Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          NGEIi9gcLhN1A613BiWl2ibfFHPlTb2BnwW1AaDCEyc=
Subject key identifier:   6A:78:12:94:47:A0:7B:44:0B:D4:8C:2A:A0:2D:35:77:60:E5:06:97
Certificate issuer:       /CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
Certificate serial:       7329AEE7CB763C82482A93BE482F14B3580DC2DF
Authority key identifier: 6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa
Signing time:             Mon 25 Nov 2024 17:35:16 +0000
ROA not before:           Mon 25 Nov 2024 17:30:16 +0000
ROA not after:            Mon 24 Nov 2025 17:35:16 +0000
asID:                     265300
IP address blocks:        168.121.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:ae:e7:cb:76:3c:82:48:2a:93:be:48:2f:14:b3:58:0d:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
        Validity
            Not Before: Nov 25 17:30:16 2024 GMT
            Not After : Nov 24 17:35:16 2025 GMT
        Subject: CN=6A78129447A07B440BD48C2AA02D357760E50697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:d7:17:42:cc:41:c9:01:ad:7c:ac:61:a6:
                    7e:81:c7:c3:c6:65:e4:39:a8:8d:c7:81:27:8e:10:
                    fe:bb:23:ab:04:76:2a:84:80:87:04:2e:c9:f9:fb:
                    36:bb:4b:f2:90:a8:10:2a:3c:0d:62:9c:67:59:8a:
                    ef:42:1d:75:05:2b:be:d4:01:cf:6d:86:ae:d2:85:
                    79:ce:12:fb:da:a9:0b:e9:ec:9c:30:ec:cc:bf:db:
                    0a:d9:9d:8d:95:84:ce:ee:6f:c8:f6:d5:ba:cc:81:
                    97:9d:89:d8:41:e8:7f:87:35:a5:83:c9:50:86:97:
                    18:88:98:56:63:6d:85:9a:8e:b7:20:06:bb:e8:9e:
                    d4:61:0e:ea:a4:d5:88:5b:57:c5:45:3f:16:cf:23:
                    b5:d7:80:17:27:e9:67:e0:02:53:a1:ea:0a:f9:c7:
                    d0:f9:72:ec:dc:af:30:de:b1:02:68:4c:09:aa:81:
                    3b:56:dd:d8:ee:f1:99:56:4f:c6:3b:8a:c5:67:57:
                    15:77:c8:29:4d:6a:79:69:ad:a8:e4:60:24:e1:a8:
                    6e:cd:d5:09:29:6b:1c:d7:f5:27:23:06:e1:3f:c8:
                    f0:15:00:1d:d8:1c:46:eb:4d:4e:e8:dd:9a:d7:15:
                    5e:d4:eb:62:23:67:59:0a:fa:77:42:e9:e0:9e:de:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:12:94:47:A0:7B:44:0B:D4:8C:2A:A0:2D:35:77:60:E5:06:97
            X509v3 Authority Key Identifier:
                keyid:6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:df:de:e5:5c:13:cc:76:c1:38:6d:52:28:0a:e4:73:b8:
         ca:a6:ae:a3:78:76:59:31:01:68:50:79:d7:5a:a7:b3:3e:c5:
         8b:1b:95:e2:46:7a:51:c3:41:12:fd:b0:69:87:a9:b1:4f:ef:
         d4:fe:38:f9:c3:42:ef:e6:8b:1f:66:67:84:94:3c:fd:2f:30:
         bc:5b:68:aa:ac:99:2b:0e:80:76:a9:d2:bb:07:ef:36:09:30:
         c7:74:51:14:55:80:f8:38:f7:37:cb:50:7b:52:99:bf:47:30:
         e7:e3:46:b6:ac:06:e7:b6:aa:47:0c:2e:aa:d8:6b:9d:16:dd:
         bc:31:35:48:74:65:fe:66:34:7e:ba:2b:c3:e2:42:38:36:03:
         04:ea:38:3e:0a:dc:90:2d:26:cd:9b:76:fe:36:96:e7:ea:7a:
         29:b2:e7:d3:f2:e4:0f:c4:75:d0:53:8a:78:0d:43:0a:c4:22:
         2c:0f:c5:49:e7:99:0a:ef:9f:2a:0c:bd:91:3f:65:93:89:68:
         75:f8:f1:b8:bb:1d:7a:7b:fc:84:b6:0b:35:e6:67:73:95:d6:
         d8:63:38:50:e0:76:2e:c8:1f:a6:cf:b7:62:98:9b:ad:fb:76:
         f9:7b:65:52:68:f2:c6:34:17:7c:15:c3:76:40:58:b1:36:4c:
         cd:43:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:21 2024 by rpki-client on console-ams.rpki-client.org