Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32332d3233203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32332d3233203d3e20323633353238.roa (raw, json)
Hash identifier:          HFXQfVxSVpMn/4RDeHBWUDRp1tZx3l2nexqhFhDN1LM=
Subject key identifier:   5E:14:12:9B:8C:54:25:BA:E0:5E:E6:E6:9F:FC:4C:83:65:BC:81:E6
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       53C843C110D5BF76270784E228F116A67BD8DABD
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32332d3233203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:48:34 +0000
ROA not before:           Thu 18 Apr 2024 17:43:34 +0000
ROA not after:            Thu 17 Apr 2025 17:48:34 +0000
asID:                     263528
IP address blocks:        170.254.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 23:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c8:43:c1:10:d5:bf:76:27:07:84:e2:28:f1:16:a6:7b:d8:da:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:43:34 2024 GMT
            Not After : Apr 17 17:48:34 2025 GMT
        Subject: CN=5E14129B8C5425BAE05EE6E69FFC4C8365BC81E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:d5:85:95:ee:28:2c:da:67:4a:81:05:a3:
                    91:ae:0e:7a:aa:ce:32:4d:52:0b:57:25:46:dc:af:
                    07:d4:24:bd:25:99:24:bd:e8:f3:fa:f9:a2:ae:ae:
                    f1:ad:a9:4e:a3:07:7f:f4:2b:7b:b1:6a:09:00:c4:
                    62:dc:0c:13:22:0b:e3:65:a8:d7:c3:32:0f:51:4f:
                    3e:7c:d8:59:30:f7:1e:d2:25:5f:cd:00:cc:3c:13:
                    53:d6:6f:ba:c6:dc:71:9b:16:b7:d2:89:9c:27:bd:
                    ea:6c:d0:4e:41:8a:18:23:36:e0:fd:c8:20:ad:9d:
                    ba:2d:65:62:fd:e6:5b:30:3e:ef:33:00:b0:8c:7c:
                    d7:45:ce:55:6e:62:99:33:62:ba:65:56:e2:36:d4:
                    02:9a:39:c4:e1:9a:aa:86:76:d6:33:c0:23:64:30:
                    60:ba:80:39:99:ea:ed:bb:e7:fd:ec:07:4c:23:73:
                    62:82:d6:dc:42:cf:31:97:77:3b:a2:d7:a4:e9:1c:
                    b2:9a:d1:2d:b6:98:2b:cf:4f:2b:00:e9:2f:6c:1f:
                    dd:cb:0f:74:14:e6:48:bf:75:28:63:75:37:85:26:
                    5f:e2:89:22:17:f8:6e:e9:e4:ea:98:3b:d4:1a:bf:
                    1f:cb:ad:13:ad:17:15:a2:e7:c9:59:7f:57:85:bd:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:12:9B:8C:54:25:BA:E0:5E:E6:E6:9F:FC:4C:83:65:BC:81:E6
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32332d3233203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:cc:e7:52:51:62:e2:f4:3e:b9:70:3b:d1:14:5b:1e:8e:
         c8:d3:1a:cd:9b:59:d9:d0:73:96:35:8e:24:5e:09:7e:ce:3d:
         c0:8f:ee:45:f9:6a:37:a3:c9:57:b9:a0:03:d3:be:66:cd:d5:
         e6:a1:f4:fb:46:d8:d6:e1:52:67:ae:1a:83:50:b0:16:99:df:
         19:e4:c4:3b:15:78:b2:0f:ad:1b:14:93:22:59:91:83:8d:f9:
         93:6c:9e:b5:c9:a9:33:ab:8f:10:45:3f:dd:55:e0:7c:a5:99:
         2f:13:3d:f7:19:c0:42:a3:ba:df:06:cd:08:be:ef:b9:e0:e1:
         bf:44:31:69:ab:cf:41:90:ad:f0:fe:f7:ea:67:d7:8d:16:86:
         e7:67:89:15:9d:f4:90:e8:49:90:9c:84:f9:92:22:a6:8e:1f:
         88:ec:c1:d6:fd:84:3d:0d:e0:12:d6:48:28:d1:40:6a:96:71:
         f4:c6:f5:d5:a9:14:20:aa:82:a6:5f:91:05:ca:b6:09:04:b1:
         6d:2a:80:26:d8:5e:f6:3c:4d:b5:09:36:e2:a6:b0:fa:d9:91:
         25:72:8b:a7:62:4d:00:d6:ab:3f:fd:5c:22:d4:ca:24:39:ef:
         75:ef:c4:65:a1:f7:78:78:9f:df:31:25:6d:49:79:20:5a:4b:
         a5:17:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:47:44 2024 by rpki-client on console-ams.rpki-client.org