Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235342e302f32342d3234203d3e20323636343630.roa
File:                     3137302e38322e3235342e302f32342d3234203d3e20323636343630.roa (raw, json)
Hash identifier:          Bd9zHWZeVjLX8uD2lJuMk3tisBQjNFPKf0WHlnUVAvY=
Subject key identifier:   D5:F3:96:85:5B:5B:D6:60:60:C3:1F:22:BC:31:49:26:37:C1:91:94
Certificate issuer:       /CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
Certificate serial:       38C35EEC1FA41E615AA8741D9AF444C73B3B3519
Authority key identifier: 46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235342e302f32342d3234203d3e20323636343630.roa
Signing time:             Sat 15 Jun 2024 18:01:11 +0000
ROA not before:           Sat 15 Jun 2024 17:56:11 +0000
ROA not after:            Sat 14 Jun 2025 18:01:11 +0000
asID:                     266460
IP address blocks:        170.82.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c3:5e:ec:1f:a4:1e:61:5a:a8:74:1d:9a:f4:44:c7:3b:3b:35:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
        Validity
            Not Before: Jun 15 17:56:11 2024 GMT
            Not After : Jun 14 18:01:11 2025 GMT
        Subject: CN=D5F396855B5BD66060C31F22BC31492637C19194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:89:8a:9d:87:b7:d1:72:aa:ff:f9:83:8b:
                    27:a5:dd:10:6c:34:a1:53:88:bf:e8:a2:be:34:a6:
                    72:b2:26:7c:c2:b8:ae:41:08:31:43:a3:ec:ba:ad:
                    b8:90:45:b1:00:48:95:a2:5b:50:3f:a0:e3:f7:a3:
                    20:38:94:43:c7:c7:19:1b:26:12:c8:b9:00:30:33:
                    a9:fa:53:4e:55:25:f4:f1:dd:a3:df:e0:4d:bb:75:
                    cf:8d:44:c4:e7:6e:5b:95:61:c1:ec:1f:04:d6:b5:
                    99:2e:15:cb:01:f0:22:68:b5:a2:38:eb:e4:5a:a4:
                    60:a1:54:6e:c4:e1:42:7e:4c:2a:3f:72:8e:85:e8:
                    c8:b7:89:b0:b0:b6:f9:1f:bf:64:51:9c:7d:5f:3f:
                    d5:e9:e9:7c:d2:b9:43:c2:08:21:3a:4d:de:78:10:
                    30:88:1c:4a:8e:da:4b:25:fd:7d:96:38:90:98:ec:
                    7c:a1:63:dc:d0:a0:b0:f0:9d:9c:d1:b3:24:df:c7:
                    81:03:dd:e5:32:61:cd:ff:12:ec:d1:6c:c7:7e:94:
                    2a:40:a6:f2:23:f9:22:11:e2:e0:9b:c4:70:65:9d:
                    79:2f:ee:4f:c2:d1:52:49:c2:9a:00:e4:5f:fe:43:
                    c3:ab:bc:5b:38:6d:aa:2d:d1:6c:84:46:df:84:5e:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:96:85:5B:5B:D6:60:60:C3:1F:22:BC:31:49:26:37:C1:91:94
            X509v3 Authority Key Identifier:
                keyid:46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235342e302f32342d3234203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c9:24:7d:cd:9a:c7:7b:71:e4:07:64:8f:83:32:f2:e7:0c:
         41:b5:b3:5d:e9:99:79:9c:e6:68:64:6a:c9:eb:be:0f:aa:e7:
         22:50:5a:d1:8f:d2:10:bc:21:d4:74:e5:13:22:b1:f1:a9:d8:
         d9:2d:8c:34:6e:33:b8:9d:6e:55:79:ec:d2:16:12:57:70:6f:
         0d:46:32:f2:93:8c:6b:03:61:20:8e:ba:f7:ca:bc:9c:03:a8:
         06:ca:6d:e5:2c:1d:ac:56:66:65:31:97:a7:be:4f:48:bf:3c:
         69:29:ae:9d:06:f6:88:be:73:9e:9c:22:f9:7a:e2:f2:1b:c9:
         8a:b0:72:e8:95:0a:c3:8d:2c:45:fe:c9:13:90:d9:b1:53:7b:
         d0:6f:19:bd:8c:10:27:a5:1a:de:c2:21:6b:22:34:98:75:b6:
         a5:79:bd:18:e9:72:1b:d7:67:72:f7:d0:29:9d:aa:c8:c7:94:
         77:88:52:25:1d:40:ea:54:9f:56:8d:41:1c:b8:df:85:92:51:
         9b:b3:37:0a:79:4c:95:de:97:dd:72:6a:8b:a0:b3:43:49:9a:
         5e:6d:ac:51:b7:3f:d7:f0:e3:7a:19:ae:87:30:e9:20:14:68:
         bb:6b:d6:cf:7d:21:2b:07:54:4d:47:51:25:61:e7:d7:ef:cb:
         f7:c7:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 10:42:46 2024 by rpki-client on console-ams.rpki-client.org