Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa (raw, json)
Hash identifier:          oFc88SISShXufldlG6Ya9d6BYnCVf4HWSEcsepUluuE=
Subject key identifier:   92:4D:FF:5C:30:06:5F:22:A6:86:4B:DE:64:C9:A1:F1:9E:D2:DA:DC
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       0A9F5921596984B94EE79A569D79D6BBC1761D91
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa
Signing time:             Thu 04 Apr 2024 14:29:40 +0000
ROA not before:           Thu 04 Apr 2024 14:24:40 +0000
ROA not after:            Thu 03 Apr 2025 14:29:40 +0000
asID:                     266385
IP address blocks:        170.80.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9f:59:21:59:69:84:b9:4e:e7:9a:56:9d:79:d6:bb:c1:76:1d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr  4 14:24:40 2024 GMT
            Not After : Apr  3 14:29:40 2025 GMT
        Subject: CN=924DFF5C30065F22A6864BDE64C9A1F19ED2DADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:59:7b:2b:f6:0c:57:df:a2:49:52:57:6b:
                    6e:9f:7f:87:65:1b:f6:a5:02:d6:40:31:02:a1:d1:
                    78:dd:87:55:db:cf:45:be:cf:c3:2f:59:e8:a5:59:
                    6b:5d:c8:92:9e:92:41:f1:17:d4:08:4d:5a:81:14:
                    2e:26:b7:77:7a:25:47:48:cf:f9:4c:8a:b8:86:7d:
                    30:02:28:65:57:7a:68:ab:ce:97:f8:35:ef:ba:d4:
                    78:4d:d6:45:bf:c9:c7:ae:ba:47:71:db:99:be:21:
                    f6:29:02:41:24:02:d5:eb:1c:ac:e0:bf:52:9f:b8:
                    96:b0:a9:97:92:66:b0:3f:74:8d:3b:92:d6:6f:18:
                    26:a2:5d:c6:c6:eb:70:98:7c:25:c7:59:00:c6:c0:
                    12:22:5b:be:88:7d:85:ce:d5:91:31:70:66:44:75:
                    39:81:16:93:98:3b:d2:c2:1a:78:26:41:5f:ee:79:
                    dc:5f:97:52:43:66:1e:75:e5:85:f0:0d:8a:7c:fd:
                    e4:1e:cd:2d:ab:34:34:c0:7e:23:4a:3a:15:2d:31:
                    97:53:f8:e4:05:cb:08:f6:49:63:e8:49:85:87:94:
                    bb:59:fb:07:61:88:9b:68:d8:b5:16:05:3e:d4:27:
                    b2:81:22:6c:26:63:cb:cd:54:d0:d0:05:5c:b9:f2:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:FF:5C:30:06:5F:22:A6:86:4B:DE:64:C9:A1:F1:9E:D2:DA:DC
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:cc:21:e5:8e:46:e9:f9:0c:7d:9d:92:86:05:64:2b:53:
         43:ec:2f:a2:98:ea:96:c8:8b:ed:22:c0:e7:92:b3:f7:68:e4:
         2a:df:6c:9a:4f:22:e8:9a:00:af:fa:11:7d:87:7a:a2:47:33:
         76:75:06:b6:f2:43:88:19:90:9b:db:18:b4:d7:a0:a3:0e:8b:
         cd:d3:60:0b:14:cd:0f:34:a5:90:4c:df:f2:6c:33:b7:f8:77:
         60:3b:8a:06:d9:84:be:8f:82:b5:4e:20:ad:9b:ee:c6:c3:9e:
         c0:df:38:80:2b:fb:67:e9:98:47:25:91:22:33:9e:f8:30:8b:
         fe:8e:83:c1:a6:2d:c5:9f:3c:9f:b3:db:13:cb:11:2c:20:0c:
         12:47:68:ad:05:b6:f5:0a:66:ea:89:37:b8:e6:b4:eb:a8:3b:
         13:26:48:79:e6:a1:9d:0e:ce:61:12:05:31:6c:1f:b7:a9:c4:
         04:10:d0:ed:38:65:55:8a:0f:75:81:2c:92:1a:f1:89:3d:07:
         05:b8:84:a3:e9:91:98:c8:1d:a9:d3:f7:e4:45:ac:e7:6c:ae:
         45:03:94:97:98:be:68:8e:b0:cf:7f:53:0a:0d:87:a5:76:80:
         f8:43:03:38:b7:86:d4:fd:8b:52:09:d1:19:20:81:f5:80:c2:
         90:b1:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org