:29:e4:da:85:e0:b6:45:0b:fd:
         f8:53:3d:e5:03:5d:8c:ab:35:35:0a:e3:2d:1c:4b:53:4a:7b:
         59:82:45:86:77:75:80:30:ba:6d:4b:66:9d:fb:2b:6d:91:22:
         18:7a:b4:81:f9:ae:3e:ac:1a:1d:d0:28:aa:72:ab:7c:5c:fb:
         ba:34:c9:97:08:38:49:4d:8c:6c:1d:e6:07:1c:8f:1c:7c:6f:
         52:83:7d:8f:32:66:e8:bc:d2:4d:48:1e:44:90:c6:38:40:07:
         33:6a:c8:e7:4c:39:41:70:90:6f:67:cc:df:a4:be:50:05:54:
         23:bc:52:30:62:51:42:32:27:19:3a:64:7d:31:13:48:0c:cd:
         67:fe:30:85:b7:0a:82:06:2b:7c:3c:ff:75:1c:fc:3e:b9:eb:
         e9:91:05:d4:d2:5d:30:4b:1d:34:04:db:c7:fb:da:8d:c2:f3:
         e1:ca:c7:11:2c:d7:89:01:7c:15:29:f1:93:0e:cf:3d:e4:c5:
         c0:cb:d4:45:80:c4:dc:0c:e7:b2:aa:66:4e:7c:40:ee:5c:29:
         5f:56:db:71:e5:d5:e9:bb:4d:d6:0d:38:09:7b:49:36:c1:e9:
         6b:31:3e:e5:98:bd:a7:5d:81:50:2c:d9:38:bb:99:af:9d:39:
         26:63:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org