Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3332203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (raw, json)
Hash identifier:          wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=
Subject key identifier:   DB:55:FD:AF:E6:DD:D1:23:A2:DE:5B:43:C6:E2:06:C5:8B:7F:D4:6D
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       165272203A8BA9D32838C4C5E92E5213AF01836A
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3332203d3e20323633353238.roa
Signing time:             Thu 07 Nov 2024 14:01:13 +0000
ROA not before:           Thu 07 Nov 2024 13:56:13 +0000
ROA not after:            Thu 06 Nov 2025 14:01:13 +0000
asID:                     263528
IP address blocks:        170.254.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:72:20:3a:8b:a9:d3:28:38:c4:c5:e9:2e:52:13:af:01:83:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Nov  7 13:56:13 2024 GMT
            Not After : Nov  6 14:01:13 2025 GMT
        Subject: CN=DB55FDAFE6DDD123A2DE5B43C6E206C58B7FD46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:db:02:31:ec:7d:d2:2a:f2:0b:45:ca:d7:
                    ef:e4:05:27:50:66:2b:3d:7a:73:76:9a:a9:71:3f:
                    49:67:86:ad:2e:76:e6:97:1a:f5:96:c3:42:f3:7b:
                    f8:52:54:0b:e9:4b:60:5b:1c:d8:cd:8d:d7:3c:0d:
                    e3:34:ea:f0:b4:6a:f4:c6:61:33:31:17:dd:6a:0b:
                    f6:4a:c6:f8:49:67:25:1b:44:5c:69:b1:c9:13:5a:
                    a0:06:28:47:2d:df:f0:c4:db:d0:ee:82:8e:48:ef:
                    09:c2:48:38:77:d4:6b:db:67:4a:10:04:32:d6:a3:
                    a6:90:6c:ca:e1:f4:c8:1f:50:13:5e:2d:02:0f:15:
                    51:cc:70:54:6c:ca:73:bf:fd:14:71:57:36:01:09:
                    03:6a:c1:42:18:f1:55:7a:28:e1:50:84:80:b2:eb:
                    08:18:e8:62:da:a3:17:2d:c7:72:0f:fd:f5:00:1a:
                    ac:a6:e6:17:f1:34:13:6c:26:2d:20:31:24:08:6e:
                    be:c2:e5:bc:c4:56:09:99:97:0c:62:8b:77:b1:d9:
                    70:b3:d4:1d:bb:0a:f1:07:75:36:f6:7f:e5:1c:2d:
                    36:bf:75:18:10:e8:88:63:e0:db:b5:b6:c5:88:18:
                    a2:97:9d:38:c0:b7:1d:24:bc:65:4d:34:b3:fd:b9:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:55:FD:AF:E6:DD:D1:23:A2:DE:5B:43:C6:E2:06:C5:8B:7F:D4:6D
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3332203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:73:2c:63:bd:26:ad:e7:fd:3d:2e:04:f3:d7:bd:48:85:
         5b:ed:dc:69:67:0c:46:98:f7:86:c1:44:3a:cb:df:e3:5a:f3:
         70:83:b0:1c:8e:67:fc:8d:07:5a:4c:80:19:41:63:2d:31:62:
         6c:de:65:22:0a:7a:7f:a0:93:b7:1a:6b:f0:fb:52:70:85:74:
         6c:0c:a6:9a:11:8f:59:7f:9f:c8:74:8f:26:ae:89:88:d2:37:
         01:37:3b:9b:d5:f5:4f:41:2c:cc:ad:52:fb:9a:c0:bb:65:06:
         6a:96:4d:82:37:03:1f:34:e6:16:f1:f3:0a:80:ce:36:d4:8a:
         1c:d8:1e:54:b3:39:37:fa:46:b6:e6:f2:03:62:da:05:92:13:
         76:1c:68:83:f8:02:d8:69:91:dc:6d:f5:3c:15:96:dc:1b:d7:
         89:70:c9:ff:0d:18:cc:64:70:d7:1f:b9:83:96:b5:be:fd:1d:
         d8:e8:01:30:24:ab:a1:20:ab:bd:58:bd:b4:61:18:39:61:42:
         85:cb:7d:5a:b2:31:f8:2c:a8:82:75:5a:fc:1d:c9:29:c6:7e:
         26:09:d6:0a:27:2a:78:76:ba:22:46:a7:9d:11:fc:30:4e:3b:
         cb:1e:e9:1a:b7:a1:b6:d9:83:b4:22:6f:a5:a1:c6:8e:8b:5b:
         b7:1a:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:02 2024 by rpki-client on console-fra.rpki-client.org