Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
File:                     3137302e302e3235302e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          tmpStc5nNAYVcTqDesf+ahH4kfsT055BsQ7BOlX2Szs=
Subject key identifier:   B6:FF:B5:92:D1:9D:31:5C:FF:49:DD:1D:89:47:D5:CB:09:03:2B:2D
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       65DB53C20FF3301D385D72B80CD67F52427C1866
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
Signing time:             Thu 04 Apr 2024 07:05:55 +0000
ROA not before:           Thu 04 Apr 2024 07:00:55 +0000
ROA not after:            Thu 03 Apr 2025 07:05:55 +0000
asID:                     262301
IP address blocks:        170.0.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:db:53:c2:0f:f3:30:1d:38:5d:72:b8:0c:d6:7f:52:42:7c:18:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Apr  4 07:00:55 2024 GMT
            Not After : Apr  3 07:05:55 2025 GMT
        Subject: CN=B6FFB592D19D315CFF49DD1D8947D5CB09032B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:62:03:f4:02:d1:70:18:44:03:ba:1b:d2:12:
                    f6:5d:86:98:9b:bd:6e:64:2a:d8:66:75:7c:22:85:
                    ba:84:42:52:25:b5:8f:ad:9a:98:a8:a6:6b:ba:6f:
                    df:6e:8d:3c:11:50:8b:bb:61:73:3e:1a:c2:72:fc:
                    55:f0:4b:bf:78:53:0d:4e:d1:78:50:cc:1e:f4:9c:
                    f5:3b:2b:06:35:27:d9:23:5b:46:2f:f1:47:09:4b:
                    1a:1c:05:59:3c:34:0a:03:06:58:ec:2a:09:e4:f4:
                    d3:43:31:df:ac:8e:91:17:ee:56:a2:36:19:5a:c1:
                    10:dd:ef:7a:af:81:be:a2:40:1b:2c:ba:85:73:61:
                    8c:9f:2e:ba:a1:f5:13:51:57:e4:59:9e:19:e2:ae:
                    1e:19:f6:58:8f:6b:3e:e5:ed:cc:d7:46:02:09:92:
                    ed:80:d0:8a:fc:41:ac:c5:b7:0e:3f:c9:bc:2e:b7:
                    13:a3:0a:ca:84:d2:d5:21:d2:06:c7:9e:8b:55:5c:
                    0e:d1:68:b4:02:a7:2b:da:23:4a:c8:0d:62:06:ac:
                    a2:fb:4c:a5:44:ee:f7:30:22:ee:0f:95:da:98:4a:
                    6c:e8:41:62:e6:55:e5:85:6b:98:ba:34:90:50:b0:
                    63:6a:e1:84:a0:0d:6e:d3:73:c8:0e:85:44:73:b7:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:B5:92:D1:9D:31:5C:FF:49:DD:1D:89:47:D5:CB:09:03:2B:2D
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:72:7c:f1:5a:0e:3a:c6:43:8e:6e:0c:56:2d:60:13:9a:79:
         37:e9:78:de:7a:27:7d:ef:34:5f:5a:ec:df:32:0d:e7:ca:a6:
         e3:63:6b:89:46:81:a7:ec:54:64:ed:af:d5:01:ea:92:55:25:
         75:a5:39:23:bd:a5:ba:c4:cc:03:bd:a0:fe:87:12:c7:70:da:
         8d:70:d4:3d:ab:b3:56:d4:86:ec:c4:06:13:31:c2:f0:2e:74:
         01:2b:4c:27:11:22:26:91:e3:60:23:63:7b:be:12:65:a5:57:
         b4:49:ee:70:2f:99:a8:3e:a2:66:d8:a8:77:36:07:f8:39:87:
         0f:7a:44:e7:88:f9:1b:a1:da:07:18:1d:1f:c2:82:05:e3:e5:
         91:25:73:3d:10:82:4b:ce:82:af:9b:ed:17:13:48:b6:11:72:
         b0:e7:a7:5b:1c:64:01:d3:5e:66:c8:0d:5a:85:d7:c7:e9:31:
         56:9d:4a:ac:ce:ea:0c:7e:8c:44:db:0c:e7:d0:7f:60:8a:02:
         7e:a8:b1:f2:1e:8e:6b:6a:6d:cc:bc:9e:f7:4c:27:9c:2b:71:
         5a:40:8e:60:c0:7f:ee:f7:af:89:7e:cb:35:6d:27:99:9f:58:
         d4:72:9b:3a:a2:40:bc:c4:3c:cb:13:1a:41:6f:0e:62:f8:93:
         1a:cc:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org