Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233322e302f32332d3233203d3e20323636353134.roa
File:                     3137302e3234342e3233322e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          YRVtP9PD6unZSUYvUOL6emZPqeJoEArEvxopR3ASxHo=
Subject key identifier:   AD:7F:E7:68:2E:1F:B7:BA:C8:F0:F5:8A:F1:71:6C:89:FF:E4:E4:C5
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       247E3F9904F6F6330AF1DDDBE2A0949DEF2A8F0C
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233322e302f32332d3233203d3e20323636353134.roa
Signing time:             Thu 04 Apr 2024 08:40:47 +0000
ROA not before:           Thu 04 Apr 2024 08:35:47 +0000
ROA not after:            Thu 03 Apr 2025 08:40:47 +0000
asID:                     266514
IP address blocks:        170.244.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7e:3f:99:04:f6:f6:33:0a:f1:dd:db:e2:a0:94:9d:ef:2a:8f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Apr  4 08:35:47 2024 GMT
            Not After : Apr  3 08:40:47 2025 GMT
        Subject: CN=AD7FE7682E1FB7BAC8F0F58AF1716C89FFE4E4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:2d:b3:71:20:d4:c5:96:90:f3:8a:84:33:
                    0b:08:21:6b:26:28:83:6e:24:05:d5:95:eb:20:bb:
                    f4:84:13:f4:a9:9e:6f:99:97:01:f3:21:b7:e9:73:
                    8f:b9:d6:33:e1:4b:c1:13:4a:89:4b:fb:49:ea:ec:
                    19:22:21:10:79:a0:e5:44:3b:e8:d0:1e:55:bc:f4:
                    cd:db:2d:bd:72:c6:ac:30:aa:81:08:35:6b:a6:9a:
                    74:76:ba:63:5f:5e:bb:95:7a:99:cb:f9:d5:1f:8e:
                    3c:c4:0f:79:aa:b3:0a:fc:96:b6:69:06:b1:3d:48:
                    a0:17:01:d4:bc:20:db:b2:21:23:cd:3c:a6:8f:89:
                    e5:f0:c2:a6:f3:69:b6:03:41:35:62:4e:cf:0a:74:
                    5a:c1:84:cc:e2:a8:7e:79:e3:f8:84:28:dd:c6:e3:
                    dd:e4:fc:c5:78:b8:cb:51:a7:8b:45:b9:59:e5:ce:
                    a3:82:27:16:bd:e8:8e:f6:f0:62:28:d2:97:1b:98:
                    0b:54:f5:08:dc:f3:00:41:52:6d:f2:14:0b:6e:56:
                    f5:08:3a:4d:f8:df:49:1a:f4:21:57:70:df:10:02:
                    fb:7a:e3:52:ed:78:18:67:e7:e4:95:94:7b:ac:9f:
                    0f:8b:3a:9b:8e:ab:17:d7:4e:df:b4:4b:86:bd:e1:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:E7:68:2E:1F:B7:BA:C8:F0:F5:8A:F1:71:6C:89:FF:E4:E4:C5
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233322e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:db:1b:f1:98:4b:28:6d:8d:7e:94:ce:2f:f1:9b:7b:8d:3b:
         1e:67:fc:03:a9:ab:ff:96:72:61:de:78:ba:8e:41:57:f6:76:
         73:26:96:63:79:b8:be:bb:21:e8:f2:5e:f6:9c:e5:82:ee:fd:
         ea:29:a8:94:0a:15:30:9e:bf:fb:a6:2c:e0:47:55:70:4c:2c:
         cb:ee:e5:92:d1:f2:e3:88:de:0f:ef:83:2c:7d:cd:45:23:e3:
         37:4b:4b:8a:5b:8e:d4:b1:4c:b4:ec:00:a3:94:2d:84:63:e2:
         d3:cf:8e:42:3f:a4:8f:96:a6:1e:e4:ab:d4:0e:14:c8:ee:0f:
         40:20:5c:84:4c:8b:2e:c2:8a:8d:11:05:3a:69:04:2d:b8:b9:
         1c:19:6a:8e:07:ff:1b:61:2b:a2:20:35:c2:22:93:fa:a7:c2:
         16:8b:5a:1f:82:5d:ab:64:3c:f9:99:5a:58:3e:a7:b8:8e:08:
         a4:5e:a0:2c:07:f8:2b:06:6a:f0:9e:4d:6b:5b:8c:49:25:1e:
         32:93:75:2e:fa:97:8f:de:17:0e:d8:1a:3c:82:94:58:26:82:
         37:13:f9:59:7a:6d:e4:6c:37:8e:ef:2a:c8:fb:f5:c1:4c:67:
         a0:a7:19:b8:87:49:51:58:4c:c3:ff:5d:fe:56:e6:f3:1a:0c:
         2c:81:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:17 2024 by rpki-client on console-ams.rpki-client.org