Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38372e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          O7DBDPLOSwmd94vE/qWCgiWchLr9ATZ8B8VfgMSyfCc=
Subject key identifier:   0F:74:92:3A:AE:61:D0:C7:C2:E9:A9:1C:29:A3:3B:70:AB:78:3C:D7
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       4113093F87D21FAF7FF552FBE816303F74A20585
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:13 +0000
ROA not before:           Thu 04 Apr 2024 03:19:13 +0000
ROA not after:            Thu 03 Apr 2025 03:24:13 +0000
asID:                     262642
IP address blocks:        170.82.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:13:09:3f:87:d2:1f:af:7f:f5:52:fb:e8:16:30:3f:74:a2:05:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:13 2024 GMT
            Not After : Apr  3 03:24:13 2025 GMT
        Subject: CN=0F74923AAE61D0C7C2E9A91C29A33B70AB783CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:e1:fb:93:4c:22:40:85:e8:02:72:fb:4e:
                    74:f4:a0:85:78:eb:c8:91:ed:09:06:5c:17:8c:31:
                    dd:03:9c:b8:a9:0f:d3:f0:fe:bd:1f:6c:27:09:c9:
                    25:54:7f:fe:85:81:36:3d:62:e7:2b:46:d4:1e:ea:
                    c3:96:21:21:15:9f:fc:50:12:fa:f1:1c:dd:a1:60:
                    92:6b:9e:c8:eb:3e:1c:01:df:a2:03:54:de:7c:26:
                    49:4f:92:ce:e4:1a:cc:0f:d0:d5:35:91:50:db:72:
                    0f:69:4e:88:b3:9d:c9:b7:dd:6d:fa:e8:e4:82:51:
                    46:51:80:00:52:09:97:d9:74:9f:33:13:ac:05:ff:
                    ae:fc:6c:39:f5:3d:5c:ca:67:1e:c0:cb:39:07:31:
                    36:b0:94:ce:a1:01:fc:7b:b5:7b:9e:b8:03:db:24:
                    ea:c8:65:0f:e0:b5:d1:ce:29:ea:aa:fd:65:f0:3e:
                    34:4f:0d:6e:94:14:c5:f4:d3:ae:59:9c:44:19:2c:
                    f1:74:d9:a1:1d:83:bd:7a:30:cb:ee:a1:cc:eb:a3:
                    3c:fc:83:c7:ce:e8:9d:82:b8:da:61:43:14:91:8d:
                    e2:32:d3:8d:0f:63:16:af:ed:84:c2:27:fa:2c:c8:
                    5e:36:9a:20:a0:4b:ec:3a:86:eb:36:72:51:ac:e7:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:74:92:3A:AE:61:D0:C7:C2:E9:A9:1C:29:A3:3B:70:AB:78:3C:D7
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:44:fe:f1:f2:1c:3e:37:92:87:13:6e:d6:e1:f2:ac:74:
         71:de:ca:47:da:d4:ef:c4:28:7b:b1:84:06:04:f0:62:ea:a0:
         21:4a:e6:b2:5e:be:22:90:b7:0a:27:bb:ad:4a:47:91:23:61:
         b8:d7:d2:27:e4:6f:8a:9d:cf:4d:a2:df:72:1e:2a:ef:27:dd:
         e3:0d:af:0f:1f:cc:57:41:76:18:1f:77:2f:6a:84:94:9c:ef:
         f2:20:ea:a9:26:f6:f9:f1:73:63:2d:11:38:95:e2:f9:1f:cc:
         a9:f8:20:74:43:ed:91:11:e3:2a:be:09:d4:19:09:b7:5e:1d:
         c4:a7:4b:b1:38:e9:67:17:2e:e7:08:b7:3f:3a:40:e7:dc:bd:
         69:17:5d:8d:62:14:77:1e:e1:84:2c:42:11:ce:1b:8d:be:62:
         22:28:6b:db:a9:70:ba:d1:60:4a:67:d8:98:c7:86:60:ab:fd:
         ec:be:60:21:03:5f:7d:49:2c:5a:ab:dc:28:79:87:88:46:95:
         7a:02:ea:f2:17:24:be:81:56:5f:8d:71:92:bf:41:36:69:ab:
         27:48:2f:58:f3:e5:07:ca:73:64:14:23:50:a5:16:ec:ef:d6:
         6e:d0:64:54:ac:53:aa:82:c3:47:a6:64:b9:f8:b8:47:81:91:
         2b:6b:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org