Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
File:                     3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa (raw, json)
Hash identifier:          vRpbE+7j1QNYPcBEwNMy3PlbuEx9iyHOUNwTsvHzTqU=
Subject key identifier:   21:50:35:80:7A:00:19:E4:00:86:61:8E:BF:10:3E:D1:B9:D8:AD:AE
Certificate issuer:       /CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
Certificate serial:       5A29720C7DFFD8E7DD12A06BE50A6CBF2BAB7B74
Authority key identifier: 0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266357
IP address blocks:        170.239.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.crl
                          rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:72:0c:7d:ff:d8:e7:dd:12:a0:6b:e5:0a:6c:bf:2b:ab:7b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:a3:05:a1:e4:99:55:de:82:b7:2d:b6:49:
                    2c:4b:c4:4a:38:1d:26:eb:30:7a:61:29:f8:c9:a7:
                    b0:3e:af:59:fa:d6:28:5a:8a:85:ed:63:7a:06:4c:
                    b7:00:8c:06:a9:25:72:2d:e5:09:72:f7:84:5f:12:
                    7e:27:55:71:c9:09:c2:86:3e:48:80:0e:8a:92:32:
                    84:35:51:93:dc:28:6c:5c:c9:33:40:c6:2f:bd:9c:
                    20:6a:f3:ed:50:cc:71:04:54:ae:b5:0c:80:73:ed:
                    98:0a:62:63:77:c0:98:ee:4a:a8:2f:4b:cb:60:66:
                    39:87:fa:b3:28:3a:44:df:1a:1c:9c:4f:4b:cb:f5:
                    50:29:22:4a:b1:93:1f:e0:c8:7f:4a:f2:63:35:83:
                    45:2c:39:7b:b1:55:57:38:a4:9b:19:53:cb:1d:48:
                    91:d2:4a:14:e5:0c:73:73:c6:78:02:2e:4f:51:4b:
                    79:22:07:7f:a4:36:7b:55:9a:53:fa:54:48:af:ad:
                    d9:20:58:02:16:ab:d3:95:7d:45:08:41:71:68:ae:
                    32:7c:3b:01:36:8c:cf:5e:86:62:24:99:2a:42:d7:
                    d7:d4:f9:43:ff:12:17:ec:80:33:90:09:7b:40:19:
                    64:8c:ad:7a:ad:94:de:00:79:a1:19:ea:ac:d9:ca:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:50:35:80:7A:00:19:E4:00:86:61:8E:BF:10:3E:D1:B9:D8:AD:AE
            X509v3 Authority Key Identifier:
                keyid:0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:d5:0e:a3:c3:fe:08:d2:e2:5a:46:ff:4d:9f:12:dc:82:23:
         14:c8:47:fe:d5:1d:54:f8:8e:8a:28:55:2d:d4:66:6f:c8:c7:
         82:2a:02:c6:e4:4e:01:48:ad:58:8a:a1:ab:6e:3d:04:ed:e3:
         60:bd:dc:6e:36:bd:ee:5e:8b:8f:c4:7e:d4:0f:3b:12:46:9e:
         86:21:63:28:b5:45:5d:3a:db:11:6d:83:5c:b5:e2:96:94:e5:
         42:cb:2e:64:6b:88:ff:87:c1:5d:3e:39:0b:76:00:87:3d:de:
         25:b6:55:46:3a:cf:f9:55:76:2b:de:94:07:70:ab:25:81:50:
         82:a0:41:67:64:42:90:51:3c:6d:bc:9c:50:4c:1d:6d:97:94:
         10:8c:66:29:7c:30:0b:0a:a5:01:7d:5d:43:a5:be:f1:f6:b0:
         93:43:d3:43:3d:ca:0b:92:ca:e1:d9:8a:0f:85:96:70:e5:2a:
         76:df:06:b1:a5:70:38:3c:5a:7d:bf:f4:87:5c:97:96:7d:c5:
         b2:a4:f4:d7:77:26:80:c6:aa:1f:24:6a:8d:83:4f:58:20:2f:
         57:bb:f1:61:e6:83:73:f4:cc:74:f6:bd:d2:5c:7e:3b:6c:2f:
         35:98:63:9b:5b:7f:ff:66:9a:2a:89:58:da:8e:8d:33:df:2a:
         05:72:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org