Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
File:                     3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (raw, json)
Hash identifier:          oQfhBICOgDiXGYjqXNJiI7zc6cnpGG9rfIX9o9LhZug=
Subject key identifier:   8B:D9:3D:C1:D9:C8:80:53:F1:05:0B:8A:4D:88:D5:BA:CE:25:9B:D6
Certificate issuer:       /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial:       02AFE53392638DAD417AF87F8B4B06BBA7CA1588
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
Signing time:             Fri 05 Apr 2024 03:52:45 +0000
ROA not before:           Fri 05 Apr 2024 03:47:45 +0000
ROA not after:            Fri 04 Apr 2025 03:52:45 +0000
asID:                     263919
IP address blocks:        170.0.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
                          rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:af:e5:33:92:63:8d:ad:41:7a:f8:7f:8b:4b:06:bb:a7:ca:15:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
        Validity
            Not Before: Apr  5 03:47:45 2024 GMT
            Not After : Apr  4 03:52:45 2025 GMT
        Subject: CN=8BD93DC1D9C88053F1050B8A4D88D5BACE259BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:27:8e:b1:db:dc:3d:23:8f:ba:8c:b4:ae:
                    ae:db:05:3c:3b:1a:47:e5:2b:0a:3f:78:65:cc:57:
                    54:a8:cb:32:01:8c:6d:ff:a3:e8:24:60:0f:0f:0f:
                    63:c3:0b:1f:3c:73:58:2e:72:c8:a7:f6:da:c7:ad:
                    e5:9a:f7:a6:5a:ae:18:e5:17:e7:ce:3c:4c:c7:00:
                    8f:ae:42:86:74:4a:17:8a:8a:48:71:d3:f7:e4:34:
                    5f:62:63:e6:88:dc:9f:5e:06:84:ec:33:a2:88:52:
                    27:21:7a:ab:b4:b1:e2:4b:2a:95:a0:b5:22:43:06:
                    ad:c5:ff:7f:3d:29:d6:f6:b2:eb:d0:47:5e:70:9b:
                    12:31:12:c4:23:a3:50:9d:04:c6:dd:82:cc:1c:fb:
                    8c:a9:d9:d4:bf:1b:3d:85:ee:52:8a:4e:7e:27:d8:
                    e4:8b:68:72:9f:5b:7c:49:f9:6d:33:b4:5a:29:a9:
                    a6:54:f8:3c:ea:c1:73:d1:10:1c:73:6d:01:8f:5b:
                    81:30:27:be:4d:d4:88:8b:79:bb:91:a3:f2:66:98:
                    d2:23:e7:4f:33:82:3c:e9:f5:93:e8:52:3c:51:38:
                    cd:a6:1e:58:5a:8d:ba:14:90:5a:69:25:fe:a5:a5:
                    16:5a:b2:a0:17:db:fc:6a:81:fe:4f:86:8e:3b:3c:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:3D:C1:D9:C8:80:53:F1:05:0B:8A:4D:88:D5:BA:CE:25:9B:D6
            X509v3 Authority Key Identifier:
                keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:7c:11:e0:b8:9d:62:75:44:df:ac:c5:de:d2:95:b7:56:
         da:70:04:a2:fe:5a:e2:87:8d:2e:be:32:f6:d5:97:04:9c:e1:
         17:34:f9:17:df:17:0e:7f:16:cb:73:65:03:a0:44:d5:21:b5:
         e0:72:c5:13:b8:d9:e5:11:44:d7:8c:c8:5c:b6:7f:c5:00:64:
         a8:17:dc:7b:ae:b9:8a:0a:97:1b:29:81:94:72:fa:76:80:56:
         24:24:11:3c:fd:33:25:70:04:ff:dd:76:e8:f7:11:d1:fa:ea:
         a6:15:80:ee:08:60:20:2f:f8:34:ca:e7:0f:2e:e3:52:41:6e:
         de:c5:c5:48:0a:14:a9:5b:87:dd:96:b6:07:3e:f6:18:de:d8:
         3c:78:f2:e2:ac:a8:b5:f8:02:30:61:fe:53:94:e3:bd:6b:38:
         29:d4:3c:bb:a8:a7:44:be:e1:c9:19:5a:62:96:9e:5e:5d:f4:
         02:cb:69:cb:b8:26:26:6e:39:b4:d5:51:c4:6d:73:fa:27:e9:
         96:4a:e4:f7:cb:b8:0e:88:60:44:f8:29:e3:1c:2d:66:e5:0d:
         8e:44:39:60:35:76:ee:d5:64:09:1e:f0:42:29:73:6a:65:54:
         bb:bc:d8:d3:a8:f4:81:a6:2f:fb:fd:6e:ad:5a:d8:cb:8b:25:
         d0:d8:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org