Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
File:                     3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier:          PHpKIlOC9VjbiyILdcn2mWneef0JTo4AD1Y5ptrFczY=
Subject key identifier:   69:6E:4A:54:29:95:B7:26:AD:56:2E:21:3A:3C:1C:8B:1A:CE:40:F7
Certificate issuer:       /CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
Certificate serial:       0CACB66790624B5FB87E5D84A26AEDC8E7EA273C
Authority key identifier: 65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
Signing time:             Thu 04 Apr 2024 08:10:46 +0000
ROA not before:           Thu 04 Apr 2024 08:05:46 +0000
ROA not after:            Thu 03 Apr 2025 08:10:46 +0000
asID:                     265080
IP address blocks:        170.233.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:b6:67:90:62:4b:5f:b8:7e:5d:84:a2:6a:ed:c8:e7:ea:27:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
        Validity
            Not Before: Apr  4 08:05:46 2024 GMT
            Not After : Apr  3 08:10:46 2025 GMT
        Subject: CN=696E4A542995B726AD562E213A3C1C8B1ACE40F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:40:6c:fa:02:0b:b3:5d:8f:34:5d:13:3c:
                    99:3a:9a:89:a7:81:a9:2a:4b:b9:19:6a:8c:7c:29:
                    93:d9:85:7e:e3:2d:cd:7c:3d:41:47:a7:a8:95:25:
                    75:79:da:d9:f6:6b:db:6f:c7:e1:53:a9:c0:78:87:
                    f8:01:1c:8f:ae:2a:b9:a3:2f:2f:9f:58:ed:5f:f7:
                    12:3a:92:8f:54:e0:9c:12:4e:54:31:3a:cc:2e:67:
                    91:5d:c8:e3:63:1b:da:41:9b:d8:e8:42:b1:2c:8d:
                    e8:94:10:39:84:90:b3:61:e1:16:fe:81:de:fb:ba:
                    54:97:3b:f6:ea:d0:34:e8:f0:c0:cb:8f:af:80:e8:
                    6f:14:6d:4a:a9:13:fa:56:97:66:a2:5f:a4:fe:7d:
                    8c:47:4c:07:ab:b0:2e:f0:89:28:ac:63:c5:f8:f0:
                    8a:27:b5:c4:04:de:e8:fb:e1:69:fb:51:fc:e6:99:
                    87:ff:60:1e:c2:1e:68:37:70:32:fe:63:62:02:3e:
                    43:2f:c4:ef:a3:be:dd:9e:57:5e:b8:77:f5:d6:0a:
                    f7:30:0f:62:2b:cd:55:67:27:04:06:b0:5b:aa:47:
                    89:bf:73:a5:c6:c3:c3:0c:53:74:b0:e4:fa:15:2f:
                    62:22:8b:d7:0c:14:16:0c:98:47:db:f8:f5:55:43:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6E:4A:54:29:95:B7:26:AD:56:2E:21:3A:3C:1C:8B:1A:CE:40:F7
            X509v3 Authority Key Identifier:
                keyid:65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:4e:6f:a3:83:81:6e:79:e1:45:92:69:ad:5b:82:c2:fd:
         19:da:52:bd:da:a2:79:e3:19:11:4b:3a:92:cf:9e:00:dc:0c:
         c2:b7:e6:f7:21:88:c7:fd:eb:c2:72:46:eb:0b:7f:da:4e:8d:
         cc:ab:6d:c9:a3:c6:6c:39:85:49:f7:10:a8:98:c5:9a:97:55:
         02:e9:16:fb:91:53:13:8a:0b:ea:92:4c:ca:c4:74:56:6f:53:
         6a:9c:43:42:1e:a8:29:d8:45:01:b4:15:68:6c:46:99:a7:ef:
         ae:51:ac:51:40:09:55:29:c2:05:ec:d8:e2:34:e2:ad:46:70:
         d9:a4:43:58:a0:2f:cb:a9:1d:9d:75:86:78:dd:bb:92:7d:d1:
         36:0c:22:2d:23:8b:49:64:77:34:cc:fa:ea:51:6b:39:2e:a4:
         82:8f:d2:e1:42:32:31:ed:d7:6d:08:f1:28:a5:83:de:d1:01:
         4a:c1:59:f9:09:30:fe:d3:44:aa:49:b4:cf:82:ea:a8:60:c2:
         09:18:5b:30:db:82:39:e5:e1:95:43:98:d4:c1:a0:d4:04:d5:
         21:af:8c:3e:4e:a2:3c:fc:b3:bc:4c:41:ef:ad:18:24:a0:90:
         cb:64:a5:f3:a2:77:ae:6f:36:5e:ce:bd:90:f9:60:b2:dc:b5:
         1e:3d:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org