Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa
File:                     3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa (raw, json)
Hash identifier:          a4cVv7Dpm0mzDEHySwQSrY0omDRSkkSGij4Sz07qTDE=
Subject key identifier:   E1:F7:59:41:D8:22:2D:2C:D2:57:44:61:83:F8:4E:E3:1B:D6:0C:95
Certificate issuer:       /CN=168B11ECD2ABB221671D884FD24056BAADEE2EA3
Certificate serial:       298B1AF2B52886131C7757B751D05541A2DD53C1
Authority key identifier: 16:8B:11:EC:D2:AB:B2:21:67:1D:88:4F:D2:40:56:BA:AD:EE:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa
Signing time:             Sat 27 Apr 2024 14:33:41 +0000
ROA not before:           Sat 27 Apr 2024 14:28:41 +0000
ROA not after:            Sat 26 Apr 2025 14:33:41 +0000
asID:                     263486
IP address blocks:        170.79.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.crl
                          rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8b:1a:f2:b5:28:86:13:1c:77:57:b7:51:d0:55:41:a2:dd:53:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168B11ECD2ABB221671D884FD24056BAADEE2EA3
        Validity
            Not Before: Apr 27 14:28:41 2024 GMT
            Not After : Apr 26 14:33:41 2025 GMT
        Subject: CN=E1F75941D8222D2CD257446183F84EE31BD60C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:51:4e:fa:31:95:3d:fe:17:69:3e:39:7e:
                    fd:48:3f:68:81:34:1a:0d:6c:02:60:08:7c:e7:7f:
                    27:ab:93:62:71:01:89:98:b7:7b:e2:64:6a:88:b5:
                    6e:10:25:3e:a6:85:6f:c0:84:a5:e3:b5:dc:a5:d1:
                    88:1d:20:9b:c0:db:3e:6e:af:f9:f7:42:1e:ea:5f:
                    5d:60:cc:10:a8:6e:56:be:64:c4:e0:3d:e7:38:50:
                    4f:d7:93:38:e1:36:1a:e7:f2:53:c0:d6:58:f7:ec:
                    4e:1b:24:c5:c3:63:d0:be:5c:69:0e:a8:e0:71:43:
                    65:4f:bc:c1:18:ac:bf:a4:58:3c:a8:6c:3b:7f:2f:
                    a4:f6:b0:76:0a:fa:f9:bf:93:af:ae:53:a5:4a:8d:
                    79:25:e6:fa:72:3b:bb:c0:01:5e:61:ba:dc:5e:c3:
                    e0:20:d4:48:35:5d:bc:42:7e:d8:e7:49:31:6a:b3:
                    75:b5:5b:82:e6:78:65:e6:18:d9:25:f6:46:9f:81:
                    6e:ad:04:79:a7:bf:cf:66:30:44:6e:82:09:77:bd:
                    5f:ac:99:9c:90:ae:50:46:8b:cd:e8:97:2d:f9:aa:
                    19:b9:d7:5a:35:8b:8a:27:27:56:67:f0:52:54:bb:
                    8a:1e:ba:be:f1:1f:0c:be:b6:b4:44:08:16:f4:25:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:59:41:D8:22:2D:2C:D2:57:44:61:83:F8:4E:E3:1B:D6:0C:95
            X509v3 Authority Key Identifier:
                keyid:16:8B:11:EC:D2:AB:B2:21:67:1D:88:4F:D2:40:56:BA:AD:EE:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:56:73:99:4d:c5:46:3f:cb:9b:8a:1f:15:70:a0:71:0f:0c:
         f6:38:50:0f:44:d4:e7:11:c8:99:66:4b:0e:29:b3:d4:ac:2f:
         eb:8e:4c:78:7d:79:65:4a:2a:ff:91:bf:f7:e7:c6:2e:7f:da:
         2a:9e:87:49:8b:d4:c1:b2:51:46:3f:96:ce:76:af:d0:32:80:
         d6:58:8f:9a:50:1e:0b:77:94:fe:10:45:36:c5:5d:20:1f:77:
         29:ad:98:27:d0:5a:ea:97:cd:cb:a1:01:b3:64:bb:af:ee:2e:
         46:92:da:bc:b7:1a:82:a9:17:bc:19:76:ef:5d:9d:8f:7b:b8:
         ab:4b:eb:03:92:d9:35:db:ca:62:56:04:77:ed:f7:1a:9d:56:
         72:33:2d:9d:d1:75:b2:27:05:ad:57:8e:da:bb:8d:0c:99:db:
         9c:d3:1d:dc:8a:81:a9:af:f5:c1:ed:55:ef:be:04:00:21:89:
         3c:10:7a:56:6d:46:16:7a:65:c7:7e:1c:09:45:0c:62:3b:f5:
         1f:28:3a:ac:8d:73:fb:e7:34:a2:2e:9e:bf:99:c0:e3:8b:24:
         df:2d:70:1c:a0:dd:68:61:4e:a4:a8:0b:86:a6:c4:09:14:8b:
         8e:8f:95:8b:c5:6e:0c:b9:e8:de:d8:7c:ed:f7:48:02:36:bd:
         2a:90:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:45 2024 by rpki-client on console-fra.rpki-client.org