Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa (raw, json)
Hash identifier:          4qVkmDFPBAU36Ztlmh8hvpa/5bHlILvuxvgb8ufGcq0=
Subject key identifier:   86:44:31:D8:96:AD:0F:C8:0E:C6:E1:A2:EF:B7:80:0C:72:E7:10:22
Certificate issuer:       /CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
Certificate serial:       688A6F61FFD9F733374869FE68084F54C1727E0A
Authority key identifier: C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa
Signing time:             Tue 09 Apr 2024 22:39:11 +0000
ROA not before:           Tue 09 Apr 2024 22:34:11 +0000
ROA not after:            Tue 08 Apr 2025 22:39:11 +0000
asID:                     265086
IP address blocks:        170.233.32.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8a:6f:61:ff:d9:f7:33:37:48:69:fe:68:08:4f:54:c1:72:7e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
        Validity
            Not Before: Apr  9 22:34:11 2024 GMT
            Not After : Apr  8 22:39:11 2025 GMT
        Subject: CN=864431D896AD0FC80EC6E1A2EFB7800C72E71022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:fd:44:68:77:91:7f:95:27:f7:39:28:ed:
                    ea:9f:bd:df:ba:9a:f7:f0:fd:f0:f0:78:b3:4f:f8:
                    72:51:b6:5e:89:84:09:c2:70:1f:8b:a3:e8:40:4d:
                    1c:91:bf:2d:4e:8c:9b:43:27:c2:77:9b:be:b6:25:
                    d7:f0:39:4d:7b:fe:2c:a1:0c:18:6c:20:dd:b6:67:
                    7b:37:2c:11:90:6c:a7:0d:83:3c:f2:8d:2e:35:e2:
                    ac:3a:a5:29:58:68:e2:a9:58:d6:49:b4:81:b7:94:
                    1c:32:22:a9:b2:95:37:9e:37:21:15:bc:97:76:1c:
                    dd:46:83:27:08:da:44:a1:40:7e:5a:94:89:88:7f:
                    96:21:59:e5:bf:f0:35:f6:0f:ca:ce:13:9e:39:8b:
                    51:85:0d:0e:23:3d:6d:7b:bd:1e:6a:9c:04:bc:4a:
                    96:16:65:e1:ff:6a:2d:56:97:c4:39:2a:a9:9f:ed:
                    96:ca:94:93:57:1c:22:9c:88:13:44:48:8b:30:7f:
                    49:46:fc:68:46:63:cd:e0:d7:c9:22:4f:a1:42:ae:
                    3f:ac:0f:29:6f:0b:63:dd:b9:8e:e1:a7:cc:b0:42:
                    dc:5f:3b:a3:d2:ec:7d:8d:ca:84:69:4e:a3:7b:3a:
                    9f:a4:fa:f6:d5:24:91:af:03:20:9b:db:7a:d9:47:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:44:31:D8:96:AD:0F:C8:0E:C6:E1:A2:EF:B7:80:0C:72:E7:10:22
            X509v3 Authority Key Identifier:
                keyid:C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:0c:66:24:8e:98:6c:55:98:73:46:48:0e:f0:67:01:2c:65:
         77:1e:e5:12:9a:d8:71:80:8a:49:a3:29:d3:7f:33:df:2f:a4:
         d9:8c:b2:95:4c:03:a0:2a:14:04:cd:e2:7c:fa:a1:bd:35:87:
         70:d8:02:80:8c:f0:f9:5c:7d:2a:3e:69:04:ec:b2:97:f1:b2:
         85:3f:23:c4:a9:6d:f7:52:63:99:9e:b4:f9:12:a1:89:d1:2d:
         2b:b1:cc:d8:7d:9a:5b:40:79:79:c6:bb:af:a3:e3:e7:29:6e:
         5f:5a:13:78:6d:27:73:0b:82:13:b7:73:06:12:7c:74:7c:e3:
         e5:f2:c6:12:e6:aa:dd:a1:31:9e:f2:38:f0:44:7b:43:3a:69:
         49:45:de:cb:92:f8:15:5d:6b:28:4d:72:7c:70:ab:5a:ab:40:
         45:27:91:32:ed:f4:26:9e:2f:1b:c9:dd:d3:78:cd:9d:b9:6e:
         56:6c:4b:ed:de:6e:07:88:c5:14:d4:73:99:68:3d:7f:f7:76:
         e7:82:58:b2:f2:71:ee:10:91:88:92:30:cd:3e:d8:4c:15:97:
         fd:96:37:b9:3c:99:5d:59:b8:36:c8:66:23:06:5a:f6:14:1f:
         69:e3:01:ee:99:91:45:86:c1:35:e5:b6:b1:60:fe:2b:ae:ac:
         1b:38:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org