Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa
File:                     3137302e3234372e34302e302f32322d3234203d3e203631353931.roa (raw, json)
Hash identifier:          n8fk4YhU/ROqgkmECXwg53VlozUrx5SHE9OmlfDBmGg=
Subject key identifier:   2B:F1:EF:04:F7:59:1D:52:97:0B:66:F6:4B:1C:4E:CC:D3:25:CA:53
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       50568FA2B79695F9422F2C9E0046AA48CCBB6D63
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa
Signing time:             Mon 12 Aug 2024 20:45:11 +0000
ROA not before:           Mon 12 Aug 2024 20:40:11 +0000
ROA not after:            Mon 11 Aug 2025 20:45:11 +0000
asID:                     61591
IP address blocks:        170.247.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:56:8f:a2:b7:96:95:f9:42:2f:2c:9e:00:46:aa:48:cc:bb:6d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Aug 12 20:40:11 2024 GMT
            Not After : Aug 11 20:45:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:f8:5e:7e:e6:32:5d:ad:49:40:a9:36:8e:
                    98:40:8a:27:c6:54:96:bb:c0:cb:4b:5d:84:fe:5c:
                    e3:1d:e3:8b:79:7d:f0:6d:c8:01:f2:9d:74:24:dc:
                    85:1b:7a:1b:55:88:78:a8:90:9e:4c:5e:01:3f:01:
                    2d:d2:3b:75:1e:81:f6:df:cc:9d:99:ea:49:38:41:
                    01:e6:e7:bd:e5:5e:94:b7:d5:fa:28:37:e2:a8:86:
                    9d:62:5f:9a:78:14:f5:27:76:e9:d3:87:c2:98:54:
                    21:91:58:1d:e7:a9:7c:d0:c7:9c:05:e1:c4:da:0a:
                    b4:c7:aa:b1:2d:1f:1b:d0:a3:16:ea:6b:48:6d:a9:
                    9c:c8:d9:5b:0e:6e:88:b9:8f:0a:7d:78:8a:b1:44:
                    94:c5:d7:f2:f9:a2:d1:1b:3e:f6:8a:34:4c:d7:7e:
                    bb:7e:69:b7:5d:45:0c:9f:22:ba:4c:2d:db:4e:6c:
                    25:94:10:81:5e:d0:16:cc:b0:3c:06:40:4a:b9:2d:
                    9f:c3:55:2b:bb:08:02:89:51:32:55:90:cd:e8:51:
                    cc:ca:b5:b8:ce:33:44:24:e4:a0:35:f6:e7:92:28:
                    3b:99:c3:39:55:a8:6f:3a:40:2f:16:2d:bd:a8:aa:
                    ac:da:44:65:c5:8e:f4:9a:b6:90:1a:95:7d:53:a0:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F1:EF:04:F7:59:1D:52:97:0B:66:F6:4B:1C:4E:CC:D3:25:CA:53
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:ee:d7:99:44:c0:25:a1:6b:be:99:76:12:41:50:ed:cb:43:
         3b:09:da:23:48:37:8a:b7:4b:16:a2:72:92:3d:73:f2:eb:47:
         07:66:e3:bf:b3:1e:48:5c:be:04:4e:e8:e3:d0:40:df:b5:a3:
         75:6c:48:45:b5:d7:37:05:dc:bd:99:bd:b1:41:b0:6a:1c:12:
         94:97:ad:81:df:23:ff:35:6e:58:fc:14:85:5f:e3:31:b6:ba:
         fb:85:de:9f:2c:8c:b9:67:0d:a6:66:0b:9e:ba:5b:c2:8f:6f:
