Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          7fquID5s4yYhaGaFZQnxmxbOQMY1jp3WgUPMoxNtGyQ=
Subject key identifier:   64:43:17:02:2F:91:8F:AA:9C:12:87:D1:D3:8A:BB:B2:9F:FB:AA:8D
Certificate issuer:       /CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
Certificate serial:       35C037DF5BCE9817103B7767FE2A04E328AF7728
Authority key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa
Signing time:             Thu 04 Apr 2024 06:06:04 +0000
ROA not before:           Thu 04 Apr 2024 06:01:04 +0000
ROA not after:            Thu 03 Apr 2025 06:06:04 +0000
asID:                     266327
IP address blocks:        170.238.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.crl
                          rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:37:df:5b:ce:98:17:10:3b:77:67:fe:2a:04:e3:28:af:77:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB
        Validity
            Not Before: Apr  4 06:01:04 2024 GMT
            Not After : Apr  3 06:06:04 2025 GMT
        Subject: CN=644317022F918FAA9C1287D1D38ABBB29FFBAA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:77:90:78:1c:df:f8:4d:d7:1d:90:2b:3f:
                    fc:c6:86:b5:e0:7a:25:b2:bc:fd:f1:e7:94:fa:58:
                    d5:a3:8e:6f:7b:3d:b9:f6:56:d8:ca:85:ba:56:98:
                    cc:a9:ef:31:c8:24:ba:20:2e:b4:2d:d7:48:34:97:
                    c0:9f:b5:77:8b:1a:2e:b1:2c:3a:8c:99:7c:17:0a:
                    0e:e8:61:9c:ed:93:1b:d4:a9:61:04:3b:5c:cb:a0:
                    3c:6e:7a:be:82:27:fa:53:a9:d3:f1:12:46:14:4a:
                    6d:50:4c:15:d7:b4:1b:88:04:5b:12:a5:e1:5e:3c:
                    9c:da:a9:73:a2:7e:8e:9b:ea:12:e3:bf:fe:f3:ee:
                    b8:b2:1a:bf:56:bd:3f:5d:1e:b8:eb:01:02:ca:25:
                    b8:86:6e:59:34:05:0c:cc:0f:09:fb:46:00:70:c7:
                    86:55:2b:8b:13:43:44:54:6f:c1:23:33:b4:54:7d:
                    db:f2:5c:a3:54:64:df:9d:db:8a:34:5a:8d:c0:96:
                    e5:84:4b:fd:77:04:c0:43:16:cc:c5:37:8d:27:9c:
                    e5:da:8b:8a:52:94:87:fb:c8:37:3c:0b:98:d8:75:
                    c0:76:a4:59:4a:be:2e:1f:19:ce:e0:ea:ef:68:39:
                    89:ea:d1:ea:b3:d0:0b:dd:7d:6f:1e:a1:03:e6:03:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:43:17:02:2F:91:8F:AA:9C:12:87:D1:D3:8A:BB:B2:9F:FB:AA:8D
            X509v3 Authority Key Identifier:
                keyid:C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:9e:22:77:93:10:b5:77:e4:18:3c:6a:e0:60:5c:68:29:55:
         c9:bb:28:15:a8:ed:8b:39:51:e9:ed:eb:e1:11:e3:c2:ca:2e:
         bc:67:9a:91:8b:41:47:3f:de:03:35:87:c9:69:99:bb:d1:d6:
         a1:48:9d:2f:d9:3e:64:59:de:d4:4a:dd:b4:ac:76:21:d0:04:
         6b:90:6c:29:39:7f:8f:f0:e3:8c:bb:0b:f3:5e:da:c6:27:20:
         b4:de:7d:c3:b8:79:7b:e0:a4:58:90:f0:d4:1b:b9:5d:e7:fa:
         7d:6b:a2:a8:67:fc:40:27:f3:7b:6c:c2:b5:a8:e8:2e:81:72:
         68:f5:ff:ce:83:38:fe:fb:28:0c:23:ee:d3:f3:37:ef:83:c9:
         54:93:59:cd:c3:30:c0:4c:30:50:eb:87:2e:44:22:1f:33:42:
         a3:4c:5a:e0:ae:35:c7:fd:eb:a7:20:0c:d9:b8:00:cc:c0:42:
         0b:c2:d1:a2:5d:7d:34:1c:f4:12:a4:9b:c8:1a:9a:1f:b0:79:
         ad:56:6c:af:65:be:e8:6d:ab:96:55:ac:11:eb:05:02:4b:7b:
         e4:5d:dd:c3:6e:0a:74:6f:cc:5d:07:9f:e4:3e:ac:97:84:c1:
         99:14:07:7d:c7:f4:1d:f2:23:57:ba:35:2c:90:a0:09:0c:35:
         17:65:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:27 2024 by rpki-client on console-ams.rpki-client.org