Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          pU7y7jMiAqN89oT4Ms6iomwLnVSb5f95ZK1nHxhbSWE=
Subject key identifier:   08:F3:5B:77:73:BF:A0:01:83:65:CB:24:CF:F4:82:EB:43:3C:5A:B3
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       510C325CC03A8052C918E85BC43DB7E311699C09
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:25 +0000
ROA not before:           Sat 27 Jul 2024 21:08:25 +0000
ROA not after:            Sat 26 Jul 2025 21:13:25 +0000
asID:                     262485
IP address blocks:        170.238.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0c:32:5c:c0:3a:80:52:c9:18:e8:5b:c4:3d:b7:e3:11:69:9c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:25 2024 GMT
            Not After : Jul 26 21:13:25 2025 GMT
        Subject: CN=08F35B7773BFA0018365CB24CFF482EB433C5AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:02:3d:e4:d2:71:98:55:ee:6e:9c:c6:0f:
                    00:7e:ee:9c:4d:cf:f7:83:f6:fd:46:48:5a:88:0b:
                    d7:67:db:85:7c:8a:96:35:90:5d:30:1f:1e:83:72:
                    be:9b:9f:77:51:05:75:1e:81:5d:cb:1c:5c:c7:29:
                    58:4c:76:45:cf:5c:ad:4b:28:43:ef:d1:21:f8:79:
                    b4:18:95:a1:96:07:36:ca:39:2d:fc:ff:6e:ab:7c:
                    78:cc:8e:99:e2:97:0e:84:cf:da:72:02:8d:71:ec:
                    85:5f:09:2d:5b:c9:e3:1e:93:bb:96:b0:76:33:9f:
                    43:d9:1d:e6:81:a2:e0:77:40:1a:f6:8c:37:79:1f:
                    75:54:e6:92:3c:f4:3e:0c:87:4f:45:18:38:ee:9b:
                    33:c7:0e:81:be:e0:a3:ae:34:94:fc:50:47:61:f0:
                    36:e3:f3:e6:33:56:3b:e3:db:ec:12:ef:12:be:5c:
                    b7:3a:d4:37:9b:16:79:ea:75:eb:ec:2b:9a:de:7b:
                    71:49:7e:d4:f2:30:31:be:c4:50:62:95:0d:cb:50:
                    b1:6f:c4:d0:7e:d9:b6:b1:7e:09:af:aa:71:9b:5f:
                    1f:67:6e:e0:ef:35:25:f2:de:ac:12:be:2c:73:5d:
                    ad:45:1b:7c:28:6f:7d:2b:8c:c3:3c:f5:f2:12:a3:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:5B:77:73:BF:A0:01:83:65:CB:24:CF:F4:82:EB:43:3C:5A:B3
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:80:12:57:4e:95:19:91:b9:44:c9:a6:53:4b:93:dc:c0:d7:
         9e:15:47:54:a3:8a:21:74:7a:32:ae:45:da:bf:3d:3d:73:b2:
         a8:2b:74:bb:fe:8d:01:b7:75:54:05:38:51:e9:0a:53:43:08:
         bd:0e:00:3a:49:69:79:06:82:36:a5:76:8f:d0:58:f9:a6:08:
         7d:fe:a0:5f:5c:d7:ef:98:dc:40:87:7a:08:3d:1e:76:25:48:
         d4:52:c1:91:15:94:3a:45:a4:4d:35:ef:0c:00:64:e2:57:cd:
         03:3c:66:71:1f:d1:23:55:7c:39:93:28:a5:d8:db:cf:67:e1:
         8b:b4:db:e4:0a:57:a2:63:9d:5e:de:ae:1c:29:15:26:a8:49:
         d6:b2:ae:94:f8:34:ff:99:5b:9f:ee:2a:a3:b6:67:02:17:1a:
         3a:37:25:58:e6:a2:45:45:04:5f:62:da:db:6e:bd:32:cc:e0:
         3e:57:e8:98:1a:5c:e6:37:66:68:70:10:a4:b4:b3:b6:79:9f:
         b8:02:3c:2e:79:c6:25:0c:e5:45:1b:c5:2c:42:46:d1:11:65:
         ee:8e:03:f2:38:50:ef:cb:2b:ff:ce:65:35:52:a2:f9:4a:91:
         4e:05:ce:21:08:05:54:05:0f:26:8a:79:95:be:16:57:58:b0:
         42:dd:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:04 2024 by rpki-client on console-fra.rpki-client.org