Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e37382e32302e302f32322d3332203d3e20323633323932.roa
File:                     3137302e37382e32302e302f32322d3332203d3e20323633323932.roa (raw, json)
Hash identifier:          0cKwWxMgVtgo3drZZRVpWkdlXkAfaO9iCrles4xFmSw=
Subject key identifier:   36:F8:7E:5A:FA:51:7B:B9:B9:C4:A7:DB:4E:C9:51:F3:C7:B2:D1:FB
Certificate issuer:       /CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
Certificate serial:       18BDA1BD46C906E6B48CE2D76D8954122538373D
Authority key identifier: E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e37382e32302e302f32322d3332203d3e20323633323932.roa
Signing time:             Wed 08 May 2024 20:21:10 +0000
ROA not before:           Wed 08 May 2024 20:16:10 +0000
ROA not after:            Wed 07 May 2025 20:21:10 +0000
asID:                     263292
IP address blocks:        170.78.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bd:a1:bd:46:c9:06:e6:b4:8c:e2:d7:6d:89:54:12:25:38:37:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Validity
            Not Before: May  8 20:16:10 2024 GMT
            Not After : May  7 20:21:10 2025 GMT
        Subject: CN=36F87E5AFA517BB9B9C4A7DB4EC951F3C7B2D1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:58:4e:73:3e:3e:13:99:92:8c:31:e6:e8:
                    74:5b:4d:73:23:1d:2a:ed:95:96:c5:15:28:09:b3:
                    76:2c:aa:26:a4:77:91:6f:d9:0e:eb:3b:89:3b:4a:
                    5c:64:93:02:c3:da:4b:87:1b:a4:b6:5f:d4:7f:2e:
                    81:ef:cf:28:a2:f4:a0:f7:23:a1:f0:23:d5:fe:0b:
                    3f:37:1b:a8:d5:b3:f6:5e:96:70:a3:e8:5a:ad:6f:
                    fc:f4:89:1d:a9:88:8c:f6:8a:e6:bd:69:a0:ea:74:
                    0d:30:96:72:96:14:09:b1:2d:65:3b:3c:d1:9c:2d:
                    61:b8:2e:92:97:22:63:4d:1f:49:f3:44:15:7e:9b:
                    30:4a:8b:f7:f1:52:62:92:00:1c:74:8e:0f:57:c4:
                    4d:ab:29:ca:6f:6a:18:f8:1e:fd:31:fe:b6:75:72:
                    80:f5:3a:3d:55:5b:cd:65:85:d7:8b:74:66:7b:81:
                    1f:e2:bf:13:2d:29:b3:33:d7:a1:92:37:f5:20:bf:
                    e7:47:3f:f5:8b:24:9f:8a:57:c1:85:19:3c:b7:03:
                    c5:2a:9e:29:71:0a:1a:25:71:2a:b4:5a:a8:a7:47:
                    5b:98:c9:37:85:81:01:0d:b3:80:63:96:46:bc:3c:
                    02:1f:9a:86:60:7f:82:5d:a0:72:db:48:ac:94:d6:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F8:7E:5A:FA:51:7B:B9:B9:C4:A7:DB:4E:C9:51:F3:C7:B2:D1:FB
            X509v3 Authority Key Identifier:
                keyid:E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e37382e32302e302f32322d3332203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:40:c4:86:27:de:aa:96:ef:5a:0b:95:18:04:3a:9b:d0:
         0e:e8:c7:3a:f0:d7:b5:85:9e:3b:9c:a6:e1:35:f8:00:60:1a:
         d8:e1:d9:09:a4:20:9e:c1:52:50:f6:17:e3:63:8d:5b:05:49:
         c3:8b:0c:10:2f:73:f2:b9:a4:bd:6c:8f:d2:6e:b5:90:3d:62:
         0b:51:00:dd:34:7d:89:21:a9:02:c7:a7:08:94:5b:32:e7:54:
         65:7a:63:21:99:35:bd:84:b1:2b:81:d8:70:ec:bb:7e:48:52:
         aa:f1:cd:8d:5a:84:34:5f:d3:ee:25:20:ab:81:76:df:15:e0:
         15:ae:4e:1b:08:ec:4a:fd:88:82:70:0a:8d:0c:2a:cf:fa:b7:
         2d:e4:c7:14:99:87:6d:59:cd:a7:72:24:8b:50:d6:a0:4d:9f:
         15:a9:f9:e6:ea:ea:a5:bb:63:b5:d9:ce:87:ed:4b:60:0b:91:
         bc:56:2a:51:4d:99:ea:ba:09:9c:f2:ac:26:25:0d:0a:b6:5e:
         79:38:c2:ee:ba:ab:4b:ec:2e:5a:89:5a:19:88:b5:79:88:f3:
         0f:85:07:7b:5d:a6:1f:21:d1:ab:ea:c2:53:a6:83:c1:dc:cf:
         1e:ee:34:20:0a:1f:ae:54:a8:67:8d:c8:c2:9c:a5:b5:54:f6:
         32:98:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:49 2024 by rpki-client on console-fra.rpki-client.org