Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32322d3234203d3e203631393030.roa
File:                     3137302e3234372e342e302f32322d3234203d3e203631393030.roa (raw, json)
Hash identifier:          wusqo5L3rhOHCVnAeHDcu1nqYqeLVW09TmWoP0QQABE=
Subject key identifier:   5B:E1:83:E6:8A:96:41:14:5E:1F:B0:A7:26:2F:CA:4C:C2:A4:9B:C9
Certificate issuer:       /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial:       38DD42461F2A53094F454A4CAE3E99B982474BEF
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32322d3234203d3e203631393030.roa
Signing time:             Mon 07 Oct 2024 19:22:15 +0000
ROA not before:           Mon 07 Oct 2024 19:17:15 +0000
ROA not after:            Mon 06 Oct 2025 19:22:15 +0000
asID:                     61900
IP address blocks:        170.247.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dd:42:46:1f:2a:53:09:4f:45:4a:4c:ae:3e:99:b9:82:47:4b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
        Validity
            Not Before: Oct  7 19:17:15 2024 GMT
            Not After : Oct  6 19:22:15 2025 GMT
        Subject: CN=5BE183E68A9641145E1FB0A7262FCA4CC2A49BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:64:cb:09:bc:35:05:7d:77:83:41:59:bd:
                    db:69:8b:fc:69:c7:07:9b:03:a6:c7:8b:a9:fc:f9:
                    57:8f:fc:e9:dc:25:d5:5e:31:6c:d6:96:e2:27:06:
                    03:48:d7:0a:7d:6d:f4:e2:49:5a:ae:fe:62:61:25:
                    dc:c3:8f:7b:45:5f:9d:d6:cc:fd:e0:9f:c6:6c:3c:
                    33:8c:4c:7c:13:6d:e7:4d:93:cd:b7:ac:74:14:91:
                    0b:ad:f0:7a:a0:9f:57:ce:5c:09:7a:c4:7b:1b:25:
                    f2:49:57:1b:91:26:f1:68:f5:95:1c:84:da:8b:58:
                    ce:31:e6:6e:01:61:34:32:47:e3:11:96:7e:6f:41:
                    2e:f9:ab:83:d8:2f:5e:0c:76:e2:6a:32:eb:cb:12:
                    e6:16:36:5c:b4:ef:2b:13:70:ad:50:88:ba:4b:34:
                    34:e6:ea:a8:e6:2d:04:b1:cb:bc:d0:01:23:46:40:
                    f5:63:fd:10:91:f6:23:5b:95:83:2e:c5:e8:49:09:
                    96:5a:c8:e4:90:ec:53:6b:3c:ed:3a:cd:43:39:5a:
                    fa:12:c2:1e:ce:ba:c1:6f:0c:b2:d8:0b:7a:d2:d8:
                    a2:a8:5e:33:32:3c:bb:42:e4:2c:86:36:9a:2a:3a:
                    7d:88:6b:9a:a3:a2:26:33:1f:73:ab:4c:b1:b6:53:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E1:83:E6:8A:96:41:14:5E:1F:B0:A7:26:2F:CA:4C:C2:A4:9B:C9
            X509v3 Authority Key Identifier:
                keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e342e302f32322d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:64:97:42:67:c0:8c:a5:36:fd:5e:6f:7a:a2:45:1d:16:46:
         86:97:64:12:85:ac:a5:d5:cc:46:fd:70:19:e5:a9:55:2c:f5:
         89:b5:cf:b9:52:98:e0:be:16:cf:90:66:90:93:64:46:a1:34:
         3b:57:a1:c7:67:88:bf:7a:47:9b:f8:d8:dc:eb:d5:2e:8a:a8:
         4a:b2:ad:5e:90:86:52:7d:a3:cc:5e:f6:40:a4:fc:76:88:5b:
         b1:9a:a5:8c:a9:b2:95:10:2b:5a:05:c0:a3:47:58:db:bf:d4:
         1b:f2:8b:93:23:e7:fc:d6:54:ee:9d:72:68:f5:15:cb:c2:29:
         b6:6f:55:d2:97:dd:47:08:a1:ad:04:29:f1:fb:8f:c3:47:4c:
         c2:e2:3d:9c:de:22:8c:22:5a:a6:38:a4:53:71:c4:93:13:5c:
         60:bb:bc:66:0d:e9:34:29:5c:62:ab:b4:41:b1:14:b7:8b:76:
         bc:7a:2e:c8:75:48:be:35:af:82:28:10:b3:65:b3:16:ec:98:
         03:f6:22:60:a7:b5:0e:a3:c3:3d:c1:fb:21:b6:ca:4e:20:db:
         2e:68:d0:31:e4:a9:6e:4e:8f:68:25:60:1c:73:cd:f5:b0:e1:
         8b:f5:ea:2c:45:73:2b:e7:1b:42:48:e5:84:23:1b:ff:74:a2:
         75:aa:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:51 2024 by rpki-client on console-fra.rpki-client.org