Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234362e302f32342d3234203d3e20323633333338.roa
File:                     3137302e37382e3234362e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          +4fVC6653YJ13VRU/zssb8bWNPSuxjJCJUjR44HldtQ=
Subject key identifier:   64:ED:39:9E:48:03:D1:BC:32:29:27:05:E1:EB:8F:DF:82:6F:85:7F
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       6DFC8374DE5984E30B9E0428310C49BBC1E0439C
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234362e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:29:46 +0000
ROA not before:           Fri 18 Oct 2024 11:24:46 +0000
ROA not after:            Fri 17 Oct 2025 11:29:46 +0000
asID:                     263338
IP address blocks:        170.78.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fc:83:74:de:59:84:e3:0b:9e:04:28:31:0c:49:bb:c1:e0:43:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:24:46 2024 GMT
            Not After : Oct 17 11:29:46 2025 GMT
        Subject: CN=64ED399E4803D1BC32292705E1EB8FDF826F857F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:4f:24:8b:38:01:7a:e7:ba:e7:e3:fc:c1:
                    93:97:dc:30:12:71:a8:ba:20:84:e2:1b:3c:00:03:
                    11:3f:0b:ff:d0:26:28:93:9f:bb:53:5c:45:45:d0:
                    41:0a:c5:b6:87:bb:4a:33:84:38:e9:fa:c6:8b:f6:
                    1d:e4:c6:4f:08:3a:c0:71:19:42:37:c5:e1:66:a2:
                    3d:3d:4d:f3:75:20:6b:aa:ad:20:80:3d:6b:4d:e5:
                    3e:53:ce:56:72:b9:b3:f5:94:30:79:0b:d7:f4:03:
                    75:27:bd:c6:07:e9:ab:a7:d0:6e:b2:49:3e:a9:f8:
                    a2:fe:53:e8:f5:93:af:cb:b7:2e:73:f6:58:b0:83:
                    bc:05:52:51:2a:1e:54:c3:f3:31:c5:03:19:9c:7f:
                    f8:aa:59:d5:12:54:a1:e3:18:7e:d2:4e:fc:86:66:
                    54:3e:0a:2f:5c:57:47:7f:b7:e0:af:2f:c3:a0:95:
                    a3:7a:38:2f:73:37:c9:c6:4b:b7:9a:c4:a4:2a:a0:
                    00:ff:3a:ae:c6:d7:ea:6a:23:1b:ff:d0:2f:8a:c7:
                    23:55:db:57:ac:a9:91:a0:ed:1f:4f:9a:7a:8f:38:
                    31:9f:2f:46:cf:7e:27:d7:e6:e1:b6:da:b8:e7:5a:
                    34:de:7e:2c:4e:1c:f9:0c:f3:b4:4c:30:20:3d:5b:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:ED:39:9E:48:03:D1:BC:32:29:27:05:E1:EB:8F:DF:82:6F:85:7F
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234362e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:70:75:fd:5e:99:ae:d8:ad:ab:c8:09:e8:94:4c:5c:73:
         85:a9:de:60:fe:27:f5:ba:0d:53:03:42:22:bd:68:2b:b3:e5:
         a5:34:f9:5c:2e:61:9d:bc:35:ae:1d:a0:69:de:85:61:62:06:
         01:09:d4:c5:b1:23:9e:0f:d5:e2:e4:12:6b:66:a2:fe:4a:52:
         f5:00:25:3d:6a:02:12:18:3d:b9:30:f4:5f:7a:4b:0e:20:08:
         a5:67:3d:02:85:60:a9:e5:78:ed:1c:4a:af:7e:9e:64:37:a7:
         6a:4a:43:68:84:1a:80:4f:15:3f:b2:af:82:9e:81:44:da:f8:
         9c:53:f0:5e:3d:86:d1:93:23:e9:5f:13:76:28:41:7f:ac:cb:
         78:c5:c3:fa:48:f7:28:18:bb:e1:5c:96:62:9e:f4:f7:a9:65:
         c0:d5:4b:b7:08:a4:f5:ee:d9:b5:aa:4d:d5:63:2a:f1:db:d3:
         0f:28:5f:18:2b:6d:04:fc:47:38:ed:a8:68:ae:ae:ba:1a:29:
         26:18:a9:da:89:7d:d9:2b:64:01:64:61:97:31:fb:3c:d3:63:
         c5:83:be:7d:59:55:83:16:ca:af:d2:4d:25:b6:ac:86:7f:35:
         65:f8:0b:7c:43:14:a9:47:e1:21:d9:6a:39:2c:41:df:a2:ac:
         21:74:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org