Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3233203d3e20323634393833.roa
File:                     3137302e302e3233362e302f32322d3233203d3e20323634393833.roa (raw, json)
Hash identifier:          MAoUVTBMt0HmThmma/McgwZEJPgPCz6d7R5BokMP8z4=
Subject key identifier:   F1:08:0A:BE:E3:43:8A:5C:96:A1:5A:47:C8:8F:00:DD:F1:86:1E:BB
Certificate issuer:       /CN=E50E01BA1D70803A5154E8C2A91EC82E6BDEC393
Certificate serial:       7C793728A35A3803D851E5A275BD54ECFB1DA7B9
Authority key identifier: E5:0E:01:BA:1D:70:80:3A:51:54:E8:C2:A9:1E:C8:2E:6B:DE:C3:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50E01BA1D70803A5154E8C2A91EC82E6BDEC393.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3233203d3e20323634393833.roa
Signing time:             Tue 19 Nov 2024 17:04:03 +0000
ROA not before:           Tue 19 Nov 2024 16:59:03 +0000
ROA not after:            Tue 18 Nov 2025 17:04:03 +0000
asID:                     264983
IP address blocks:        170.0.236.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/E50E01BA1D70803A5154E8C2A91EC82E6BDEC393.crl
                          rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/E50E01BA1D70803A5154E8C2A91EC82E6BDEC393.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50E01BA1D70803A5154E8C2A91EC82E6BDEC393.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:37:28:a3:5a:38:03:d8:51:e5:a2:75:bd:54:ec:fb:1d:a7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E50E01BA1D70803A5154E8C2A91EC82E6BDEC393
        Validity
            Not Before: Nov 19 16:59:03 2024 GMT
            Not After : Nov 18 17:04:03 2025 GMT
        Subject: CN=F1080ABEE3438A5C96A15A47C88F00DDF1861EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:f9:10:31:15:76:bd:69:c0:53:a1:12:ba:
                    8f:72:1d:80:d7:32:f7:69:34:83:d0:e4:df:aa:4b:
                    8a:f7:fa:10:10:de:88:6e:20:f2:4d:46:e2:43:51:
                    8d:00:4a:f1:03:24:2a:65:73:b4:32:c0:53:71:ff:
                    78:0f:68:b8:a9:62:28:9f:a1:4f:8a:ac:cd:9c:fb:
                    5f:d4:e7:eb:d7:6a:70:b2:0c:45:12:c8:e0:f9:6f:
                    51:2b:49:07:ec:08:89:fd:a2:9b:62:ca:66:c2:27:
                    05:4f:60:66:14:07:cc:0c:2e:fb:9d:95:6b:ca:4a:
                    4f:35:3a:e6:d2:0a:8c:99:82:cf:b3:38:ea:7b:9a:
                    49:f1:01:d0:d7:cb:6f:a9:f7:63:48:7d:4f:24:5d:
                    32:4c:ef:0d:e8:8d:ae:bf:e3:23:87:50:1e:54:32:
                    03:68:bb:4d:78:43:61:ea:50:9b:f4:f8:ec:23:48:
                    ea:24:cf:fa:c7:11:f4:4e:71:50:1c:38:35:7c:7a:
                    c6:20:75:b3:54:be:08:52:68:99:f1:03:ac:b2:a2:
                    ed:98:27:b9:39:5e:08:f5:5a:91:0a:39:15:1d:dd:
                    87:d1:e4:01:12:e9:ad:2c:10:b5:02:9c:a2:43:df:
                    d7:bc:43:14:b7:eb:f1:46:6b:11:c2:29:bd:16:ab:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:0A:BE:E3:43:8A:5C:96:A1:5A:47:C8:8F:00:DD:F1:86:1E:BB
            X509v3 Authority Key Identifier:
                keyid:E5:0E:01:BA:1D:70:80:3A:51:54:E8:C2:A9:1E:C8:2E:6B:DE:C3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/E50E01BA1D70803A5154E8C2A91EC82E6BDEC393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50E01BA1D70803A5154E8C2A91EC82E6BDEC393.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3233203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:22:31:41:29:41:08:0f:cc:ce:ab:43:28:07:82:8b:42:
         18:e5:2c:3f:2e:70:4a:a3:85:dc:f2:a4:01:b2:4b:89:3c:ee:
         5a:21:b7:40:18:26:a5:55:53:65:44:ea:2a:65:c2:a7:40:e3:
         9d:38:c0:c4:07:07:c9:32:17:d6:ed:98:6d:51:fa:20:2e:b0:
         b2:9b:54:52:98:13:7f:04:53:1d:81:be:9b:e5:87:0e:2b:6a:
         d1:75:f1:8e:df:3c:cd:4d:04:70:ef:f2:72:4c:80:4a:a9:03:
         84:60:67:8b:61:b5:b9:57:b3:e0:dc:74:98:e5:79:18:cd:07:
         d1:40:ba:5f:b4:2d:d0:5e:f7:88:5a:3e:d6:57:9f:e2:0c:4e:
         f7:83:51:55:98:24:e1:a6:4d:cf:17:fd:6b:b4:87:64:e2:c4:
         1f:6c:12:25:94:d4:14:6b:1f:83:f7:29:fd:72:22:f6:64:29:
         06:54:ba:74:3f:61:b8:f9:15:dc:0d:f5:8e:ee:b5:52:81:f5:
         5e:4d:94:4e:a7:77:7b:c2:f1:f1:03:5c:a6:2e:50:cf:12:55:
         0d:a9:d5:58:03:e0:2d:fb:e2:ff:0f:f5:04:9f:f3:50:ca:66:
         f9:92:a9:a4:47:b0:22:a1:3b:aa:51:92:0e:9a:54:22:d8:c8:
         0e:37:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:50:43 2024 by rpki-client on console-ams.rpki-client.org