Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32322d3234203d3e20323636343436.roa
File:                     3137302e38322e3139322e302f32322d3234203d3e20323636343436.roa (raw, json)
Hash identifier:          mowIPFRKLt8xgaBPhCaPtYcqMn2BgD9gt18R+KhS7CA=
Subject key identifier:   A8:09:F6:97:CF:FE:77:11:DC:E4:0F:22:59:67:71:E4:18:BF:30:8C
Certificate issuer:       /CN=C14FC28CF60C23B61EE423210818638E76BDD5F0
Certificate serial:       4E091D1DFEB73D6F71ECB1EB84B7CD275674B845
Authority key identifier: C1:4F:C2:8C:F6:0C:23:B6:1E:E4:23:21:08:18:63:8E:76:BD:D5:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32322d3234203d3e20323636343436.roa
Signing time:             Tue 30 Jul 2024 21:24:59 +0000
ROA not before:           Tue 30 Jul 2024 21:19:59 +0000
ROA not after:            Tue 29 Jul 2025 21:24:59 +0000
asID:                     266446
IP address blocks:        170.82.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:09:1d:1d:fe:b7:3d:6f:71:ec:b1:eb:84:b7:cd:27:56:74:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14FC28CF60C23B61EE423210818638E76BDD5F0
        Validity
            Not Before: Jul 30 21:19:59 2024 GMT
            Not After : Jul 29 21:24:59 2025 GMT
        Subject: CN=A809F697CFFE7711DCE40F22596771E418BF308C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:4e:4a:c4:d4:3f:eb:0a:da:cc:16:fa:0f:
                    59:9b:73:ff:40:14:c8:95:4b:fc:98:70:11:8b:c9:
                    64:9f:7e:d5:6b:f8:85:6d:a6:60:95:7d:de:3e:65:
                    a2:01:b8:59:ae:e8:c9:37:5e:e9:06:56:7a:26:db:
                    e0:3b:72:32:30:a8:0c:0d:27:64:d5:20:0d:2f:0f:
                    c3:8d:fb:b2:d6:2f:48:84:85:8a:df:f8:c9:30:9b:
                    65:9c:eb:36:c9:b7:25:16:36:83:57:84:54:1a:ed:
                    5f:60:9e:a1:d1:dd:80:43:84:1d:8a:f0:bd:e9:35:
                    43:5a:ed:4b:07:56:f5:50:21:78:e3:59:ff:2b:3e:
                    5a:76:57:ff:35:e3:38:73:2e:33:07:15:34:09:0c:
                    aa:d3:35:1e:c4:4c:63:ba:ee:40:d2:5e:a8:98:36:
                    81:29:cd:3a:4a:95:b2:ea:a2:05:5e:9e:02:24:2a:
                    02:b0:0c:e6:72:8d:cc:e6:5a:d2:82:03:b7:1b:b7:
                    a0:93:88:d3:4a:58:38:e9:c3:10:32:4c:c8:ac:9a:
                    cd:99:fb:1e:f3:80:98:b5:be:f1:48:34:29:d1:9b:
                    f4:d2:ee:b9:5d:f0:a5:2f:0f:8d:87:a6:d8:d2:52:
                    cd:59:ce:ea:e5:97:b8:c4:22:e9:87:f9:57:ea:cc:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:09:F6:97:CF:FE:77:11:DC:E4:0F:22:59:67:71:E4:18:BF:30:8C
            X509v3 Authority Key Identifier:
                keyid:C1:4F:C2:8C:F6:0C:23:B6:1E:E4:23:21:08:18:63:8E:76:BD:D5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32322d3234203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:43:8f:ef:51:84:9c:ec:ed:fe:29:bb:4c:3d:a0:be:72:71:
         a0:30:c1:61:32:01:c5:a4:e8:a5:d1:a1:3f:fd:7f:6b:6f:23:
         84:8d:77:0e:95:51:c9:e3:b7:c5:b7:7f:78:fe:d9:09:ef:29:
         56:ab:01:36:4d:c6:2c:8e:c8:bd:0c:b0:8d:d1:58:16:aa:4f:
         e9:80:d5:d2:84:08:f1:cf:da:bd:1d:4f:0b:4a:4d:2a:60:b9:
         bf:d0:d8:cc:ee:4e:ef:61:0d:04:84:e3:2d:c7:64:bd:86:5a:
         95:58:d2:41:79:57:6d:88:f6:89:aa:75:f4:04:97:f5:e4:64:
         60:f7:08:4e:53:95:4f:47:cf:1c:03:fb:7c:12:49:89:43:f4:
         7e:ce:88:31:16:08:98:15:96:43:05:c0:5b:1d:e4:e3:03:2a:
         d9:b1:37:06:cf:85:e4:7f:fc:e2:df:5c:c9:bd:62:31:ce:a1:
         bd:6d:c3:5a:10:30:29:bb:a9:67:79:30:10:31:43:d7:39:ad:
         5a:fc:82:42:ac:d9:29:b2:57:44:c6:b0:a0:48:f8:f1:82:96:
         23:0c:ff:84:33:90:bc:e6:1e:34:06:d3:96:be:68:0f:c5:a7:
         f8:41:2e:b4:b8:86:0f:d2:60:76:1f:cb:ba:f0:e3:94:35:b5:
         92:db:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:45 2024 by rpki-client on console-ams.rpki-client.org