Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          BYYdcGa6H8fmto9i6e/Mug37S8cf6J/mbNb+vand1Ls=
Subject key identifier:   67:3D:74:07:E3:81:B1:F5:97:B0:48:53:7D:51:59:28:BC:1B:13:0A
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       6677D92B9DE879EA446F873D68F5B388AD52ECFB
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266320
IP address blocks:        170.238.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:77:d9:2b:9d:e8:79:ea:44:6f:87:3d:68:f5:b3:88:ad:52:ec:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=673D7407E381B1F597B048537D515928BC1B130A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:47:02:64:fd:33:e3:f9:5b:bb:99:9c:db:
                    69:36:fc:3a:28:b0:26:97:d0:0c:6e:66:34:32:a4:
                    39:9a:3b:1f:89:80:43:f3:14:ff:e3:12:2c:aa:85:
                    74:5b:d9:6a:f3:4d:94:0a:aa:1e:51:74:5d:ea:90:
                    4e:de:a7:d2:45:ef:1e:a5:37:d8:bc:f5:9e:b8:7b:
                    e4:86:41:21:d3:1a:3a:27:63:8d:5b:ff:9f:fe:fe:
                    6a:e2:e8:a0:c1:d3:7f:50:d9:d8:c0:ab:3a:cb:61:
                    23:be:5e:11:6a:04:b6:f4:2a:db:cd:50:a4:ec:65:
                    94:18:3e:a0:6c:e1:74:fb:d0:c1:d9:23:f7:94:75:
                    a0:1d:64:8b:ed:5e:73:0e:fe:31:98:62:79:1b:d3:
                    e8:44:e6:35:86:ad:74:97:88:12:66:6e:e2:17:86:
                    9d:43:c3:85:0b:15:13:75:f7:f0:8a:17:70:22:b8:
                    0a:87:31:79:30:ff:1c:6f:df:a8:85:c4:e4:95:b5:
                    48:69:06:5b:ec:55:6a:52:be:95:1b:b0:aa:95:cb:
                    52:39:9f:70:7f:54:da:4f:e8:c7:d7:1f:6f:4d:6a:
                    e4:5a:8a:56:a3:e5:9b:ab:b3:6a:4b:46:e8:75:bf:
                    b2:4f:03:15:d2:c6:15:a8:98:dd:1d:8b:a5:cc:30:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3D:74:07:E3:81:B1:F5:97:B0:48:53:7D:51:59:28:BC:1B:13:0A
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:48:ec:64:36:9f:ff:b5:8d:f7:2f:d7:34:0d:ed:5f:a0:
         24:60:be:ca:c0:95:9d:aa:0c:ae:b7:3d:fe:10:4d:63:cf:0f:
         75:db:01:15:b3:ea:85:6d:ae:15:c7:96:1f:68:04:65:0c:67:
         bd:02:55:c2:83:c6:fb:b5:5e:bd:93:21:8e:1f:d1:6b:8f:5f:
         e4:2d:e9:95:50:72:4d:cb:fd:5c:47:17:d0:e2:bc:6c:84:93:
         3e:27:65:fa:7f:2b:b6:51:e5:a0:6c:be:c1:74:97:5b:19:5f:
         42:fc:11:bc:2e:e9:b2:eb:de:d3:f2:3b:2a:84:75:1f:9b:55:
         75:ae:b8:91:17:bb:f8:68:40:d4:3e:6a:26:32:f0:45:eb:66:
         c4:cd:90:f5:8e:11:97:f1:85:44:f0:e1:1f:36:66:4b:87:23:
         82:85:5d:f8:3e:86:da:33:83:ad:79:6b:b5:8a:72:10:e1:fb:
         e1:89:8d:7b:61:c9:22:83:b0:69:0d:3f:34:f5:63:1f:b2:d4:
         22:89:2f:9e:9c:4c:87:44:01:74:a4:c4:b5:10:8a:27:03:8f:
         d0:ba:b9:13:88:61:96:f8:bf:5e:5c:b3:b6:f2:1a:9c:5e:7f:
         79:11:b6:43:c5:7c:cd:98:cb:ff:bb:25:46:c3:88:43:2e:14:
         9a:2a:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org