Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa
File:                     3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa (raw, json)
Hash identifier:          7/m6UlyxK9DrbHmfJHtrkdpDASnpd4Rsr8MhZXcx2mI=
Subject key identifier:   44:7F:2D:EF:41:82:72:A2:16:68:C3:1F:CC:28:FC:12:25:BF:E9:1A
Certificate issuer:       /CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
Certificate serial:       473E8906DD9FBE5BFEBCAC5F250FDF81CD9529F9
Authority key identifier: 7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa
Signing time:             Fri 27 Sep 2024 19:19:23 +0000
ROA not before:           Fri 27 Sep 2024 19:14:23 +0000
ROA not after:            Fri 26 Sep 2025 19:19:23 +0000
asID:                     61574
IP address blocks:        138.185.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl
                          rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3e:89:06:dd:9f:be:5b:fe:bc:ac:5f:25:0f:df:81:cd:95:29:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
        Validity
            Not Before: Sep 27 19:14:23 2024 GMT
            Not After : Sep 26 19:19:23 2025 GMT
        Subject: CN=447F2DEF418272A21668C31FCC28FC1225BFE91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:6f:29:37:db:98:fa:9f:80:75:da:d2:94:
                    7e:54:32:2e:73:6f:3a:57:83:e3:fc:67:78:79:95:
                    0b:c9:af:de:64:40:fb:2a:65:84:97:41:69:89:52:
                    2e:c7:7a:55:fc:31:c3:da:aa:99:40:99:12:a9:1e:
                    b0:51:7b:7e:e3:d1:01:b7:24:cd:d7:26:26:54:33:
                    a7:f4:2d:2a:ed:d7:37:c9:43:e9:71:37:a3:b1:db:
                    8a:dd:5f:1e:9b:2f:3f:a0:64:31:d7:ab:33:d3:17:
                    a0:e6:a9:62:8b:54:d4:34:da:97:2f:5a:d1:28:d9:
                    42:cc:ba:1f:e1:1c:ee:69:52:6a:1c:1a:5b:38:ae:
                    32:4c:1e:f7:4e:03:4b:4a:bd:72:73:51:e9:73:62:
                    ef:ec:2a:81:eb:f4:8a:5f:8c:d4:a6:5a:1b:ec:95:
                    67:50:3a:8f:e8:69:cb:08:f8:2e:f7:a1:a5:de:a3:
                    a3:2e:ec:32:2b:51:ee:a8:15:58:09:e5:70:98:f7:
                    05:ec:9b:43:ff:c1:91:91:5b:6f:17:9d:70:23:a1:
                    d1:da:b8:7b:04:34:0b:1a:36:a3:9d:c1:ab:66:ed:
                    3b:ab:0c:18:3a:aa:2e:47:c9:48:ae:2b:30:f9:4c:
                    e4:09:b2:c6:df:e8:14:94:54:52:75:40:b4:8c:07:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7F:2D:EF:41:82:72:A2:16:68:C3:1F:CC:28:FC:12:25:BF:E9:1A
            X509v3 Authority Key Identifier:
                keyid:7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:08:a1:1f:00:1c:47:15:7f:e9:ee:36:cb:91:a6:7d:23:90:
         6e:ca:a0:2c:0f:e7:c0:ec:d2:52:47:9a:68:1e:b8:b2:f8:9e:
         5d:11:11:2b:0d:ef:00:87:d6:c9:58:42:f9:2a:97:9a:79:85:
         47:91:33:64:de:87:63:dc:3e:18:d4:44:80:4d:c1:cd:a5:1a:
         ac:7e:b3:6a:01:9c:53:62:4a:c7:4a:c3:51:fd:22:26:05:75:
         af:77:d3:49:34:68:77:2a:55:66:ba:de:ff:37:e6:94:d8:bc:
         4f:72:3f:ba:e0:92:ae:63:3c:04:4f:ae:de:bc:61:e7:cb:9e:
         c4:a0:08:0f:2d:5b:56:33:5c:44:d2:3b:43:aa:d6:73:f4:c1:
         78:3f:a3:6b:bd:3c:13:93:42:17:9d:61:4f:4c:15:dc:d9:3e:
         43:6f:5b:b1:69:d5:e9:1a:cc:0c:b0:5f:cb:e6:eb:95:90:6c:
         77:ed:c6:43:11:b6:bb:b8:0b:a9:2d:0a:0a:f5:8f:ef:e7:0f:
         7b:a5:a4:18:15:a2:da:62:f8:88:5b:a8:55:30:3f:6e:66:7b:
         20:2d:84:d1:6b:f7:4e:7d:21:1c:1f:c1:eb:98:1d:e6:fa:9a:
         c4:0b:e0:35:f2:b1:71:ac:7e:8b:a8:f5:77:bb:10:79:09:07:
         8a:ba:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:21 2025 by rpki-client