Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa
File:                     3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          QwT1Vr+2NtXlKzmmR4uG883Ew+GcbJZSr5v8lql0Lp8=
Subject key identifier:   B6:FC:F3:3D:33:B7:C4:77:40:0A:41:F9:F9:57:1F:2D:11:4B:16:A5
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       723938C60ADBB4B3EE41C279736EDC7E6C73C5E8
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa
Signing time:             Wed 03 Apr 2024 18:30:04 +0000
ROA not before:           Wed 03 Apr 2024 18:25:04 +0000
ROA not after:            Wed 02 Apr 2025 18:30:04 +0000
asID:                     262595
IP address blocks:        167.250.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:38:c6:0a:db:b4:b3:ee:41:c2:79:73:6e:dc:7e:6c:73:c5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Apr  3 18:25:04 2024 GMT
            Not After : Apr  2 18:30:04 2025 GMT
        Subject: CN=B6FCF33D33B7C477400A41F9F9571F2D114B16A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:23:ad:c8:eb:30:23:75:02:7b:07:a4:cf:
                    c5:7b:53:d5:a9:db:21:f2:b5:f0:d7:18:a7:d5:04:
                    59:fe:b9:c0:5b:32:ef:08:be:96:9b:f1:ed:8d:d9:
                    00:79:04:3f:1f:c8:0e:cc:5b:0f:fd:93:23:3f:91:
                    63:d8:3f:08:1c:80:0b:9c:20:72:92:bf:b4:3e:9c:
                    2f:f1:00:5d:1d:8d:27:0f:1e:1a:ab:48:bd:36:35:
                    09:e9:62:92:8d:a0:e9:f2:83:f3:08:1f:c1:eb:5e:
                    0f:7c:4f:29:19:2c:28:c2:b6:37:3a:62:9c:6b:47:
                    a9:58:9c:d9:3f:dd:42:b5:b7:f7:86:90:97:2d:5c:
                    87:04:af:e3:11:2e:ed:bd:9b:84:57:e0:b7:a9:b6:
                    cd:bb:39:0b:2b:08:4b:b2:c6:22:c1:55:4e:b2:a6:
                    d5:c5:75:22:61:d3:c6:da:69:e3:91:a2:b5:bf:4e:
                    14:83:d5:3b:c9:4b:5f:7a:14:d5:72:5b:72:51:c8:
                    c6:cf:74:9e:b8:20:61:09:d0:66:2d:61:9a:fa:b7:
                    ae:28:76:03:4a:5b:7a:f9:33:4d:f4:0b:97:42:7e:
                    c0:5c:ec:58:4d:ff:6c:3c:82:42:0a:74:00:ab:0b:
                    71:bb:df:62:cd:a8:d8:a1:ce:84:da:1c:a1:5b:96:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FC:F3:3D:33:B7:C4:77:40:0A:41:F9:F9:57:1F:2D:11:4B:16:A5
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:1f:f2:c0:fa:aa:88:4c:1d:2b:0f:6f:93:d8:6b:53:d1:
         fe:42:de:f8:9c:b4:f3:74:9b:a7:c7:17:d2:ea:e2:00:f4:e3:
         38:0a:22:44:4f:26:8e:4f:d1:d6:43:e4:ca:f8:ab:46:47:1d:
         c2:00:77:62:e6:d5:c4:7b:d3:6d:dd:d5:13:67:d5:03:c5:d5:
         cb:77:28:86:9d:24:e0:5d:b5:af:37:79:b5:5e:a6:8c:9e:02:
         21:3f:7f:6d:3c:5b:aa:9a:33:89:ea:2f:3b:05:bd:ac:f7:78:
         14:9f:69:7e:8a:8c:42:eb:2b:eb:e0:3e:5a:1d:07:58:63:4d:
         00:79:eb:1a:96:1d:4b:c2:71:5d:8d:d6:68:fd:55:4c:c6:1a:
         2b:57:21:d6:fa:ec:96:d7:ab:4c:91:5e:30:ac:a6:a5:20:01:
         2a:d2:43:a0:0e:4d:ce:83:32:7e:eb:cc:f2:d3:83:ad:64:b2:
         89:de:f6:62:02:28:ab:2d:a8:57:93:07:fe:32:aa:64:4b:c3:
         3b:7d:e5:3d:35:dc:42:61:0a:5a:47:58:0b:d8:b5:59:7a:4a:
         14:45:7f:92:2b:5a:18:c6:fe:93:3a:42:87:7d:ab:bf:57:19:
         88:be:00:ea:7c:31:0d:3f:64:64:36:e4:75:53:e5:e8:8d:80:
         a5:a2:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:45 2024 by rpki-client on console-ams.rpki-client.org