Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa
File:                     3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa (raw, json)
Hash identifier:          7pGmZ2OgiGkVudWkWBhYVod0r6+30N4ZAmYFvp4NUYs=
Subject key identifier:   14:D8:81:5C:9C:C1:ED:79:8B:BB:DC:CC:4B:CD:F7:B7:FB:B9:85:BC
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       188E826D35CCB1CC1B83641A9DF8D2476171D962
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:19 +0000
ROA not before:           Thu 16 May 2024 11:33:19 +0000
ROA not after:            Thu 15 May 2025 11:38:19 +0000
asID:                     263338
IP address blocks:        170.78.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8e:82:6d:35:cc:b1:cc:1b:83:64:1a:9d:f8:d2:47:61:71:d9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:19 2024 GMT
            Not After : May 15 11:38:19 2025 GMT
        Subject: CN=14D8815C9CC1ED798BBBDCCC4BCDF7B7FBB985BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:e6:c9:ca:b6:93:79:a5:6c:24:a5:34:17:
                    d5:a6:90:c4:70:09:9b:5d:07:dd:50:15:8b:e9:4c:
                    16:30:c5:de:4b:44:53:2f:cc:8d:b1:20:7e:07:05:
                    dc:98:54:54:7c:00:13:a8:16:7a:81:4c:a0:a4:9d:
                    9c:e7:ce:b6:a5:f0:32:cf:d0:35:74:72:3b:28:2e:
                    f6:40:61:dc:19:90:df:a8:4d:78:bc:a0:52:d5:12:
                    2a:9d:db:fb:62:57:11:e5:65:c0:20:29:d2:b3:7b:
                    56:69:e5:6f:a6:7b:c8:d4:dc:90:97:12:d9:47:1e:
                    19:07:b4:41:5d:63:01:5a:4f:bf:ea:7f:8d:0c:70:
                    60:04:17:36:78:cf:0e:87:38:2f:6f:d4:65:d8:d5:
                    ca:e0:cc:c0:2b:37:d1:e0:20:3c:73:a4:3b:82:28:
                    a1:d7:d5:35:bf:bb:5b:d4:ca:ae:90:cc:a3:33:1f:
                    e7:43:54:ff:ef:e3:13:61:74:9f:ad:57:87:d1:90:
                    68:66:05:ea:55:36:a6:94:ef:20:85:f9:01:19:44:
                    3d:2b:ea:5b:b1:68:e4:5d:1b:fe:1c:9a:2b:6b:92:
                    84:e5:26:1a:c0:7f:3f:a6:4f:6c:5e:62:25:b1:4a:
                    ce:95:04:a5:ff:ad:46:b9:df:65:1b:c7:ef:17:28:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D8:81:5C:9C:C1:ED:79:8B:BB:DC:CC:4B:CD:F7:B7:FB:B9:85:BC
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234362e302f32332d3233203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:83:d7:b0:5d:14:85:f9:dd:84:83:74:69:5f:30:ca:0a:ac:
         f4:fc:2d:61:c5:4e:28:b4:7e:d3:e0:5b:f0:62:29:20:9f:cb:
         f4:df:2b:19:a8:fe:6f:cb:ed:c8:4a:76:97:7c:e6:da:22:7e:
         3d:cd:61:d8:7d:47:b7:16:49:fb:51:c5:91:be:39:dd:34:aa:
         5c:c9:e0:28:b6:e4:ee:1a:0e:9e:48:af:5a:19:47:3a:b2:b7:
         8e:36:1d:4a:8d:d9:3c:fe:6d:b9:80:c3:38:61:98:b4:9e:23:
         65:9d:8d:36:24:55:79:c7:8a:38:cc:02:59:50:0c:8d:b3:2c:
         06:1b:6d:13:f1:c0:59:57:7d:bd:a6:8c:66:db:29:55:ba:b9:
         a3:40:ce:37:91:86:7b:29:99:27:dc:94:34:c6:55:7e:2b:94:
         4f:47:e1:98:83:e5:01:c1:de:b8:14:ab:cf:8f:df:f3:56:4a:
         38:b0:11:8b:10:2d:d7:77:02:46:3a:9d:65:58:b8:85:80:f8:
         82:ef:63:00:0a:f5:60:7d:b1:cb:f9:85:1b:7b:3b:da:64:0f:
         58:e6:2e:a4:fa:dd:5f:99:b7:63:fa:b5:8a:af:3e:d5:0b:00:
         e2:be:de:41:f9:5f:b4:6f:8e:c3:a8:03:9a:db:fb:34:5c:82:
         bd:43:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org