Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
File:                     3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier:          5u/b947AaNzx7N3bax4fNDgzf+EX3E7BGzEZ6lSjUgE=
Subject key identifier:   13:94:B6:31:5D:F2:96:6C:C7:1E:75:EE:99:B4:70:DD:96:56:22:98
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       6F8982DA3A11A7EA0618DCFA194F4AEB0D9CAD15
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:40 +0000
ROA not before:           Thu 04 Apr 2024 03:55:40 +0000
ROA not after:            Thu 03 Apr 2025 04:00:40 +0000
asID:                     52858
IP address blocks:        170.247.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:89:82:da:3a:11:a7:ea:06:18:dc:fa:19:4f:4a:eb:0d:9c:ad:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:40 2024 GMT
            Not After : Apr  3 04:00:40 2025 GMT
        Subject: CN=1394B6315DF2966CC71E75EE99B470DD96562298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:85:7c:79:75:8c:51:8b:4c:19:79:a8:43:
                    73:f6:ab:18:c8:8c:d2:65:52:78:6b:95:e6:6b:1b:
                    f7:64:ff:08:11:3d:9d:e3:e3:e0:4e:05:aa:7f:46:
                    3c:63:df:45:0f:fa:56:0b:f9:14:52:cc:50:84:27:
                    7d:c0:67:0c:e0:e3:71:0d:3d:5e:1f:9d:76:c9:01:
                    32:6c:cd:b1:4b:3c:04:7f:e6:24:73:89:22:47:86:
                    2d:8c:e3:0f:ac:c7:46:a4:d9:ca:09:e5:88:a6:ce:
                    9c:46:71:d1:db:69:7d:b9:e4:20:70:6a:3a:c2:1d:
                    df:0a:43:5d:78:8b:f6:be:06:5a:9a:44:4c:91:5b:
                    ae:3e:0c:0d:c8:60:d4:d0:af:9c:e6:5d:77:c3:c8:
                    c2:da:3c:88:bc:92:a3:eb:8a:fc:18:7a:d0:16:78:
                    72:52:7f:47:ea:43:bb:8c:5e:96:7a:89:03:4f:f8:
                    24:1a:c1:e1:3b:d9:c2:ef:ad:40:8b:55:26:61:a7:
                    7b:d9:73:78:ba:5b:4d:b4:66:25:a0:66:e8:88:ac:
                    cd:8e:e3:3e:97:cf:f3:06:24:47:62:7f:58:0a:60:
                    46:0c:4c:98:80:f8:91:7b:63:92:8c:f0:7f:d4:f3:
                    a7:3f:97:b7:7f:15:f7:93:d7:51:dd:09:6d:3b:3b:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:94:B6:31:5D:F2:96:6C:C7:1E:75:EE:99:B4:70:DD:96:56:22:98
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:ff:24:f7:38:d6:2f:99:35:61:6a:44:7f:81:f8:1d:85:68:
         66:cc:52:1f:96:fb:18:03:54:02:af:44:df:d6:97:4b:37:07:
         c7:6c:32:ca:92:bf:62:ed:78:28:90:c1:2d:50:1d:1b:56:32:
         67:46:e7:c7:ed:4f:fb:72:4a:ab:e3:e0:ab:10:11:21:9d:b1:
         8c:85:14:24:1d:39:91:82:65:21:e7:e2:55:c4:1f:05:f7:d3:
         0d:84:af:93:52:17:03:2f:2f:f1:ed:bd:14:d9:66:5d:e5:4f:
         f9:14:37:f5:79:c0:c0:a5:67:82:3e:a3:ec:bd:3e:bd:55:c6:
         28:0e:c6:c9:54:87:b2:60:5e:a4:14:a2:90:89:85:f4:e5:29:
         64:61:b1:2c:89:5b:3b:63:0b:04:20:53:5a:53:83:7c:27:ca:
         8b:8f:52:09:bd:d0:70:91:11:e9:36:b7:c9:5a:b2:d9:a2:db:
         c7:b7:c8:f4:39:36:38:1a:a3:e3:f8:ee:37:90:50:f2:91:3c:
         7c:42:71:6b:cc:1f:80:39:84:89:75:2a:64:9c:a6:fd:8b:b7:
         0f:5e:76:ff:8c:ff:af:db:da:8f:71:09:61:24:73:bc:90:5d:
         23:d0:45:7a:ff:b8:f2:da:25:44:41:68:58:ae:62:67:74:b7:
         03:aa:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org