Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa
File:                     3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (raw, json)
Hash identifier:          3uUIDh/n2Yk+a80/DU/nM5gU5c/HAxZ8biWudvwKpbs=
Subject key identifier:   30:A3:84:D5:CC:B8:DE:93:9D:FE:10:75:D6:D8:AB:5A:88:8A:61:85
Certificate issuer:       /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Certificate serial:       5D35590562FB69A956D33D387DAC2E5C54E0230D
Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa
Signing time:             Thu 04 Apr 2024 11:38:36 +0000
ROA not before:           Thu 04 Apr 2024 11:33:36 +0000
ROA not after:            Thu 03 Apr 2025 11:38:36 +0000
asID:                     266360
IP address blocks:        170.239.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:35:59:05:62:fb:69:a9:56:d3:3d:38:7d:ac:2e:5c:54:e0:23:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
        Validity
            Not Before: Apr  4 11:33:36 2024 GMT
            Not After : Apr  3 11:38:36 2025 GMT
        Subject: CN=30A384D5CCB8DE939DFE1075D6D8AB5A888A6185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:5e:0c:25:74:f1:7e:bf:52:cd:0e:2a:cd:
                    7b:a3:84:b0:ff:2a:7b:71:ec:56:14:c7:0c:b1:04:
                    0c:14:44:31:72:4a:dc:fe:e2:66:d5:bc:3d:01:d5:
                    d4:b8:a1:b2:ce:15:fe:4f:bf:64:16:9a:08:30:be:
                    14:0c:ab:9a:0b:5d:62:55:30:f0:a3:c8:b3:39:67:
                    f1:42:a9:9b:4f:96:42:45:49:5a:81:d0:be:8b:40:
                    d4:a2:e1:52:bd:fd:34:65:07:09:a1:4b:a3:53:f9:
                    62:f4:9d:5a:c9:90:0f:90:d0:12:ee:a1:19:69:4d:
                    a1:22:3e:5c:f3:5e:3f:9b:6a:40:81:10:75:b5:5f:
                    15:e4:47:9d:71:2a:a8:49:da:3d:62:d2:51:84:7a:
                    89:9d:7e:fc:17:c1:76:02:dc:ce:d6:8e:f3:bc:e2:
                    0d:48:e4:af:70:a7:fd:83:a4:71:ac:09:20:ec:7e:
                    ab:47:5a:5a:1a:e6:06:c3:f3:a6:3c:76:98:99:2a:
                    df:67:ee:07:1e:c7:56:c4:4c:36:f6:14:52:03:45:
                    4d:b2:9d:ee:ec:34:6b:e4:95:22:3a:44:3e:55:aa:
                    0f:4d:a7:e7:ff:a9:4f:20:13:4f:b1:3d:e0:5d:14:
                    26:7c:8c:8b:7b:d2:c3:53:0f:9f:37:4e:0b:aa:c7:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A3:84:D5:CC:B8:DE:93:9D:FE:10:75:D6:D8:AB:5A:88:8A:61:85
            X509v3 Authority Key Identifier:
                keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:e5:f0:ab:13:19:66:a4:2b:63:e9:9a:b0:1a:0b:f6:c7:
         8e:ce:00:25:0f:22:44:d2:cf:da:f6:ef:4c:f6:c7:16:77:04:
         f2:58:30:39:8c:25:ab:59:ff:b4:7e:82:83:f2:9f:fd:79:dd:
         46:1a:95:f5:c3:a9:70:d7:98:03:55:c8:b3:31:b4:27:69:cc:
         7b:47:3b:e2:87:41:01:26:a6:80:31:d7:5e:7f:7a:e9:bf:f1:
         7a:f7:84:73:13:17:08:16:4b:a8:4e:18:07:45:0e:d3:00:c0:
         fe:9b:9f:7d:27:59:cf:e8:71:e1:ab:a7:b4:14:cb:f6:6b:a8:
         7d:f3:72:8b:cb:45:e4:24:1d:d2:3d:d3:ad:9c:a1:ac:ee:9a:
         79:4a:4c:77:8c:27:29:03:5f:1d:b5:a5:3b:36:14:6c:3f:d0:
         b7:7a:5b:e3:b3:e8:dc:6a:54:d0:12:d4:ed:16:88:f9:4c:e5:
         3e:a2:1e:28:fc:b5:1f:46:10:00:4d:c5:71:0a:fa:e5:b5:19:
         7f:5e:f6:44:d6:20:75:47:48:d2:25:94:84:80:d7:ba:27:54:
         a7:15:18:45:8e:26:61:33:0e:47:2d:f5:9a:92:a8:8c:99:aa:
         cb:b8:7e:38:74:28:2b:fd:3a:62:60:ab:04:ef:89:fc:a9:d9:
         fd:0b:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org