Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa
File:                     3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          79V8mR9ENV+FxIU1WD8aWRekYTXHNn/LlObQcXxW05o=
Subject key identifier:   07:47:73:D8:45:45:04:66:EB:2A:71:39:D0:DA:03:80:4D:86:F9:5E
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       72E2A0847515DE7BDC3E82D286B98358A6FA8F80
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262755
IP address blocks:        170.81.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e2:a0:84:75:15:de:7b:dc:3e:82:d2:86:b9:83:58:a6:fa:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject: CN=074773D845450466EB2A7139D0DA03804D86F95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:d5:08:1e:0b:9d:10:2b:4c:ff:7f:65:34:
                    ca:ef:df:a2:b1:3c:0c:12:98:cd:c7:7e:3b:15:00:
                    55:89:54:80:37:78:a6:00:81:51:94:3b:18:8f:a2:
                    bf:62:bc:46:69:00:4b:e6:bc:24:27:57:9b:a8:57:
                    23:05:12:f1:20:5d:4d:ea:d0:c3:40:71:2f:f3:65:
                    e2:8e:c6:cf:1f:8f:e7:8e:e4:3d:d1:30:35:7a:3e:
                    73:fd:e9:8c:d3:e3:c3:ce:03:b8:a6:cd:9f:bf:ef:
                    c0:28:bd:47:9e:37:1e:1e:d2:6c:78:38:95:63:4f:
                    8b:d8:b5:77:84:fd:6c:7a:1d:43:19:d9:2b:8f:16:
                    be:c8:69:4d:45:d0:d7:6d:3d:75:a6:1b:2f:5f:d4:
                    f3:bc:aa:a1:f9:b1:33:48:0e:36:6e:55:03:d2:c0:
                    d6:14:52:04:c7:09:ad:6a:70:84:24:74:b4:29:84:
                    71:91:e8:82:10:d9:ce:a8:b7:05:00:66:e5:04:c1:
                    6a:95:43:06:18:bd:c5:89:da:3f:74:de:24:f3:cb:
                    46:14:26:c7:23:cf:1b:16:9e:55:3a:6f:ea:28:d1:
                    6f:6f:b4:e2:3b:a9:33:a7:19:72:8d:04:99:72:96:
                    23:d4:f7:33:70:d9:af:fe:aa:97:ac:0f:f7:30:42:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:73:D8:45:45:04:66:EB:2A:71:39:D0:DA:03:80:4D:86:F9:5E
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:47:9c:3b:33:66:a7:45:c0:b0:5f:5c:04:99:52:10:04:24:
         d3:42:31:18:5a:ab:ae:6c:28:19:d9:f2:b9:8b:69:5a:ef:29:
         5d:e9:66:a0:bf:4f:50:fb:04:51:6d:41:b0:27:02:dc:68:b0:
         3d:66:d4:14:b9:19:ea:bc:b2:6a:0d:ba:35:87:55:19:c6:96:
         c6:f3:93:09:57:ae:fa:3a:43:fa:7d:a6:a4:b7:cc:c0:e1:35:
         cc:3b:98:3c:38:d3:f4:fe:b8:d5:b7:21:dd:94:d1:92:b4:c7:
         5d:15:14:f8:11:70:70:18:78:0c:7a:c0:c9:f4:1e:37:4a:c8:
         e3:18:99:f7:6a:ba:bb:f0:76:ab:9a:81:97:c4:ca:7c:67:f0:
         02:c4:94:15:98:20:90:b0:bd:e5:63:bf:6a:01:e7:42:29:8c:
         ec:c8:8f:67:55:90:c2:b1:30:b6:bd:67:ae:c8:ba:6a:58:e9:
         b8:af:a3:2f:28:77:0c:50:d9:8e:6e:79:fa:45:6d:81:26:9d:
         35:22:9a:da:ec:e8:96:47:17:01:dc:80:a5:ad:81:b4:7f:05:
         06:d6:0f:55:3b:8f:a3:bd:de:e4:e5:51:a2:35:92:67:43:86:
         b4:8a:da:fa:45:20:50:43:51:a8:d4:23:50:8c:bb:1d:a6:7d:
         bc:3c:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:02 2024 by rpki-client on console-fra.rpki-client.org