Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa
File:                     3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          NaxxZquFI0nZBXbTFqj4wSmkmWyX2ljJRpYtcZHVj0w=
Subject key identifier:   9C:53:B9:EF:E6:83:CF:0A:5E:4F:21:6E:C0:C9:01:3F:EC:D4:E8:FD
Certificate issuer:       /CN=C6311968EBC105398794FB43DCF25FAA7999A36E
Certificate serial:       3F7438DE1278E751BA411FEBCCA62FB7C44049B3
Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 18 Apr 2024 11:15:31 +0000
ROA not before:           Thu 18 Apr 2024 11:10:31 +0000
ROA not after:            Thu 17 Apr 2025 11:15:31 +0000
asID:                     264281
IP address blocks:        170.233.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 15:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:74:38:de:12:78:e7:51:ba:41:1f:eb:cc:a6:2f:b7:c4:40:49:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E
        Validity
            Not Before: Apr 18 11:10:31 2024 GMT
            Not After : Apr 17 11:15:31 2025 GMT
        Subject: CN=9C53B9EFE683CF0A5E4F216EC0C9013FECD4E8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:77:a5:04:7f:d5:1c:5a:e7:d1:e7:3b:ca:
                    c3:fe:45:0a:04:35:30:09:ed:56:0f:62:64:f9:72:
                    8d:26:a6:a8:b3:63:06:f4:9e:87:dc:93:03:3f:25:
                    bd:35:eb:0a:18:e8:11:ad:76:67:dd:45:15:2b:2f:
                    d5:69:19:86:e3:be:80:7a:32:5e:24:a3:25:fc:8d:
                    37:51:70:96:ba:0c:9f:ce:77:11:98:b1:ba:40:d2:
                    78:7f:37:8d:b0:5a:9d:ca:73:56:0a:c4:93:46:3d:
                    73:32:65:87:08:fa:02:1c:5a:8f:48:85:a9:9b:ec:
                    84:aa:bf:0d:57:f1:d9:aa:6c:3c:a3:f2:59:07:43:
                    1c:67:aa:b8:d4:f8:77:fc:41:8c:03:d8:b8:1d:9b:
                    b9:81:ee:6f:06:02:7b:32:84:dc:71:2b:42:ea:a9:
                    f8:b4:e4:7f:77:1f:d3:40:86:54:87:0e:12:fc:25:
                    ee:cd:fe:b9:93:a9:89:e4:67:4d:f2:f4:92:55:9e:
                    cd:04:52:70:a0:17:3d:56:4f:db:78:f4:40:3e:88:
                    d8:ed:5a:9f:7f:3f:d3:a2:d0:e7:0e:d0:29:4f:d3:
                    8c:08:38:a8:db:06:13:85:f5:a2:19:18:0d:4f:8c:
                    7f:f4:97:5f:59:b0:1e:94:e7:b0:78:58:03:34:53:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:B9:EF:E6:83:CF:0A:5E:4F:21:6E:C0:C9:01:3F:EC:D4:E8:FD
            X509v3 Authority Key Identifier:
                keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:ab:b6:f4:57:63:70:65:d0:25:eb:94:27:ff:16:5b:5c:
         63:e5:91:5e:db:02:a9:05:d9:cd:fb:d6:09:c6:19:ad:fb:db:
         61:57:58:ca:fe:71:0d:05:98:11:6a:32:9f:b5:e0:14:ee:24:
         fa:52:2c:4c:f2:9d:25:85:97:c8:82:47:88:50:47:c0:75:2b:
         53:82:ee:2e:63:5e:6d:e4:c6:9b:7c:2d:8c:58:85:7b:e0:bd:
         75:64:39:8b:00:53:12:b9:1a:2d:48:17:f1:ca:ce:26:18:d4:
         34:f9:86:d2:2e:5f:12:e3:a1:14:8a:c5:b0:d7:66:50:be:80:
         62:2e:1c:b3:2e:6b:6a:2b:64:2a:e1:d8:1c:5d:73:32:5b:1c:
         bf:74:8e:11:82:82:55:98:20:72:78:89:2d:ed:1c:07:2c:ae:
         0b:f4:29:2f:ee:e6:08:38:33:5f:2b:cd:4b:11:58:ae:2f:3e:
         9d:4d:20:1e:27:e0:46:b6:25:b3:4f:4b:1d:7a:12:7f:e3:ff:
         75:e0:44:d3:91:82:1e:6f:99:8a:1f:a2:9b:15:ba:3f:91:1e:
         74:ee:99:2b:e4:dc:11:cb:e4:04:ee:98:11:4b:72:3f:4d:57:
         fa:4f:04:6d:33:f1:a7:0a:b5:d9:00:70:a7:a6:38:23:3e:c2:
         0c:67:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:20:27 2024 by rpki-client on console-fra.rpki-client.org