Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
File:                     3137302e302e32382e302f32322d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          cPi+bz7CrasISYIkgxFyZIIhgRIFtVUr8OnNeLMomZQ=
Subject key identifier:   4B:2F:77:A7:7E:67:C6:F1:D6:C7:21:6F:0E:67:10:F8:71:A3:BE:86
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       59DE2994E25D7106656FC18BD690007134B65F0C
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
Signing time:             Thu 04 Apr 2024 07:31:19 +0000
ROA not before:           Thu 04 Apr 2024 07:26:19 +0000
ROA not after:            Thu 03 Apr 2025 07:31:19 +0000
asID:                     262784
IP address blocks:        170.0.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:de:29:94:e2:5d:71:06:65:6f:c1:8b:d6:90:00:71:34:b6:5f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr  4 07:26:19 2024 GMT
            Not After : Apr  3 07:31:19 2025 GMT
        Subject: CN=4B2F77A77E67C6F1D6C7216F0E6710F871A3BE86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:1c:ea:1b:85:0c:06:07:01:38:e3:86:d7:
                    ce:d9:ce:ac:03:aa:d2:83:66:54:9e:b4:13:fc:28:
                    24:d1:56:77:3f:a4:4f:7d:df:3c:33:85:6a:80:c1:
                    64:d4:8e:48:7d:12:62:db:6e:1f:e6:6e:4a:d0:5a:
                    8d:59:47:25:7b:62:82:db:bf:36:b3:7a:82:0d:0d:
                    82:37:22:8b:d4:d0:17:d9:74:69:33:9b:74:58:a2:
                    ed:b8:c3:90:8b:32:cd:8b:c2:7d:ce:95:08:47:b3:
                    8d:9e:78:0e:b2:52:bf:b3:5e:3a:19:43:b7:44:c1:
                    d8:a7:26:d5:13:83:83:85:f5:1d:96:4a:1e:90:05:
                    b3:e4:57:7f:54:35:b8:8d:60:4c:55:69:e6:0b:97:
                    a2:d4:7c:aa:4a:92:2f:b9:b1:75:a5:b9:c5:3c:7b:
                    97:60:0a:d4:7c:94:a4:6e:7e:e7:3c:37:90:7b:d7:
                    f7:f1:2e:25:7e:02:05:1c:8e:1b:c1:f5:bc:97:d2:
                    1e:d8:e6:64:01:d4:63:b3:1b:b3:a2:07:2c:4a:ad:
                    46:a0:39:cc:fe:82:58:ca:fa:29:99:28:74:d2:5f:
                    47:5a:86:e8:13:3b:0c:6d:b4:d3:a1:e6:4f:9e:e6:
                    ac:e4:44:5c:6a:4b:c2:90:25:5f:fe:30:2d:44:a9:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2F:77:A7:7E:67:C6:F1:D6:C7:21:6F:0E:67:10:F8:71:A3:BE:86
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:33:71:80:89:71:f0:16:56:a1:b6:81:45:4a:d6:9b:d0:
         17:67:40:8a:ce:03:ce:6e:f5:b7:8d:3f:56:f2:ed:07:9b:9f:
         f5:db:ee:58:09:87:8f:9b:6e:51:1c:d2:18:54:7b:1e:04:b0:
         8d:ea:17:d5:15:a2:03:4b:11:21:b3:58:18:62:6a:cf:21:5f:
         0b:ef:46:da:c4:e7:57:d0:42:f6:fc:80:4b:d7:cb:e1:43:dd:
         7c:7d:95:f3:dc:9d:01:6b:a6:39:2a:ab:98:ea:dc:8b:c9:40:
         59:2b:d8:66:90:f4:02:68:45:b1:53:84:05:7f:98:35:0e:6d:
         41:03:4d:bb:70:1a:41:93:e3:13:f6:8a:04:76:65:39:75:d6:
         16:79:a3:f4:46:bc:29:9a:1d:ac:b3:45:68:99:22:38:72:11:
         51:1c:b4:6c:06:b3:af:f1:0a:e7:d1:8f:af:54:b4:b6:cf:f0:
         65:0a:a3:bf:f7:68:f7:a4:22:a9:9f:2d:c3:7f:bb:86:a1:e8:
         c1:a2:53:93:69:ea:00:8a:00:5a:45:5d:c5:2f:e4:bc:f2:32:
         c1:df:e6:7c:27:4a:b9:b3:37:62:e5:93:6f:c3:00:f6:25:b5:
         61:42:cf:d6:d6:72:f4:24:a8:4a:73:5f:52:ad:d0:06:2e:05:
         67:4b:e5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org