Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa
File:                     3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          Vo3XKbrN2IunO0RmHckOo/tex1qWwXnJwbn7ZzhjDLI=
Subject key identifier:   E9:0F:1C:63:30:D5:95:DF:00:00:EB:56:2F:AC:11:A7:49:11:BC:05
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       6A23284CE5D763D1C20BC253E1A266C97667535A
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:23 +0000
ROA not before:           Sat 27 Jul 2024 21:08:23 +0000
ROA not after:            Sat 26 Jul 2025 21:13:23 +0000
asID:                     262485
IP address blocks:        170.238.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:23:28:4c:e5:d7:63:d1:c2:0b:c2:53:e1:a2:66:c9:76:67:53:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:23 2024 GMT
            Not After : Jul 26 21:13:23 2025 GMT
        Subject: CN=E90F1C6330D595DF0000EB562FAC11A74911BC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:cd:2a:54:5d:fe:d6:71:4b:8f:77:22:4e:
                    4c:c3:cc:e5:10:77:52:d9:17:54:e9:bc:0a:33:40:
                    df:19:5d:37:05:87:ea:f1:f3:05:3a:3b:44:9a:3e:
                    2c:d3:e0:b7:67:77:c3:85:57:f1:19:4d:ea:8f:fa:
                    73:29:e8:b2:74:3c:12:13:e5:8e:a0:12:c6:3b:5c:
                    01:b8:7b:9b:ea:53:32:45:68:65:fd:00:04:9a:b3:
                    0e:97:fd:ab:25:26:f1:9b:e8:c0:ec:b8:9e:69:ab:
                    bf:4a:d7:18:89:48:f4:ae:19:f9:d8:1d:95:4e:47:
                    d6:16:76:7c:62:94:cc:70:04:c0:00:08:69:a9:ca:
                    3a:5b:bd:6d:71:a9:88:2f:05:c4:c6:23:84:2b:03:
                    f6:6f:91:ad:f1:2f:0a:a9:ff:dc:87:5c:52:c3:1c:
                    0b:80:5f:68:34:56:6d:f2:16:49:89:89:71:ce:16:
                    1e:64:7e:c5:b2:49:ea:7c:c7:2a:de:98:fd:56:16:
                    7e:2f:10:ba:d8:a4:c1:7d:45:06:6d:38:21:a1:ca:
                    ff:f3:02:56:92:c1:cb:5d:3f:2c:a3:04:95:3a:50:
                    7e:7c:fb:59:8e:0f:1b:6c:85:c3:52:7b:c8:37:85:
                    07:3a:82:bd:82:6f:2f:c0:dd:cf:28:25:71:41:b9:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:1C:63:30:D5:95:DF:00:00:EB:56:2F:AC:11:A7:49:11:BC:05
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:f7:61:7b:2a:b8:03:63:10:00:e4:fa:61:75:3e:19:29:
         ba:8f:df:ef:14:d6:ea:16:01:b8:d9:46:47:49:17:5e:d3:d8:
         b7:42:80:1d:96:16:08:3e:90:88:eb:3a:78:8e:d8:f7:7d:c8:
         93:df:34:79:83:b1:e7:ba:60:96:59:f0:38:55:48:e5:c0:c3:
         d3:7c:c0:ac:07:10:4d:3f:da:34:37:5c:ac:26:d1:84:b9:2d:
         dd:c5:99:11:c7:50:f4:57:71:57:fa:ff:03:31:ca:47:22:5f:
         4a:2b:38:e5:72:55:6f:f8:e4:df:c2:78:a7:2a:b2:46:ae:27:
         75:9c:a7:45:89:e6:6f:13:4f:ed:bb:09:31:d4:6b:f2:ce:f5:
         7e:3a:4f:58:93:3a:5d:e8:ca:49:2f:11:30:b2:04:37:3f:0e:
         1b:4e:15:ef:41:50:79:9a:db:92:b1:aa:a7:b5:63:a3:af:18:
         5f:01:68:4f:74:02:bd:34:5d:1b:be:92:3f:06:d2:c5:b4:97:
         c6:a4:d3:dd:34:d0:47:fd:ee:69:08:45:f1:be:6d:4e:a2:ec:
         46:1c:d4:03:22:20:f3:9d:57:ee:2f:bc:9d:2a:a7:37:d2:d8:
         87:ba:00:06:fb:7d:aa:e6:06:3a:3f:1b:64:98:3a:d4:2e:9f:
         61:fd:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:04 2024 by rpki-client on console-fra.rpki-client.org