Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          LAliKsEHMaiOrd0sNBmGoHaz9j1SHE6hSvA8RHUpVCI=
Subject key identifier:   14:E8:24:A0:B3:2D:79:4F:9A:D1:3E:A8:15:62:87:93:F6:8A:E6:ED
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       7BCFE1B6D683685E1DEE06C70080C99E8851DED4
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 04 Apr 2024 08:40:47 +0000
ROA not before:           Thu 04 Apr 2024 08:35:47 +0000
ROA not after:            Thu 03 Apr 2025 08:40:47 +0000
asID:                     266514
IP address blocks:        170.244.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cf:e1:b6:d6:83:68:5e:1d:ee:06:c7:00:80:c9:9e:88:51:de:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Apr  4 08:35:47 2024 GMT
            Not After : Apr  3 08:40:47 2025 GMT
        Subject: CN=14E824A0B32D794F9AD13EA815628793F68AE6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:f7:a1:7b:3a:16:64:85:45:e8:98:2a:16:
                    50:08:ce:52:f8:21:db:c4:32:21:e7:a6:26:06:3e:
                    11:92:f0:c2:47:68:ef:a2:6b:3f:f4:d5:08:7a:e9:
                    75:07:23:c3:fa:44:bc:d7:64:45:b4:3e:0f:d3:f6:
                    03:90:22:c9:a8:cb:8e:78:2a:7a:37:f8:ae:4a:f2:
                    e0:46:3e:50:ea:13:79:67:7a:50:eb:99:a3:92:41:
                    dc:1a:2f:06:ec:74:8c:bd:03:b2:71:88:4e:55:11:
                    d7:c9:44:a8:33:79:d3:2e:99:f6:ff:34:f5:0b:01:
                    e1:b5:27:0e:02:f9:3f:d4:bc:45:d1:d8:f3:9a:7b:
                    1e:b7:ca:45:01:9c:48:d9:d3:90:3e:50:42:7d:2d:
                    41:04:d8:f7:24:fe:b0:42:f8:a4:bf:c7:9f:d9:ca:
                    64:64:39:28:c2:61:b4:13:a7:66:9a:d2:d9:d1:68:
                    dd:9c:06:79:72:bf:da:fd:5a:33:32:c4:2c:c3:c1:
                    8f:f7:46:31:c8:9c:f0:78:9d:da:fb:e3:62:cc:39:
                    31:54:1e:7b:25:ad:f2:7e:ce:1b:ca:05:a4:38:80:
                    f2:15:15:d9:28:62:3e:b6:0d:9e:94:d1:7d:24:4b:
                    85:b6:df:64:d8:08:ba:a6:c5:e7:f7:d8:03:7a:fc:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E8:24:A0:B3:2D:79:4F:9A:D1:3E:A8:15:62:87:93:F6:8A:E6:ED
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:b7:a5:cb:bd:03:11:42:2a:b7:56:06:22:73:4e:a7:6c:
         2f:f9:06:c9:08:fc:ad:76:40:e3:62:ae:8a:99:e2:aa:46:fc:
         88:c2:2f:a0:4b:a1:20:22:c2:7a:d8:79:26:df:33:61:2d:b4:
         6e:2f:4b:39:ec:a4:d2:55:bb:16:da:02:e9:6d:57:29:8f:4c:
         6d:61:a0:95:0c:fe:b9:3b:4b:7e:1b:6d:c5:7f:17:13:8f:bf:
         ef:35:da:c6:9c:cd:ff:f4:4b:4f:a8:d1:42:c6:8e:15:04:c4:
         8a:6e:f2:03:71:bd:b9:0e:a8:12:b0:72:ba:7d:b9:80:af:65:
         2c:cb:71:bc:1b:43:b4:68:ce:e1:91:4b:b8:71:28:58:9a:5a:
         43:07:b1:06:cf:6b:c0:87:5e:cc:d7:10:32:40:83:54:90:68:
         54:14:8a:e6:9d:69:31:2e:df:57:52:25:7a:d7:66:b4:93:33:
         17:4e:8f:8f:6c:c1:a8:22:22:67:44:16:2f:64:78:86:98:e6:
         d1:83:72:8c:1a:ef:22:93:7c:d6:6f:6f:4e:ed:70:11:b7:a3:
         4a:a4:4f:a2:72:c4:22:d7:93:75:af:dc:47:31:40:c1:75:73:
         40:62:c1:db:b9:9b:4c:73:bd:70:42:48:1d:ed:18:79:d4:ed:
         06:4d:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org