Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e37302e302f32332d3233203d3e20323635323035.roa
File:                     3136372e3235302e37302e302f32332d3233203d3e20323635323035.roa (raw, json)
Hash identifier:          B+sgHlL6aEaK8myHWQ5lKXoA+kbu6VwVQAkrrBcrTpk=
Subject key identifier:   35:ED:8E:1D:33:7C:3C:F3:84:4D:51:A3:FC:BC:8D:39:36:10:E7:48
Certificate issuer:       /CN=766B3041B29318AB99A3A0468D318CA1E0E24276
Certificate serial:       488544792892C511D4C26B8BBD5D72D9DAB72544
Authority key identifier: 76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e37302e302f32332d3233203d3e20323635323035.roa
Signing time:             Mon 03 Apr 2023 14:42:06 +0000
ROA not before:           Mon 03 Apr 2023 14:37:06 +0000
ROA not after:            Mon 01 Apr 2024 14:42:06 +0000
asID:                     265205
IP address blocks:        167.250.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl
                          rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:85:44:79:28:92:c5:11:d4:c2:6b:8b:bd:5d:72:d9:da:b7:25:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Validity
            Not Before: Apr  3 14:37:06 2023 GMT
            Not After : Apr  1 14:42:06 2024 GMT
        Subject: CN=35ED8E1D337C3CF3844D51A3FCBC8D393610E748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:c1:4d:65:25:0d:c3:ea:aa:1f:2a:52:0e:
                    dd:ab:41:64:1b:b0:56:bd:03:9a:3b:08:aa:55:a3:
                    b8:aa:bd:18:fa:4e:86:81:8b:3c:90:de:17:3f:cc:
                    ee:38:90:85:7d:9e:11:9a:ab:97:d9:78:92:c7:5f:
                    a1:0a:ec:b2:bf:b0:dd:ee:5a:4e:48:64:cc:63:a5:
                    c9:22:ac:9c:90:e4:2c:70:8c:95:f4:45:c8:8b:6f:
                    14:71:20:f8:be:2a:8d:59:0a:10:c7:d1:a0:ae:d3:
                    1a:b4:0b:b5:9a:69:88:41:f9:e9:11:cc:1c:35:6e:
                    de:d1:eb:ea:c7:27:96:ac:b4:03:24:bd:d3:65:75:
                    35:9e:36:4c:1a:e0:78:20:4e:8a:c0:21:8d:8b:5b:
                    99:58:0a:1b:90:8f:c1:bb:6b:bb:5c:db:c9:04:6c:
                    c0:eb:04:b2:50:a0:c0:8f:c1:59:5b:6b:c2:c0:ba:
                    d4:70:b5:b7:32:78:65:e1:3d:05:f3:85:02:c0:78:
                    6d:73:cb:85:9b:e8:85:a6:ef:d1:a8:14:90:37:f4:
                    8b:da:62:64:f8:6a:c6:c8:3b:df:cc:06:09:20:fc:
                    24:9c:12:bb:a8:2a:cd:af:30:fc:ed:d4:fc:bf:8a:
                    61:6e:6a:da:e1:78:2f:87:ac:2d:df:cc:45:d3:4a:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:ED:8E:1D:33:7C:3C:F3:84:4D:51:A3:FC:BC:8D:39:36:10:E7:48
            X509v3 Authority Key Identifier:
                keyid:76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e37302e302f32332d3233203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:c5:e5:93:c7:96:be:fb:ec:8d:ac:ee:41:0f:66:e5:93:
         ab:d1:94:f5:3d:59:12:5f:6c:d8:82:a0:56:fa:85:19:a3:11:
         2b:98:9b:81:1f:37:09:d8:92:97:2d:c2:30:68:5b:9f:dd:fc:
         0d:f3:32:fc:7e:2e:eb:0f:c8:8c:44:57:f0:9c:a3:87:f7:ab:
         fc:f2:86:0b:7d:14:e9:d0:6e:40:63:83:f9:fc:71:24:72:e7:
         17:92:88:79:50:73:2a:da:04:ae:9a:a0:e0:2b:e9:9c:e6:38:
         85:3a:b4:58:27:38:b8:84:40:bd:d9:bd:23:f2:52:55:56:be:
         8d:73:12:59:49:c8:1a:9f:01:25:bc:0d:3d:38:9c:84:e2:c5:
         82:3a:a4:de:f4:49:02:85:e3:38:44:68:04:7c:bb:bb:36:35:
         7d:59:6c:c3:3f:d4:97:16:09:2e:76:96:71:4f:69:6f:a0:d1:
         76:19:88:bd:52:2c:40:ab:2a:2d:f6:b7:f8:30:24:7b:10:0e:
         f8:4c:5b:71:07:f0:b6:d9:e1:14:9f:c9:54:3b:bb:0a:35:8b:
         96:d4:e9:aa:6b:24:44:cf:ce:ea:cc:ab:74:e7:30:f1:0c:d2:
         07:65:7b:23:76:9b:64:83:f6:1b:b8:7c:0e:cf:15:32:d4:ef:
         bd:bb:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:38 2024 by rpki-client on console.sobornost.net