         32:6f:5e:06:33:18:0f:e9:0e:a7:1b:0b:f5:76:c2:fa:fc:23:
         67:65:c6:9d:67:66:f3:f5:69:0f:ee:d7:fa:2a:f0:d9:c9:c6:
         ea:ae:44:45:ef:50:e3:2c:7b:96:ac:fa:09:9b:76:88:d5:fa:
         25:fa:40:d3:d8:9d:a4:e4:23:76:8a:7f:bc:d2:f8:09:46:d3:
         da:2e:c1:6a:9f:db:cf:68:cb:88:6b:74:42:94:0b:b2:b7:5a:
         48:6a:a1:bc:d3:84:ac:ad:fb:7e:88:5c:9a:9a:32:79:a6:02:
         0d:95:fc:4c:4d:4c:85:78:6a:fc:b0:5c:b2:a4:9b:b1:f3:02:
         2a:6f:31:eb:f8:16:76:3a:8a:d7:74:72:ba:98:d0:43:9a:e2:
         47:c5:98:b9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUUFaPoreWlflCLyyeAEaqSMy7bWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNDA4MTIyMDQwMTFaFw0yNTA4MTEyMDQ1MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUY2MUY4NUU3RUU2MzI1REFE
NDk0MEE5MzY4RTk4NDA4QTI3QzY1NDk2QkJDMENCNEI1RDg0RkU1Q0UzMURFMzhC
Nzk3REYwNkRDODAxRjI5RDc0MjREQzg1MUI3QTFCNTU4ODc4QTg5MDlFNEM1RTAx
M0YwMTJERDIzQjc1MUU4MUY2REZDQzlEOTlFQTQ5Mzg0MTAxRTZFN0JERTU1RTk0
QjdENUZBMjgzN0UyQTg4NjlENjI1RjlBNzgxNEY1Mjc3NkU5RDM4N0MyOTg1NDIx
OTE1ODFERTdBOTdDRDBDNzlDMDVFMUM0REEwQUI0QzdBQUIxMkQxRjFCRDBBMzE2
RUE2QjQ4NkRBOTlDQzhEOTVCMEU2RTg4Qjk4RjBBN0Q3ODhBQjE0NDk0QzVEN0Yy
RjlBMkQxMUIzRUY2OEEzNDRDRDc3RUJCN0U2OUI3NUQ0NTBDOUYyMkJBNEMyRERC
NEU2QzI1OTQxMDgxNUVEMDE2Q0NCMDNDMDY0MDRBQjkyRDlGQzM1NTJCQkIwODAy
ODk1MTMyNTU5MENERTg1MUNDQ0FCNUI4Q0UzMzQ0MjRFNEEwMzVGNkU3OTIyODNC
OTlDMzM5NTVBODZGM0E0MDJGMTYyREJEQThBQUFDREE0NDY1QzU4RUY0OUFCNjkw
MUE5NTdENTNBMDA0RDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn2H4Xn7mMl2tSUCpNo6YQIonxlSWu8DLS12E/lzjHeOLeX3wbcgB
8p10JNyFG3obVYh4qJCeTF4BPwEt0jt1HoH238ydmepJOEEB5ue95V6Ut9X6KDfi
qIadYl+aeBT1J3bp04fCmFQhkVgd56l80MecBeHE2gq0x6qxLR8b0KMW6mtIbamc
yNlbDm6IuY8KfXiKsUSUxdfy+aLRGz72ijRM1367fmm3XUUMnyK6TC3bTmwllBCB
XtAWzLA8BkBKuS2fw1UruwgCiVEyVZDN6FHMyrW4zjNEJOSgNfbnkig7mcM5Vahv
OkAvFi29qKqs2kRlxY70mraQGpV9U6AE0wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCvx7wT3WR1Slwtm9kscTszTJcpTMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMxMzczMDJlMzIzNDM3MmUzNDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM1MzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3
KDANBgkqhkiG9w0BAQsFAAOCAQEAH+7XmUTAJaFrvpl2EkFQ7ctDOwnaI0g3irdL
FqJykj1z8utHB2bjv7MeSFy+BE7o49BA37WjdWxIRbXXNwXcvZm9sUGwahwSlJet
gd8j/zVuWPwUhV/jMba6+4XenyyMuWcNpmYLnrpbwo9vMm9eBjMYD+kOpxsL9XbC
+vwjZ2XGnWdm8/VpD+7X+irw2cnG6q5ERe9Q4yx7lqz6CZt2iNX6JfpA09idpOQj
dop/vNL4CUbT2i7Bap/bz2jLiGt0QpQLsrdaSGqhvNOErK37fohcmpoyeaYCDZX8
TE1MhXhq/LBcsqSbsfMCKm8x6/gWdjqK13RyupjQQ5riR8WYuQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org