Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          OP/tG9Psm0oOg6ouqyWWuMzPW/rNCVE1LHzK4nwHqKA=
Subject key identifier:   DF:47:ED:AE:ED:3C:F7:A8:97:2C:69:1C:07:06:44:E4:77:A8:ED:C2
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       60101DDE0AA98A0969BB441DE5CBB6F9D2F7CC0B
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     266320
IP address blocks:        170.238.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:10:1d:de:0a:a9:8a:09:69:bb:44:1d:e5:cb:b6:f9:d2:f7:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject: CN=DF47EDAEED3CF7A8972C691C070644E477A8EDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:08:76:17:3c:17:6e:90:ac:9f:72:ee:3f:
                    25:86:09:bf:8b:e4:d0:88:6b:57:5a:d8:f3:0a:37:
                    4e:d1:d1:d5:7a:d2:cd:72:18:1f:37:7a:36:b0:c4:
                    9c:9d:aa:1a:c7:c7:c7:1c:04:c1:f2:7a:13:c9:67:
                    33:ba:d3:da:6a:42:54:35:7c:04:0a:ac:98:51:4d:
                    af:bb:8b:fc:e5:2e:08:b4:31:1d:44:cb:d2:51:0d:
                    9f:72:ac:1f:06:83:86:f6:b9:bd:5e:6d:8f:8b:4c:
                    de:02:24:9b:36:b5:39:92:ae:c7:f3:78:90:2c:e4:
                    b9:f5:64:b9:f6:1a:6c:9d:bd:6c:37:1a:ee:ad:27:
                    8f:1f:4e:34:80:41:53:d0:e5:4a:cd:db:2c:2b:84:
                    0e:e5:e1:98:da:ad:ec:17:63:85:b7:5d:9f:7d:59:
                    c3:51:3a:fb:37:b3:cc:94:be:f8:27:2b:de:b3:45:
                    7e:5b:6f:73:08:e4:ac:e6:4c:ad:89:46:ee:f7:af:
                    7a:ca:09:68:a3:12:d9:c1:8b:f8:6d:07:8d:23:d5:
                    e1:25:bc:c6:45:d7:27:76:d8:37:b2:6d:22:65:c3:
                    b6:04:d3:26:3d:3c:df:9a:54:47:6b:1a:1b:e6:30:
                    21:7b:96:6c:d0:dd:2a:8e:3c:ef:60:58:10:3e:96:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:ED:AE:ED:3C:F7:A8:97:2C:69:1C:07:06:44:E4:77:A8:ED:C2
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:21:8f:26:8d:8c:3c:09:b9:e1:c8:94:9c:16:06:03:d2:1f:
         30:2e:d6:84:e2:15:64:23:e8:a2:d2:f1:48:fc:d2:7b:0c:59:
         16:41:b4:bf:74:9f:3f:c8:b9:bd:ad:3e:d3:0e:14:1d:85:40:
         f4:67:d5:49:76:d9:e1:7b:a0:49:8a:36:1d:a5:fe:c3:e8:a3:
         77:a4:f8:d7:15:4b:1a:57:1d:8a:1f:be:ab:07:d8:e6:2a:d9:
         e5:06:c6:e3:b8:2f:eb:01:47:3c:8c:21:2c:76:9a:96:cf:3e:
         89:af:84:71:9c:70:e6:fe:e0:dd:4a:3a:cf:59:02:a4:4b:53:
         61:eb:f2:b5:3a:fc:b4:bb:fd:c4:ff:df:61:6f:fe:a2:6f:6c:
         26:fc:bc:80:b2:98:83:84:ae:1b:ec:66:9e:b6:3c:2e:db:54:
         77:b5:10:b3:ca:54:5a:88:de:28:6a:3f:41:bb:7c:0f:88:d5:
         ee:96:df:55:d1:2b:c1:3b:de:76:40:68:60:64:b1:7a:53:4c:
         17:59:9a:f2:d9:11:41:1c:3f:a6:ab:06:0e:df:76:b8:94:10:
         ab:45:ab:e9:21:c8:33:dd:58:d2:a4:ff:20:bc:43:25:80:25:
         d3:03:84:7c:ec:ac:7a:a3:0b:38:b8:5b:80:55:ee:b8:9a:f2:
         30:00:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org