Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa
File:                     3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa (raw, json)
Hash identifier:          535aPzvNYkdEju6DZ3MGItJT7IS3xHmQ9hT5rRKlf6A=
Subject key identifier:   2A:EE:33:8B:79:E6:4C:FD:C0:A8:6B:EA:35:80:DF:83:64:4D:BB:30
Certificate issuer:       /CN=41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731
Certificate serial:       181CF6570DEC3316BE1D5C7D9FF090D0D2A45C10
Authority key identifier: 41:E4:0B:03:AF:A1:1E:AF:BF:2A:DB:C9:DE:44:82:C4:C9:86:67:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa
Signing time:             Tue 08 Oct 2024 16:27:47 +0000
ROA not before:           Tue 08 Oct 2024 16:22:47 +0000
ROA not after:            Tue 07 Oct 2025 16:27:47 +0000
asID:                     61713
IP address blocks:        170.150.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.crl
                          rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:f6:57:0d:ec:33:16:be:1d:5c:7d:9f:f0:90:d0:d2:a4:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731
        Validity
            Not Before: Oct  8 16:22:47 2024 GMT
            Not After : Oct  7 16:27:47 2025 GMT
        Subject: CN=2AEE338B79E64CFDC0A86BEA3580DF83644DBB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:fe:d2:6f:42:90:6b:d4:d9:56:8f:a7:cd:
                    63:0f:ba:c6:ac:b1:9a:be:4a:e1:52:bd:11:3b:c0:
                    87:c1:8f:c8:1d:b9:b0:1a:0c:f4:d4:23:47:83:a0:
                    41:fe:4c:d5:06:56:20:05:8d:d7:a4:9d:d9:8b:c4:
                    d8:51:d7:89:21:03:ec:30:14:13:6f:d3:39:53:73:
                    da:4d:b8:2c:4d:9d:72:84:ac:bf:1d:06:13:6c:de:
                    3c:de:fd:fa:a4:1b:76:4b:26:bd:6c:c6:57:4e:33:
                    84:67:68:92:cb:c9:74:66:bc:f7:2a:13:f9:5d:85:
                    a7:70:dd:fc:27:69:35:ca:5e:93:82:19:db:90:15:
                    5d:82:6a:d2:94:12:b9:4d:4c:a8:25:58:8b:14:e0:
                    e8:16:62:7d:72:5d:8f:b1:f6:b2:31:33:70:a8:24:
                    06:c1:bf:b4:ec:29:46:b3:bc:78:d1:3e:d0:39:13:
                    8a:8b:16:08:6d:1f:9b:0d:09:ac:38:32:38:b6:14:
                    cd:78:e0:ad:b1:f6:61:ca:e2:59:a1:bd:33:86:f7:
                    fe:58:3b:8c:05:63:44:ab:7e:dc:4f:e4:df:27:68:
                    d2:40:e0:24:c8:53:d5:f4:72:24:d6:59:5b:5d:a5:
                    b3:89:32:1e:e5:f4:0b:f9:54:5e:fa:f9:c7:49:20:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:33:8B:79:E6:4C:FD:C0:A8:6B:EA:35:80:DF:83:64:4D:BB:30
            X509v3 Authority Key Identifier:
                keyid:41:E4:0B:03:AF:A1:1E:AF:BF:2A:DB:C9:DE:44:82:C4:C9:86:67:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E40B03AFA11EAFBF2ADBC9DE4482C4C9866731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:4a:35:22:e3:b0:bd:bf:be:a4:58:f6:ac:19:88:c1:25:
         6e:97:fc:15:4e:3e:e0:8b:f7:ea:2c:4d:58:cf:dd:94:28:f9:
         a4:c2:de:a7:b5:c0:ab:6f:9f:9b:7f:3f:b6:ed:4b:7a:45:12:
         08:9c:78:34:73:e0:56:96:5d:fb:36:3a:46:33:ec:75:20:b8:
         e7:0d:81:91:45:db:6c:45:d5:4a:04:53:3e:6e:64:54:6e:76:
         f0:5a:91:45:9b:a4:74:2f:e8:42:4e:1e:48:60:94:10:aa:df:
         19:11:cf:15:03:fd:09:92:a6:12:37:04:35:51:87:29:23:1b:
         54:68:8f:a2:6b:17:4e:b8:d7:f7:45:f2:54:8b:82:6b:4e:66:
         6f:33:bb:02:3d:4a:2a:24:cb:09:7f:a1:00:d5:64:11:ab:58:
         c2:ad:c5:49:56:d5:b4:95:47:0b:d2:1d:8b:30:5e:bf:12:1c:
         e3:e1:f9:54:f8:c6:67:1f:55:a5:7d:1a:73:c1:0c:b1:da:97:
         94:e0:8a:bd:e7:86:82:d1:aa:bf:19:ef:81:94:92:78:c9:78:
         95:ba:6d:f1:f0:07:0b:78:6f:b4:51:12:43:a4:e8:1d:c3:93:
         14:e5:b8:ba:d1:de:de:e4:5d:7c:42:66:8d:c2:88:f6:b2:10:
         22:c2:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org