Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa
File:                     3137302e38322e3136302e302f32322d3234203d3e203533313532.roa (raw, json)
Hash identifier:          HA6ghBhODTyKp3mfBVHgRIHq3O9Id11E7JqkJfq5iZ4=
Subject key identifier:   25:42:A7:AD:CF:58:EB:19:97:28:16:BB:38:A4:C6:85:82:25:F3:3B
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       03527B85E56CD74E378F7F0BFBA4BE7214AF26EB
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa
Signing time:             Thu 04 Apr 2024 04:07:10 +0000
ROA not before:           Thu 04 Apr 2024 04:02:10 +0000
ROA not after:            Thu 03 Apr 2025 04:07:10 +0000
asID:                     53152
IP address blocks:        170.82.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl
                          rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:52:7b:85:e5:6c:d7:4e:37:8f:7f:0b:fb:a4:be:72:14:af:26:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Apr  4 04:02:10 2024 GMT
            Not After : Apr  3 04:07:10 2025 GMT
        Subject: CN=2542A7ADCF58EB19972816BB38A4C6858225F33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:8c:39:16:30:27:78:cf:19:74:4a:11:41:
                    90:b1:5d:b7:9f:b6:c0:d5:39:d5:97:78:b7:2e:98:
                    37:83:d5:85:92:a4:35:bd:7c:35:13:b4:e7:58:68:
                    bd:e0:de:5d:05:e1:20:7c:23:0e:e5:b8:20:0b:41:
                    2c:22:ee:5e:c8:03:64:ad:2d:6b:ad:ce:01:a2:6a:
                    b0:d0:5c:ab:a9:c2:0b:15:0a:aa:0b:52:5c:f6:52:
                    1d:f8:ba:40:e1:75:95:61:d8:c3:6d:89:07:43:11:
                    a6:f0:cc:42:55:3c:07:7f:30:c0:af:9c:be:29:1d:
                    0d:39:f3:c0:7a:2a:57:82:50:b1:a9:5c:d0:74:1f:
                    d5:04:15:01:ad:b6:3a:6a:7e:04:c2:d2:d2:1f:dd:
                    54:f5:01:7a:26:c5:11:fa:dd:68:f2:36:60:d8:d6:
                    e0:b0:42:87:95:02:cb:8f:19:c6:da:7b:d9:84:6b:
                    eb:b6:bc:80:d2:b2:78:92:42:db:09:aa:bf:4b:17:
                    c3:5b:e0:aa:67:0a:c8:32:51:53:df:d1:a0:bf:32:
                    fc:24:ca:b4:18:52:b8:a4:2a:2f:2a:05:73:cc:d1:
                    be:27:4a:1b:40:62:96:10:e8:67:5f:30:a1:04:4a:
                    b9:51:52:7c:b9:2b:ab:fc:3a:d4:e7:03:09:e7:32:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:42:A7:AD:CF:58:EB:19:97:28:16:BB:38:A4:C6:85:82:25:F3:3B
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:17:8a:2f:71:97:18:91:be:a9:86:37:64:44:af:9a:47:c7:
         5d:38:be:8a:74:ae:1c:57:cc:5f:cc:73:03:1e:ec:7a:79:c6:
         02:48:3e:e8:8e:8d:ac:1e:3b:38:e6:d6:c1:87:5b:1e:66:4e:
         3c:d8:41:d0:04:d9:c4:a8:63:95:17:10:87:20:03:4a:7f:94:
         0a:ce:f0:71:10:d7:39:3b:96:7c:b3:e4:c2:8c:cd:0b:45:a3:
         b7:3f:c1:27:dc:4f:e4:3c:a9:64:6f:2b:9f:5f:a2:e9:74:4a:
         a6:cb:52:c8:3f:65:ce:b6:20:6d:5c:86:cc:9e:48:e2:45:c2:
         68:1d:9d:42:6a:60:18:18:74:05:0a:dd:13:04:ae:6f:2b:e5:
         7a:e7:1e:be:3e:16:6d:68:22:06:39:96:97:5e:61:09:d8:99:
         3f:22:db:8a:af:b6:e1:a7:05:a8:2b:c7:50:7c:94:b4:48:d2:
         a7:50:34:fa:e5:e1:49:41:0c:03:93:a5:a5:4d:8e:a5:86:ad:
         cb:15:03:f2:db:cf:fd:a9:08:c6:7d:da:1e:17:72:86:1a:6f:
         bf:54:6e:a5:c2:a2:2c:cf:0b:52:8b:31:09:b3:c6:65:78:df:
         72:eb:21:a7:09:27:81:e6:26:16:49:0b:e4:68:cb:12:98:75:
         7b:11:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-fra.rpki-client.org