Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
File:                     3137302e302e3234382e302f32322d3232203d3e20323632333031.roa (raw, json)
Hash identifier:          6nl02pAvKB+yWqREufq+5YGL3VqtSTf+jLyyYSCATzc=
Subject key identifier:   76:46:4F:BF:56:FB:19:51:8D:E8:0F:D2:6D:59:45:57:85:AB:A5:21
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       340CD396B0BBBE35CE28920AE1740C7B9A434599
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
Signing time:             Thu 04 Apr 2024 07:05:55 +0000
ROA not before:           Thu 04 Apr 2024 07:00:55 +0000
ROA not after:            Thu 03 Apr 2025 07:05:55 +0000
asID:                     262301
IP address blocks:        170.0.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0c:d3:96:b0:bb:be:35:ce:28:92:0a:e1:74:0c:7b:9a:43:45:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Apr  4 07:00:55 2024 GMT
            Not After : Apr  3 07:05:55 2025 GMT
        Subject: CN=76464FBF56FB19518DE80FD26D59455785ABA521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:cc:56:94:cd:61:1f:5b:07:e6:78:49:be:
                    94:12:2e:c0:1f:4b:c4:a4:04:29:f2:29:58:5a:35:
                    a6:6e:0c:57:d0:7f:98:ad:ba:bf:c3:b4:bf:98:73:
                    fd:35:63:0e:1a:83:25:74:3c:02:95:27:98:90:6d:
                    d4:ff:ed:42:2c:3f:45:5e:58:98:fb:0c:bf:c8:79:
                    61:0e:38:eb:4c:77:c7:28:2b:87:8b:eb:69:d3:ed:
                    9d:56:0f:91:c1:d4:d2:eb:7c:0e:f1:52:f7:b8:b0:
                    cf:ae:9d:98:3b:f7:cb:6e:40:77:e2:ff:14:46:31:
                    ce:5b:e4:61:77:2c:9f:3e:b8:06:f1:ae:70:2b:9e:
                    40:1b:5a:c2:b9:c8:7a:8c:04:09:1f:56:4d:8f:34:
                    8c:bb:8f:d0:a2:38:3b:4d:61:22:54:08:47:c2:01:
                    25:22:50:68:c7:16:96:bf:e4:c0:7c:36:99:88:a0:
                    e1:50:9d:f5:9d:06:e3:dc:5a:4d:3a:fc:01:60:50:
                    a7:2e:0b:e6:e4:bb:37:9a:48:62:1b:51:d2:ea:80:
                    8f:e3:d4:28:3a:72:46:24:44:b2:6a:99:a6:91:20:
                    37:36:8e:b8:c5:70:77:7d:9f:ca:00:da:62:02:87:
                    03:13:44:7d:5d:e4:f7:65:18:39:b4:2c:f6:76:64:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:4F:BF:56:FB:19:51:8D:E8:0F:D2:6D:59:45:57:85:AB:A5:21
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:3e:a9:7e:f1:85:47:3a:5f:17:6a:1d:73:87:ac:1d:1e:
         ba:d9:bc:3f:03:95:90:80:a1:89:44:45:ef:1d:f5:65:ec:9f:
         b5:a2:63:97:47:7c:c4:51:79:42:09:0f:c4:08:78:bd:58:83:
         73:eb:de:41:4e:5f:31:d7:52:e4:54:1f:e1:3f:0e:ba:9b:c1:
         ee:63:8d:ed:92:42:d5:11:21:1d:5f:24:74:06:06:f0:a6:5c:
         7f:9c:06:c7:74:89:da:3e:15:db:cf:87:b6:26:79:48:62:16:
         12:59:45:a1:8d:b6:77:8b:04:65:f8:a3:82:48:ba:72:bd:40:
         c4:2a:f7:e5:3c:ac:db:d0:17:f4:1f:64:6f:2f:e9:5e:bf:f5:
         2b:bb:ee:3a:9b:77:9c:ab:56:90:33:5f:aa:b6:af:46:05:e3:
         ee:64:ae:49:af:7c:4a:44:4f:1b:3a:e4:20:1d:1b:87:a0:e6:
         cb:32:f7:7f:0f:cf:76:ae:9f:8d:69:6a:46:68:21:92:71:b5:
         7e:38:8a:0e:3a:d8:10:f4:e3:3c:b0:e2:05:0b:d8:33:e8:a5:
         de:89:54:63:3b:4f:34:e0:3e:d0:aa:3a:a2:f5:49:63:9e:93:
         b6:50:dc:da:49:83:aa:ce:6e:22:ee:c4:5a:35:7f:b7:7a:f9:
         ec:46:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org