Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          qYWXEEdDMNw/VAY0cis2E2kQWljvGEkXYVi87KIlZMg=
Subject key identifier:   CE:4E:76:21:7E:52:03:24:B0:17:B7:23:FE:5A:32:17:5A:24:B5:23
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       70DEA11E3C18B32B37CA3627A9E9887AA1957814
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:23 +0000
ROA not before:           Sat 27 Jul 2024 21:08:23 +0000
ROA not after:            Sat 26 Jul 2025 21:13:23 +0000
asID:                     262485
IP address blocks:        170.238.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:de:a1:1e:3c:18:b3:2b:37:ca:36:27:a9:e9:88:7a:a1:95:78:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:23 2024 GMT
            Not After : Jul 26 21:13:23 2025 GMT
        Subject: CN=CE4E76217E520324B017B723FE5A32175A24B523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:87:84:49:e0:1e:75:65:bd:bf:b3:e2:dd:
                    29:5b:31:29:33:18:6d:43:a4:f4:b7:d4:4e:00:ac:
                    a8:9e:a3:75:2a:12:5d:78:e4:d6:66:9d:d7:e8:11:
                    16:71:a6:28:8d:52:28:47:ab:c5:30:f5:ed:6a:c3:
                    e4:e6:74:5d:9e:ed:d1:c8:13:53:1a:de:cf:d9:9c:
                    c6:23:7f:97:dd:c8:75:d4:51:a9:b8:58:de:43:01:
                    c4:48:05:aa:fc:09:ff:14:0e:7e:f5:bd:e2:5c:28:
                    31:26:0e:5e:b3:d4:f6:8c:1c:79:93:9a:8c:85:00:
                    d2:95:d5:fe:94:66:c4:0c:1f:f3:0b:9f:88:be:51:
                    fe:6a:9b:a9:ae:90:b5:79:5a:7e:42:a7:40:19:85:
                    59:b7:66:f5:f3:8a:29:0a:d5:eb:80:55:af:36:07:
                    2a:4f:85:d2:63:c1:56:9e:77:ed:45:34:7a:bb:a2:
                    6e:24:b6:50:6c:f2:73:ee:99:2c:57:2f:f4:d7:54:
                    16:f0:1f:2b:54:d8:de:30:d6:a4:4a:a5:3f:0f:e3:
                    8f:3d:ae:e4:43:6e:3b:f9:0b:65:4f:bd:51:b9:0a:
                    38:2e:48:aa:a1:08:8d:c1:7d:bf:3b:a6:d9:d3:77:
                    39:0e:a0:c5:41:0d:3b:7a:8d:f8:80:45:12:0d:31:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4E:76:21:7E:52:03:24:B0:17:B7:23:FE:5A:32:17:5A:24:B5:23
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137332e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:53:e4:ca:2e:5b:b6:df:c7:66:52:6c:8c:7e:5b:d5:0b:ce:
         4c:85:d0:a6:cf:55:3c:2b:65:e3:f2:c3:31:38:ff:f3:c7:e5:
         50:82:e6:7d:b7:13:23:a9:cc:f1:a8:f3:92:34:61:20:c0:5e:
         20:a8:1b:70:5a:d1:8e:33:7e:2c:fb:30:30:3e:dd:d2:28:a8:
         45:aa:7e:e7:73:55:3e:e6:16:ec:3c:32:69:a4:03:a2:2b:e5:
         f9:82:12:e1:d0:d5:42:5a:bc:a8:77:cf:71:cb:ea:00:46:ed:
         7d:bb:53:b3:96:f0:27:6f:ee:99:e6:c2:59:d0:bd:bd:a5:aa:
         c6:ae:19:0e:0d:7e:31:48:87:7d:ac:17:d7:1b:9b:94:ca:e0:
         3d:09:70:05:c4:52:86:10:fa:bd:18:24:b2:59:52:64:cb:4f:
         60:7e:5f:96:98:82:a2:76:42:cc:48:ff:41:35:77:90:01:08:
         0d:93:ee:7d:84:0c:f6:a4:00:f3:b4:f9:20:6b:c0:32:f0:4b:
         2d:a9:4f:3b:2b:89:0a:c8:a6:50:5b:a5:f2:e9:07:02:64:41:
         7f:0f:9b:c8:b8:8a:ba:e5:e5:49:89:bb:bf:bc:f7:af:86:7e:
         5b:b7:93:bb:84:14:56:b4:63:23:34:e2:98:28:38:51:a6:e3:
         19:f6:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:32 2024 by rpki-client on console-fra.rpki-client.org