Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa
File:                     3137302e302e3130302e302f32322d3232203d3e20323634393637.roa (raw, json)
Hash identifier:          s537VxMjRaK1wWsqH2Zx0W02d4TL9W7vSU8Ygm076dM=
Subject key identifier:   ED:0B:94:C0:08:75:2C:A9:0F:52:B1:88:58:21:C1:55:36:5D:19:71
Certificate issuer:       /CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
Certificate serial:       7F71866B9DCC08B9CBCCAFEF67542996E3A54B23
Authority key identifier: 26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa
Signing time:             Wed 19 Jun 2024 20:12:45 +0000
ROA not before:           Wed 19 Jun 2024 20:07:45 +0000
ROA not after:            Wed 18 Jun 2025 20:12:45 +0000
asID:                     264967
IP address blocks:        170.0.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:71:86:6b:9d:cc:08:b9:cb:cc:af:ef:67:54:29:96:e3:a5:4b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
        Validity
            Not Before: Jun 19 20:07:45 2024 GMT
            Not After : Jun 18 20:12:45 2025 GMT
        Subject: CN=ED0B94C008752CA90F52B1885821C155365D1971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:5f:9d:75:f6:b4:ae:2f:f9:8c:ad:66:e3:
                    79:a1:23:4d:c7:08:f7:a3:1f:f1:ad:f4:62:5a:62:
                    67:1a:c7:ec:15:33:52:d6:3e:d2:52:ae:aa:cc:ae:
                    c7:cd:ae:5d:95:0d:82:5f:31:cf:f8:19:59:0e:6a:
                    0d:a4:dc:bf:f5:7c:1d:ed:61:dc:25:0a:4a:ad:a9:
                    07:6d:21:2b:13:0a:63:73:50:40:fc:e6:be:b3:6b:
                    4b:4b:cd:7b:f8:47:e8:0f:d7:d8:81:d1:e5:dc:6b:
                    78:d8:48:d1:2b:57:62:41:a9:ab:3e:0d:d2:ce:d3:
                    2e:cc:82:c0:47:8a:a3:e8:95:61:76:b8:05:81:85:
                    1d:47:c3:91:86:ac:f9:f8:54:e3:d1:0e:d9:ad:22:
                    42:66:ac:cf:fb:32:19:34:4c:27:b1:2e:50:42:a0:
                    fd:b8:b3:69:24:d9:d7:dd:c6:1b:1d:86:e1:1d:b0:
                    e1:61:3b:fb:de:dc:c8:1b:4d:57:a4:06:3d:a1:f4:
                    31:da:55:2b:56:48:f7:51:3f:ed:e0:9b:f1:e2:40:
                    1f:a0:f2:78:f1:3d:5b:e1:9d:1d:c3:e6:65:cf:c4:
                    67:04:16:20:63:ff:1c:5b:93:3b:ef:2f:fc:39:b7:
                    3b:35:1f:b5:64:af:d9:a4:b4:84:cc:17:1d:71:0d:
                    ac:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:94:C0:08:75:2C:A9:0F:52:B1:88:58:21:C1:55:36:5D:19:71
            X509v3 Authority Key Identifier:
                keyid:26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:a9:8a:24:f0:78:11:04:ff:32:11:d9:68:1f:8e:f0:c4:
         ea:0b:5b:81:6f:ce:9e:62:7c:2a:f4:bf:46:87:7f:ea:33:95:
         a6:ed:bb:cf:4a:d1:27:d5:6c:87:de:4b:b2:fe:c8:78:0c:85:
         ad:92:ca:c9:0b:3f:32:67:e8:f5:08:e4:a2:1c:ab:3e:e2:00:
         c1:2f:28:e9:9c:2d:be:fd:be:aa:a7:4e:a4:3b:7c:72:47:1d:
         fa:86:5b:3b:6f:b1:b8:ba:31:04:6a:13:73:44:d3:e7:0c:fb:
         d8:f7:37:37:f9:55:cb:20:e6:87:f7:18:f5:7d:22:56:34:cc:
         45:66:50:e5:fa:8b:cd:24:da:e9:89:1f:c8:d5:0f:c0:cf:76:
         80:b2:88:e4:ee:00:98:2c:bc:bf:27:1b:43:f8:c7:8f:8f:4c:
         42:40:5c:0a:d3:65:bc:83:35:da:90:e2:1d:9b:ff:9b:67:ff:
         51:6f:a2:22:12:98:7f:de:b3:eb:44:48:78:e1:d6:a0:d4:32:
         1f:fc:02:f4:96:1d:f7:0b:21:eb:f9:46:9f:24:7b:5f:11:b9:
         a2:97:87:c8:d4:bf:35:26:c0:bc:38:37:10:8d:6b:a5:75:c2:
         72:8d:ef:7e:2a:86:bf:c1:91:c9:d2:a3:9b:86:ba:3d:38:9d:
         e4:80:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:39 2024 by rpki-client on console-fra.rpki-client.org