Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          ePcOWHBUOMNnLBP03Nk94OPTzKaXv2wJsl3YEQoXUl8=
Subject key identifier:   C1:54:D1:C4:85:2E:55:7C:A9:68:DA:0C:2B:D0:8C:92:07:3A:0F:50
Certificate issuer:       /CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
Certificate serial:       249D5FBF56833165BBA4AEC5C3A2C3163E811324
Authority key identifier: F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa
Signing time:             Wed 19 Jun 2024 19:24:46 +0000
ROA not before:           Wed 19 Jun 2024 19:19:46 +0000
ROA not after:            Wed 18 Jun 2025 19:24:46 +0000
asID:                     266342
IP address blocks:        170.239.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9d:5f:bf:56:83:31:65:bb:a4:ae:c5:c3:a2:c3:16:3e:81:13:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Validity
            Not Before: Jun 19 19:19:46 2024 GMT
            Not After : Jun 18 19:24:46 2025 GMT
        Subject: CN=C154D1C4852E557CA968DA0C2BD08C92073A0F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:0b:a9:29:ad:8b:a8:84:de:94:6f:f7:39:
                    d2:88:da:3a:4e:df:68:3c:43:3e:b4:95:53:81:53:
                    59:fc:51:0c:73:e3:d1:eb:66:e9:41:d1:0f:6a:9a:
                    2a:be:32:20:d2:8f:ed:6f:19:36:a8:02:ba:9c:e4:
                    57:77:f5:13:9d:a9:fb:c2:22:c0:de:c4:d0:21:08:
                    79:e9:f4:e1:f3:92:39:6b:f3:f0:4e:48:ce:60:f4:
                    76:45:ab:c3:fc:3a:af:57:0c:13:8f:93:e5:c4:71:
                    66:f9:78:d4:c5:f4:1f:04:35:de:45:8f:80:e6:aa:
                    ed:9f:f0:67:28:f6:ae:0a:8f:b3:04:69:50:da:e3:
                    3e:96:22:c2:8e:8a:7c:3f:39:11:a1:35:07:bc:11:
                    e2:bb:09:fb:09:48:9a:90:b9:70:06:ac:fe:23:d3:
                    f0:35:e8:c7:51:78:ec:e9:e2:eb:24:33:95:e0:ca:
                    c9:ae:4b:04:24:88:3c:40:fb:06:09:fe:01:f3:97:
                    d3:34:83:2c:d6:51:e2:9f:dc:fc:34:f6:22:92:63:
                    6a:d9:e5:b1:cf:95:73:33:3a:0d:3f:12:72:0d:6f:
                    d7:b0:fd:bd:ab:8b:ca:c1:e2:cc:f8:33:ae:5d:b8:
                    8d:ab:4a:b2:b2:48:41:52:2d:d6:0a:19:72:95:15:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:D1:C4:85:2E:55:7C:A9:68:DA:0C:2B:D0:8C:92:07:3A:0F:50
            X509v3 Authority Key Identifier:
                keyid:F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:9c:04:c1:e2:9e:4d:1e:eb:f8:cf:59:a7:aa:46:14:a6:
         55:a8:4d:47:92:27:f2:56:9a:e0:b2:06:8b:1a:50:db:8b:3d:
         a1:cd:20:13:00:1d:d6:d8:e0:73:11:0a:1d:b0:df:aa:a3:43:
         bd:09:e2:e2:d2:0d:30:2e:d6:34:98:9d:a7:20:5e:33:7f:4e:
         cb:bf:ae:06:29:65:5e:f9:74:5a:6b:0d:59:d1:de:0e:5e:f3:
         62:4f:fd:62:67:94:d5:29:83:da:7a:8e:c2:8b:7e:bd:42:b0:
         92:fd:c7:3e:f8:7d:c6:8f:51:15:ec:74:09:2d:92:39:29:ef:
         9f:72:cb:bb:e5:70:34:86:4d:7e:97:f3:f8:65:ac:b2:00:d8:
         7e:98:15:17:ad:56:c4:49:69:49:36:7c:cb:46:1f:51:ee:82:
         bc:76:0f:c2:5c:3c:52:0d:ea:24:e4:d2:d5:11:6a:66:ab:09:
         b0:c5:da:e3:ad:71:ec:11:90:ec:50:ec:4f:a1:fe:d3:a1:4f:
         b0:6a:e5:0d:3b:e9:9c:3f:06:64:0d:4d:1e:d7:b1:9d:8f:08:
         c0:c8:28:d4:0b:87:d8:ea:0a:37:86:2c:9c:4e:13:db:97:21:
         bf:46:56:78:19:d7:37:15:0c:30:74:b9:ec:85:8b:20:54:49:
         a1:bd:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:54 2025 by rpki-client