Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232342e302f32332d3233203d3e20323731363737.roa
File:                     3137302e3233312e3232342e302f32332d3233203d3e20323731363737.roa (raw, json)
Hash identifier:          S3f2RZEZSEtPoWb2QW0e4Fz+/Z5A+vC5KZu8wObSpAU=
Subject key identifier:   C4:9F:A2:DC:4C:83:F4:00:CB:8D:FC:C3:51:68:8A:4F:AA:D0:2C:15
Certificate issuer:       /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
Certificate serial:       4BF78476C325DC1393CCCFE87836D74773D61FB9
Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232342e302f32332d3233203d3e20323731363737.roa
Signing time:             Tue 07 May 2024 19:23:23 +0000
ROA not before:           Tue 07 May 2024 19:18:23 +0000
ROA not after:            Tue 06 May 2025 19:23:23 +0000
asID:                     271677
IP address blocks:        170.231.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl
                          rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f7:84:76:c3:25:dc:13:93:cc:cf:e8:78:36:d7:47:73:d6:1f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Validity
            Not Before: May  7 19:18:23 2024 GMT
            Not After : May  6 19:23:23 2025 GMT
        Subject: CN=C49FA2DC4C83F400CB8DFCC351688A4FAAD02C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:f7:39:15:e9:28:c4:12:cf:72:b3:a8:a0:
                    05:5e:f5:55:fa:b0:bf:7a:03:12:3e:62:c2:44:a9:
                    3a:99:6c:5a:d0:28:ab:45:6c:8b:8c:89:7c:de:ab:
                    d6:07:c9:65:5c:f2:57:bc:d7:8d:53:62:73:75:84:
                    76:e8:b8:dc:90:22:98:ce:fa:e4:14:06:e5:5f:82:
                    47:b5:96:cb:86:40:a7:31:0c:93:1a:a1:19:be:b1:
                    69:f0:db:ad:d2:1b:f7:a6:bc:d8:a7:c3:c8:77:10:
                    48:43:22:48:94:01:dc:82:28:98:85:db:ab:de:e7:
                    a5:ed:e0:8a:e6:fd:5d:c9:83:9d:ee:18:dc:9e:99:
                    73:73:0f:14:f5:ad:a8:98:19:d5:ea:82:cb:cd:a6:
                    d4:00:3d:4f:fa:b7:2d:8e:31:59:0e:91:6f:08:9a:
                    47:10:2c:28:a6:36:46:ed:33:5f:db:e0:19:e3:ae:
                    5c:f8:80:d8:f3:82:9b:2a:b8:b1:53:9c:bc:66:37:
                    b9:2b:ca:b7:14:7b:9a:4c:74:9f:5a:22:8a:aa:f0:
                    b3:f9:92:1b:c0:2e:af:67:4a:86:12:ad:cc:86:60:
                    26:81:29:7d:51:f5:d0:ab:a9:6a:9b:e9:30:7b:66:
                    3a:d0:e4:08:47:a2:56:25:88:dc:67:ce:da:eb:22:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9F:A2:DC:4C:83:F4:00:CB:8D:FC:C3:51:68:8A:4F:AA:D0:2C:15
            X509v3 Authority Key Identifier:
                keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232342e302f32332d3233203d3e20323731363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:51:46:1c:4d:5d:13:87:25:8d:cd:88:7f:39:e3:6d:66:09:
         6d:63:92:9f:b9:bc:ec:18:c7:e6:5f:36:e0:89:02:8e:aa:57:
         88:4d:b7:bf:f4:95:8a:72:ba:65:27:ba:26:15:e9:fe:37:ad:
         5e:50:63:ab:41:cb:95:b2:f7:49:34:65:4d:49:f0:7c:f0:21:
         23:33:c8:28:59:7c:86:55:20:b5:aa:d3:21:d8:f8:8e:a6:d8:
         ee:cd:92:a1:d5:04:50:1d:10:73:52:17:58:7c:32:3c:82:cf:
         a4:4e:c8:51:0a:a7:ad:d6:29:6f:e8:a4:99:24:e2:81:9c:eb:
         d5:3b:65:97:0d:30:8c:a6:54:72:45:59:84:f9:42:61:c1:e1:
         ee:59:f2:c5:0e:5e:11:46:6e:0a:a2:61:3f:07:b9:b7:0f:f2:
         3f:47:bf:7e:22:30:e0:80:26:b7:19:af:ac:35:7e:1b:05:d0:
         fb:ab:51:14:59:7f:30:d1:f5:ae:8d:80:80:09:36:fa:56:c0:
         d6:b6:63:08:bd:e6:fd:33:2f:38:b7:b6:a3:3d:80:0f:0b:b9:
         ff:70:49:69:29:34:bf:da:01:49:d7:ed:35:f9:d4:03:5c:db:
         0e:d4:bf:45:2d:90:97:c3:80:60:3b:6e:32:15:ab:e6:c8:7e:
         d1:56:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org