Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          iUa6eMR/6dP5WK3m6+60TMw6HK3EmL4FWuIHTUagna8=
Subject key identifier:   5A:16:1E:E3:CB:A3:AD:52:47:A1:06:57:A0:3F:9E:A5:C0:4C:61:43
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       3DF4EFF25A64484044CE19E44B0AD8A68B288FEB
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
Signing time:             Thu 04 Apr 2024 16:11:20 +0000
ROA not before:           Thu 04 Apr 2024 16:06:20 +0000
ROA not after:            Thu 03 Apr 2025 16:11:20 +0000
asID:                     266498
IP address blocks:        170.244.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f4:ef:f2:5a:64:48:40:44:ce:19:e4:4b:0a:d8:a6:8b:28:8f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Apr  4 16:06:20 2024 GMT
            Not After : Apr  3 16:11:20 2025 GMT
        Subject: CN=5A161EE3CBA3AD5247A10657A03F9EA5C04C6143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:72:0f:1b:64:78:83:56:4c:3e:2d:4b:c4:
                    2d:bf:69:4b:c7:c5:9a:00:c9:52:7f:3e:74:96:1f:
                    d4:1d:53:a7:bb:f3:0d:cb:71:64:29:07:85:e6:65:
                    ea:32:c1:0c:33:10:43:b6:f0:82:12:5c:45:cf:fa:
                    64:af:52:18:17:9d:07:08:f7:4a:77:a4:f5:ab:fa:
                    c4:af:c1:0b:b0:a3:11:00:ac:1c:84:16:72:47:80:
                    59:2f:4d:01:a9:93:98:26:c5:f2:5f:1d:89:c0:af:
                    51:2b:8e:29:33:15:d8:b4:97:ce:5e:1c:17:58:0b:
                    eb:e7:1e:c5:b0:87:24:db:03:ea:28:5c:67:14:c4:
                    74:9b:d2:d1:7a:61:79:75:59:5f:63:ed:bc:d5:56:
                    5d:50:33:34:4c:4a:3d:3b:e0:31:57:61:28:9f:0d:
                    27:c3:17:f9:c3:1c:0c:78:e1:1b:89:ae:c4:2b:6e:
                    bb:ae:08:2d:56:6d:55:cf:bc:56:fc:53:e8:f8:8a:
                    09:0c:26:f0:35:7f:75:2b:0e:0e:a9:05:06:4c:9e:
                    b2:0a:ea:bc:4a:13:9d:b5:c8:06:fa:a4:c2:08:96:
                    6c:aa:19:5e:ad:63:ba:d0:da:7b:c3:dc:e5:ca:b1:
                    bb:80:a0:3c:8f:b9:32:ac:18:4a:18:dd:97:46:f3:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:1E:E3:CB:A3:AD:52:47:A1:06:57:A0:3F:9E:A5:C0:4C:61:43
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:b3:dd:62:ae:3a:6c:9d:67:5a:49:2a:f2:04:23:a1:59:
         2c:0d:c8:c4:5f:62:18:a5:08:f5:61:87:91:4e:0e:09:a6:7a:
         c9:10:94:82:0d:88:4f:90:24:03:88:40:d9:85:32:8f:a0:3c:
         25:07:20:a9:f5:11:14:aa:b7:87:96:72:1d:0a:1f:03:36:86:
         67:a1:da:6e:7f:41:ff:83:d3:23:b0:e4:4c:9f:11:17:76:f3:
         3a:56:67:ca:5e:74:ca:e8:c2:16:0c:cb:a1:34:b7:a1:bb:24:
         32:3d:c3:7b:61:b7:50:19:40:32:5d:3b:85:18:8b:75:6b:5c:
         88:fd:42:dd:5c:16:80:d1:29:37:27:17:0c:b4:74:c1:b0:15:
         a2:f4:47:f1:4c:77:c9:42:dd:c7:18:1e:26:5c:23:4a:2e:00:
         ac:e4:bb:4b:0a:1b:22:b1:51:97:1e:b5:e4:0e:c1:eb:6b:d5:
         6e:32:9b:8e:88:fd:6e:99:02:30:a1:0c:8c:96:68:28:32:f2:
         18:fc:ce:99:88:a1:4f:03:5a:e8:8b:ae:d2:90:37:9f:af:c8:
         0a:19:24:2a:f1:92:16:3c:77:bf:cd:e7:7a:69:5d:c4:6f:5f:
         e5:0d:6e:33:2a:12:08:c9:7d:a4:e9:b4:ee:3f:97:39:27:c2:
         51:c8:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:41 2024 by rpki-client on console-fra.rpki-client.org