Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa
File:                     3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa (raw, json)
Hash identifier:          kQMWLUhCvA6hjxhYzQOUqmTFSGVlQC7sG0WlnmoECIM=
Subject key identifier:   66:64:AE:09:8C:5E:24:F0:BE:A2:86:BB:4A:22:47:06:9B:46:18:82
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       5CD323D01551EE7ABB37B5FFB910FC2ED68E0D25
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa
Signing time:             Fri 08 Nov 2024 18:37:08 +0000
ROA not before:           Fri 08 Nov 2024 18:32:08 +0000
ROA not after:            Fri 07 Nov 2025 18:37:08 +0000
asID:                     28224
IP address blocks:        170.247.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d3:23:d0:15:51:ee:7a:bb:37:b5:ff:b9:10:fc:2e:d6:8e:0d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:32:08 2024 GMT
            Not After : Nov  7 18:37:08 2025 GMT
        Subject: CN=6664AE098C5E24F0BEA286BB4A2247069B461882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:0f:d0:72:19:5f:01:8a:80:de:9e:a4:79:
                    27:78:31:74:1f:2f:12:78:43:44:b6:0a:b9:30:73:
                    84:92:24:09:6b:c5:b0:8f:cc:a3:34:b7:2e:0d:b7:
                    ef:eb:4e:50:70:ef:75:b8:4a:88:79:20:29:de:4e:
                    d2:9c:ec:19:dd:2a:4f:8a:d6:a7:20:96:58:94:4a:
                    d1:44:79:61:ea:da:69:82:a1:bf:0b:1e:6f:27:00:
                    f3:7a:d3:06:01:5c:8f:40:7d:94:53:96:ce:f6:96:
                    8d:98:7e:c8:1d:2b:b4:b8:43:e2:15:02:49:d6:e9:
                    f1:07:b7:80:18:fc:1e:ed:cb:d5:5e:04:43:77:f4:
                    f6:85:29:1c:32:9b:7c:55:85:e4:00:d1:cb:83:0e:
                    2d:6e:10:73:13:5d:9c:76:ae:81:70:df:a4:13:f6:
                    3e:91:97:cc:26:19:6d:3f:ef:0c:b4:c9:11:af:3e:
                    89:6b:69:89:b9:bc:75:39:37:4a:bb:5a:80:13:19:
                    23:c9:92:14:91:7b:ac:76:0b:13:bc:1e:c3:f5:78:
                    58:5e:7d:bc:89:e9:55:44:b1:37:33:f1:85:54:9e:
                    e4:58:bb:d1:1a:af:db:c4:ff:ac:f5:7d:2c:96:6f:
                    6d:7b:83:51:4d:f6:95:16:b0:16:16:10:06:04:45:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:64:AE:09:8C:5E:24:F0:BE:A2:86:BB:4A:22:47:06:9B:46:18:82
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234372e3139322e302f32322d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:44:79:62:fa:24:f0:62:ef:5f:e9:eb:20:8f:18:b3:35:12:
         da:21:78:ab:18:26:36:48:26:4b:92:af:f1:29:06:88:d2:98:
         56:25:c0:d1:94:c2:31:cb:32:20:55:bd:bd:99:78:86:d0:ae:
         e4:8e:7e:50:a6:6c:6b:60:50:bc:ec:d4:00:05:c2:fb:1e:0a:
         9b:08:91:78:90:e9:5a:0b:71:15:8e:8f:e9:f1:88:03:20:0b:
         1c:1f:42:91:41:72:ed:19:0e:dc:29:61:0b:e2:a5:7c:c0:d5:
         81:96:eb:ec:04:e6:35:61:8a:b5:87:9c:e6:b7:e3:02:8d:fb:
         16:7e:03:3c:df:77:c8:d4:70:5d:fa:d6:a2:22:95:56:6e:de:
         7f:e4:90:81:43:fe:b3:02:ab:b1:9c:b0:f1:04:e8:38:3c:5e:
         48:6d:00:b1:de:b7:16:a3:5a:0e:48:9d:30:d1:d1:94:ee:04:
         46:e7:82:fd:8a:0b:4b:f9:54:23:16:7c:d2:ad:4b:57:85:47:
         d0:a1:9f:b7:eb:7a:8a:4a:4b:a7:3d:b7:0c:6a:09:57:e2:66:
         26:20:ff:e3:c9:a1:51:54:ab:9b:bd:99:cb:be:95:7e:4b:c9:
         80:9e:3e:83:07:83:1f:73:62:13:b0:d4:b6:f8:bf:8a:d1:56:
         ad:0b:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:53 2024 by rpki-client on console-fra.rpki-client.org