Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa
File:                     3137302e37392e3231322e302f32322d3237203d3e2031393136.roa (raw, json)
Hash identifier:          bE9CL188RH9D+SVImRzL2naLNuW+KGrVgkHJIgCNOds=
Subject key identifier:   EB:DA:04:9D:35:F7:98:90:C8:7E:AC:8A:A5:24:30:64:F8:A2:E7:02
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       225C5204B80CC944D24050320F6A1F01B128AED6
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:27 +0000
ROA not before:           Fri 16 Aug 2024 19:18:27 +0000
ROA not after:            Fri 15 Aug 2025 19:23:27 +0000
asID:                     1916
IP address blocks:        170.79.212.0/22 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5c:52:04:b8:0c:c9:44:d2:40:50:32:0f:6a:1f:01:b1:28:ae:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:27 2024 GMT
            Not After : Aug 15 19:23:27 2025 GMT
        Subject: CN=EBDA049D35F79890C87EAC8AA5243064F8A2E702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:6a:aa:66:92:9b:96:58:b6:23:38:68:26:
                    25:4f:2c:31:91:00:14:78:e5:d3:35:fc:93:ec:29:
                    f6:33:b8:af:78:1c:7a:a5:80:40:7b:1c:f4:17:fe:
                    2a:45:f9:cb:8f:aa:82:55:79:e9:3c:cd:33:e4:a5:
                    12:15:ce:93:1a:d3:84:aa:80:ba:0b:86:89:74:7d:
                    9c:92:d5:41:56:5e:c7:b0:18:31:20:7d:ad:5c:aa:
                    37:36:d9:1a:ac:55:97:70:14:78:6c:91:75:17:e6:
                    81:7a:b9:01:94:c0:0b:02:cc:64:d3:af:31:6c:14:
                    e1:05:2d:6a:36:d1:cb:98:f3:83:16:42:7d:24:57:
                    72:26:58:18:06:37:46:8a:1d:3d:71:ea:dc:f1:58:
                    fb:fc:9d:e8:f8:7d:6b:5d:2f:7f:26:56:d6:8a:d4:
                    4e:8b:db:65:f3:0b:b2:fe:73:a2:13:a7:36:18:ac:
                    d0:10:4b:3b:3a:e7:a6:f2:ae:d4:1b:8f:e9:51:4d:
                    eb:53:d1:c5:7b:6f:81:4a:2c:31:e5:17:a1:0c:53:
                    51:ab:44:fb:22:34:2d:e4:5b:28:e3:4f:a9:42:b1:
                    80:41:84:0e:53:ac:0b:b0:1e:8d:16:26:14:5d:16:
                    81:f4:a7:c8:e0:4d:e8:6c:cd:3a:de:78:e8:d9:c0:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:04:9D:35:F7:98:90:C8:7E:AC:8A:A5:24:30:64:F8:A2:E7:02
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:00:cd:a8:9e:ef:0c:55:d6:66:a3:5c:24:fa:ed:9b:fe:
         4c:0a:15:1e:88:45:ec:ff:c0:3c:c1:8b:ed:6c:64:2d:51:66:
         34:37:1a:56:62:23:e6:b5:d9:bd:bc:70:ff:76:1b:67:78:4d:
         8b:91:f2:7e:16:bd:5c:a3:71:aa:6f:2b:8a:f3:55:69:aa:66:
         14:6b:6f:9a:cc:4c:43:9f:dd:cd:cd:80:6c:64:1e:8f:3f:19:
         e5:1e:1a:26:4d:cf:64:6b:a7:05:1e:22:41:63:03:cb:0d:70:
         72:1d:94:bb:9a:bd:89:3d:26:e6:88:33:a9:54:00:fc:03:a4:
         79:31:59:6a:38:7d:3a:b0:c3:ca:32:2c:58:32:59:01:55:28:
         36:92:74:a1:16:9f:83:22:4e:d1:8a:96:a8:99:66:a1:d1:ec:
         8d:07:cf:3d:e3:e6:40:66:89:7c:dd:2e:fb:c7:ee:92:97:3a:
         74:ad:4f:38:77:b2:67:2d:82:cc:98:fe:32:74:1b:5c:68:b1:
         04:28:dc:8b:ef:a1:c9:b4:cb:00:3f:b6:a4:b7:be:34:b0:47:
         43:8f:c6:6f:e0:49:65:e4:2f:a1:92:d1:db:f3:9a:ce:91:7f:
         16:f6:37:9b:f0:4c:83:21:ff:fe:43:b9:f3:39:38:82:68:52:
         46:93:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:35 2024 by rpki-client on console-ams.rpki-client.org