Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
File:                     3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa (raw, json)
Hash identifier:          9/PLsHWAvOJlpDqFdIYjhYqQGF8agY64VbiGAYwHCP8=
Subject key identifier:   0B:50:41:17:1D:03:B9:91:76:43:7A:90:4A:75:53:81:FC:D1:47:CD
Certificate issuer:       /CN=449A71EF24E1569DDA85DBFAA5781F7EE38F04A4
Certificate serial:       776AD3E16C8D6CE16CB28CA45F044106E190D30B
Authority key identifier: 44:9A:71:EF:24:E1:56:9D:DA:85:DB:FA:A5:78:1F:7E:E3:8F:04:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
Signing time:             Thu 04 Apr 2024 22:29:35 +0000
ROA not before:           Thu 04 Apr 2024 22:24:35 +0000
ROA not after:            Thu 03 Apr 2025 22:29:35 +0000
asID:                     265224
IP address blocks:        170.239.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.crl
                          rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:d3:e1:6c:8d:6c:e1:6c:b2:8c:a4:5f:04:41:06:e1:90:d3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449A71EF24E1569DDA85DBFAA5781F7EE38F04A4
        Validity
            Not Before: Apr  4 22:24:35 2024 GMT
            Not After : Apr  3 22:29:35 2025 GMT
        Subject: CN=0B5041171D03B99176437A904A755381FCD147CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:6f:06:66:40:a3:09:cc:ed:c5:a1:d7:03:
                    c6:f7:d9:53:c7:60:ce:ee:1c:8e:9d:25:18:02:7d:
                    c3:f3:be:a3:1a:97:cd:8c:1d:42:1f:89:b4:33:7e:
                    c3:d0:9e:49:8c:e6:ec:3a:27:60:09:0b:71:f7:d5:
                    af:07:52:a7:5a:88:21:69:06:da:36:a0:9f:7b:dd:
                    a4:b2:80:f8:b3:0d:e6:92:89:57:90:fd:11:c7:de:
                    16:b8:82:d3:a0:dd:c2:4a:5f:06:2e:19:be:dc:06:
                    d7:72:7d:45:92:7a:86:a1:08:c5:74:54:32:91:30:
                    6c:f6:04:f0:9b:a5:4e:37:45:bf:44:f5:86:3f:61:
                    6f:60:f5:9e:ea:00:86:01:22:15:49:73:da:97:ec:
                    b5:31:0a:05:5e:99:a5:ab:70:cf:78:56:3e:f8:69:
                    66:19:b2:eb:87:a6:df:98:6a:6f:d7:c2:ec:dc:d7:
                    8e:fc:fc:a9:40:4a:b2:cc:17:c1:3f:2c:31:b6:a2:
                    b4:18:21:d5:9d:9f:32:a3:26:ec:3f:85:44:e5:4d:
                    5a:f9:29:4d:57:a9:08:7b:1d:6c:36:f5:b8:ef:d8:
                    61:43:7f:9c:76:07:2f:87:5e:c6:36:4d:4b:f6:83:
                    3f:2f:3b:ff:87:34:ac:cc:48:68:5c:5b:d1:b2:09:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:41:17:1D:03:B9:91:76:43:7A:90:4A:75:53:81:FC:D1:47:CD
            X509v3 Authority Key Identifier:
                keyid:44:9A:71:EF:24:E1:56:9D:DA:85:DB:FA:A5:78:1F:7E:E3:8F:04:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a9:7e:7e:de:33:09:f1:d6:34:f5:be:f7:e5:fd:6e:33:17:
         4f:34:63:58:4a:50:c6:cd:38:c2:52:b5:1b:08:41:30:2c:75:
         84:46:f6:2f:a3:b0:76:a1:9a:75:96:93:e9:31:4e:b5:aa:84:
         20:4b:7d:ac:03:11:ac:fd:41:5a:7d:af:68:5c:35:3f:92:53:
         99:f3:a7:09:6e:83:d5:81:b2:46:dc:a0:09:fa:bc:2b:d6:a4:
         65:33:aa:d0:dc:f8:8d:6d:01:5f:37:71:14:c6:39:b9:a1:5d:
         1b:65:f1:34:01:d6:e8:d7:ff:21:83:ff:48:64:b1:8e:3f:b6:
         f6:36:bb:3a:26:1c:21:36:7f:02:3f:75:56:95:67:86:8e:8d:
         93:a2:d7:01:1b:4e:25:d1:57:30:31:a0:81:58:4e:f8:fc:13:
         c4:48:3a:3e:23:9b:44:c3:bf:29:de:1a:55:e3:b9:9f:59:ae:
         5a:87:10:54:3b:6a:40:b1:2a:ae:74:2a:5a:7d:f8:3c:7b:ef:
         56:2b:b5:3c:14:7a:f7:98:7f:8f:53:c1:4f:c3:29:1d:a5:c0:
         d4:ba:72:95:87:49:1a:7c:8b:c7:ed:ab:51:79:ba:3e:63:dc:
         ba:b6:4b:15:5a:6b:94:f6:b9:30:25:17:9d:f1:38:d3:2b:42:
         9f:80:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org