Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
File:                     3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa (raw, json)
Hash identifier:          aXB2wYuNGUDnAAHRG5V7i1Q7iarnAK23TBKOafBLRpk=
Subject key identifier:   39:35:7C:16:40:C3:A7:EA:CC:6B:3D:73:D9:EF:A5:E1:96:B5:A6:AF
Certificate issuer:       /CN=59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A
Certificate serial:       1E7B434D8F112A640AB6DFB886E5136ADBA005F4
Authority key identifier: 59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
Signing time:             Thu 04 Apr 2024 03:01:14 +0000
ROA not before:           Thu 04 Apr 2024 02:56:14 +0000
ROA not after:            Thu 03 Apr 2025 03:01:14 +0000
asID:                     266449
IP address blocks:        170.82.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.crl
                          rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7b:43:4d:8f:11:2a:64:0a:b6:df:b8:86:e5:13:6a:db:a0:05:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A
        Validity
            Not Before: Apr  4 02:56:14 2024 GMT
            Not After : Apr  3 03:01:14 2025 GMT
        Subject: CN=39357C1640C3A7EACC6B3D73D9EFA5E196B5A6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c5:a2:91:5a:7e:5a:cd:b0:ec:15:47:f7:c8:
                    e1:fa:a3:fd:82:da:fc:ca:4a:d0:67:61:fc:fd:4c:
                    7d:9a:6a:cf:98:9f:06:21:a7:f5:d6:91:df:73:ee:
                    67:d4:02:26:16:41:54:10:4d:66:91:89:ed:ea:29:
                    7e:64:47:90:2b:76:c6:25:1e:57:a7:fc:0b:d6:71:
                    13:4d:42:07:37:d9:39:e9:94:7e:08:ee:cf:ae:db:
                    80:d2:87:02:bf:23:32:3f:ba:4c:90:25:63:da:63:
                    bb:56:ab:f1:cc:d4:e1:09:55:67:56:f9:cd:ed:58:
                    dd:17:6b:e3:d9:ec:5b:e6:8c:b1:aa:e0:d7:d7:a3:
                    d1:8e:1e:ff:8d:26:bf:40:f7:22:db:be:3d:78:d0:
                    cc:f9:cb:eb:9c:59:7c:ce:98:d2:c2:51:8b:b1:fc:
                    21:f5:f8:49:6a:17:9c:ee:03:42:e2:d6:94:cf:3f:
                    a1:4d:a7:21:38:16:62:30:a5:ae:f0:c5:d9:32:c2:
                    b6:8b:ea:ae:b3:58:98:d0:59:75:9d:53:f3:de:68:
                    26:46:36:51:ad:1f:b2:5e:d8:d9:17:52:56:d3:4e:
                    2f:55:ab:b9:58:40:a3:18:61:a1:e2:25:da:e0:29:
                    0d:83:e4:45:76:a1:b1:29:77:f8:cd:cf:b3:0a:0c:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:7C:16:40:C3:A7:EA:CC:6B:3D:73:D9:EF:A5:E1:96:B5:A6:AF
            X509v3 Authority Key Identifier:
                keyid:59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:be:e6:a7:00:97:90:54:8b:34:73:b3:86:f0:37:45:93:6a:
         97:24:38:a0:89:98:07:14:d8:10:bd:e2:22:d9:10:45:a7:f5:
         c1:73:ac:0b:2d:eb:17:95:8d:fa:3a:1d:d3:25:54:46:6e:79:
         4d:6d:86:a6:4b:42:db:6b:0c:59:00:4f:8f:f3:b7:fd:91:7e:
         a6:86:ee:5a:7d:9d:4c:7e:0f:c8:1e:f3:6a:9f:ea:1f:61:c2:
         09:06:27:2a:17:86:18:20:4d:fe:5e:5b:f3:b0:35:17:c2:be:
         fe:80:ba:32:49:ee:18:36:c4:45:ad:7d:5c:c6:10:d8:36:bc:
         6b:84:d6:48:8f:98:4d:3f:bb:62:55:a7:e0:d1:6d:1e:b2:ae:
         68:63:7d:e9:28:58:88:2c:20:c8:d3:71:18:4f:65:e5:a2:73:
         d6:48:33:06:ad:dc:d2:dc:f9:53:f6:a6:75:83:18:1e:40:55:
         e2:12:1c:0d:c1:a1:fe:3d:3a:02:90:2c:a7:ec:a7:d5:27:c2:
         b0:d2:72:ff:8a:8f:0f:78:3e:17:05:82:cc:ce:5b:71:92:89:
         b1:a9:79:81:50:57:0f:ea:63:25:f0:1d:82:a0:09:2c:00:41:
         b7:d9:57:74:42:d5:7c:76:7b:82:35:d4:2f:4b:51:08:fd:aa:
         e8:05:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org