Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa
File:                     3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          4y4Ydb6w5QrRl4jbotk6ZtF6jgJZi94UugU557+fZP4=
Subject key identifier:   5F:11:9A:8D:94:9B:3D:C6:EA:01:61:8E:A1:94:31:86:4C:80:3A:A9
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       7DC79E582B87FD891DBFDB51F524B306E7E9A2C1
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa
Signing time:             Thu 04 Apr 2024 17:56:44 +0000
ROA not before:           Thu 04 Apr 2024 17:51:44 +0000
ROA not after:            Thu 03 Apr 2025 17:56:44 +0000
asID:                     263078
IP address blocks:        170.244.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c7:9e:58:2b:87:fd:89:1d:bf:db:51:f5:24:b3:06:e7:e9:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Apr  4 17:51:44 2024 GMT
            Not After : Apr  3 17:56:44 2025 GMT
        Subject: CN=5F119A8D949B3DC6EA01618EA19431864C803AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:5a:6b:ff:56:63:0d:17:46:1c:78:a2:32:
                    ff:b9:ab:de:6e:18:0a:de:32:1a:24:0f:38:0e:c8:
                    70:f9:9d:26:4b:27:1d:d8:b9:6b:97:a2:fd:39:2b:
                    76:52:7f:a6:f3:af:48:81:bc:a0:c5:ab:ef:4d:cc:
                    2a:26:71:a6:7f:cd:26:eb:77:63:0e:22:ef:0d:be:
                    18:01:f2:bc:2e:98:e0:d1:e9:f5:06:14:9b:fb:9c:
                    29:48:dc:22:35:ab:e5:ea:07:c4:7b:30:39:3b:f2:
                    04:6c:0d:41:3a:ce:3f:ca:59:a8:cd:99:02:0c:a6:
                    6b:d9:4a:1a:71:50:97:75:85:e4:66:36:fb:2f:6b:
                    53:50:35:7c:d6:c5:b6:f5:4c:e7:ca:6e:3c:c8:64:
                    d2:28:6d:93:76:7c:a1:86:8f:3d:96:94:b8:d7:9c:
                    76:3f:41:e2:ab:d0:a8:56:f1:89:63:4f:a8:04:25:
                    a3:33:e7:08:ce:07:cd:f8:95:54:0b:b2:bb:f9:cb:
                    8b:35:c6:f6:9b:f2:fa:e5:75:12:8c:95:77:f1:3e:
                    1f:33:e9:b7:58:c0:f8:16:d9:c3:6c:10:bb:eb:34:
                    3e:54:5b:e1:1c:79:b1:b6:98:6d:20:ba:4b:29:6b:
                    a6:7a:7d:12:3d:8a:d5:d5:b5:0d:ff:1f:a5:8c:0e:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:9A:8D:94:9B:3D:C6:EA:01:61:8E:A1:94:31:86:4C:80:3A:A9
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:02:6b:80:94:1f:e4:53:22:08:9d:8b:70:ea:0c:6a:1e:ff:
         2a:69:a1:36:0c:c0:da:1d:c0:c7:4b:f0:1c:67:63:9a:1b:d5:
         aa:e3:27:5c:89:12:49:2e:17:e6:fb:c2:80:47:d6:4b:42:45:
         82:29:db:04:4a:80:05:c1:c6:b6:3f:e0:74:25:6b:27:f1:14:
         90:13:3f:5d:a3:48:20:18:78:cc:c4:f7:af:3c:f6:87:fe:e0:
         16:e5:31:71:90:44:7a:5a:f2:ee:00:05:7a:d5:22:ad:95:2c:
         33:b4:54:12:68:71:dc:d1:21:26:b8:fa:b6:75:13:91:e6:37:
         1b:ab:f3:6f:88:41:03:80:b0:f1:3f:01:11:5e:51:e2:7f:9e:
         df:1b:45:6a:de:68:cb:4a:9c:17:03:7d:8a:b5:18:db:4b:8a:
         36:9d:74:13:1b:48:df:b8:38:4c:a8:16:5c:7e:0a:88:16:a1:
         48:39:6f:f3:78:1d:9a:63:6b:64:df:94:1a:7d:a1:61:4b:48:
         44:b4:0c:2a:74:d8:bb:8d:5c:e0:11:b0:7a:b2:e8:ba:0d:39:
         ae:a3:ab:d8:4f:af:94:19:b7:c1:7b:f6:16:6c:76:79:a3:1d:
         e5:b8:23:f1:fb:6a:dd:37:40:a6:bc:dc:c6:86:29:b9:1a:f0:
         d9:d3:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org