Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          2E0EVcAwh/ED+hld3jsCEK/uVaKk5p0ujvSElOLFpJA=
Subject key identifier:   B7:74:B1:FF:1C:31:E4:7D:1F:75:D9:A8:30:32:ED:73:11:B9:8F:65
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       723866F9CAA395992E97A5C0A514F188CBCF81D2
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa
Signing time:             Thu 04 Apr 2024 08:40:47 +0000
ROA not before:           Thu 04 Apr 2024 08:35:47 +0000
ROA not after:            Thu 03 Apr 2025 08:40:47 +0000
asID:                     266514
IP address blocks:        170.244.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:38:66:f9:ca:a3:95:99:2e:97:a5:c0:a5:14:f1:88:cb:cf:81:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Apr  4 08:35:47 2024 GMT
            Not After : Apr  3 08:40:47 2025 GMT
        Subject: CN=B774B1FF1C31E47D1F75D9A83032ED7311B98F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:95:b9:9b:cb:bf:6c:f3:85:24:71:a8:12:c6:
                    ee:c6:23:1b:66:03:f6:0f:4d:36:3a:90:2d:0c:74:
                    0e:58:4f:67:ba:e6:ee:69:f6:10:e4:dc:1b:e5:4f:
                    32:ca:8c:b4:22:b5:2b:69:3b:98:6a:53:c0:86:68:
                    d3:15:0e:33:7e:bf:d8:47:f9:9a:1b:1d:86:3b:bc:
                    02:df:7b:79:33:a5:7c:3b:af:d1:69:c3:fe:f1:f8:
                    f8:48:01:7c:d3:14:15:d3:05:34:bb:ab:db:d4:73:
                    e8:e6:9e:89:07:d1:59:ef:ec:e1:d5:28:d7:af:00:
                    2a:3e:dd:4c:b2:6d:3e:55:6b:f0:0f:14:0c:f2:9b:
                    16:90:c3:1a:45:99:15:dd:9d:59:c5:24:22:b4:9f:
                    4a:1a:56:09:11:c5:61:9b:8d:63:43:e0:8a:0e:50:
                    30:26:34:78:52:23:17:de:79:5c:bd:aa:b8:c6:c7:
                    20:3d:ba:bc:08:93:32:87:88:64:46:75:1b:4d:34:
                    62:c4:38:1a:b8:ac:6d:86:6e:99:36:a8:d0:d9:a9:
                    18:fd:18:36:a7:b8:f5:f7:46:72:74:24:d1:6f:38:
                    91:2f:7a:b4:be:7b:52:ae:dc:c5:75:fd:c0:38:c1:
                    57:70:8e:db:bf:0b:0f:a5:d5:08:03:12:26:07:e3:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:B1:FF:1C:31:E4:7D:1F:75:D9:A8:30:32:ED:73:11:B9:8F:65
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:29:1c:6a:a7:4d:29:40:7f:59:89:1b:2c:96:9e:16:33:ba:
         d9:3e:29:35:08:df:0d:84:d7:ff:22:5c:46:1d:b8:7f:eb:0d:
         77:49:58:bc:74:25:6b:7c:3e:88:7c:6c:01:d6:c1:4a:ce:57:
         18:81:f7:be:b5:10:e2:e7:ca:fc:43:93:69:33:5c:94:8e:f4:
         8c:7a:e2:dc:fb:1c:46:40:2f:5a:71:a6:23:bb:e1:af:b2:ac:
         ce:bf:4b:bf:82:81:96:9b:b6:20:81:6d:7b:f8:67:99:be:29:
         a5:fb:e0:0d:f8:8c:61:57:03:f3:5e:64:e9:26:81:cf:70:30:
         0b:de:6f:d1:e8:16:20:cb:82:4c:dc:92:09:f6:b8:e5:97:00:
         04:42:a4:bd:f2:0e:ba:48:36:d0:ce:69:28:ca:79:c0:ce:e7:
         31:d7:60:7b:c0:52:b8:77:41:dc:1d:73:9c:3f:2a:eb:c8:77:
         4e:4f:2e:c7:b5:12:08:8d:f3:d6:46:a8:f3:e8:80:9c:d5:1b:
         3f:02:d9:7d:80:de:ec:3b:c0:0b:9b:44:4f:23:aa:31:08:8f:
         99:94:48:bb:d6:54:44:e5:7c:83:2d:41:51:24:98:56:8d:65:
         b2:53:40:59:86:8f:c0:46:93:0c:52:76:e2:50:9b:77:10:19:
         d8:2c:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:45 2024 by rpki-client on console-fra.rpki-client.org