Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
File:                     3137302e3135302e342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          VPe8Dk8qHnIsoVLfITLZRMAiGTYVGNL/rUIysEKezaI=
Subject key identifier:   D1:F9:78:CA:6F:D8:AC:48:11:65:1F:8E:78:48:2C:73:23:E5:27:5A
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       0DB6EBC377339E49FDBA0865EAC876A5ED35053D
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
Signing time:             Mon 25 Nov 2024 17:04:04 +0000
ROA not before:           Mon 25 Nov 2024 16:59:04 +0000
ROA not after:            Mon 24 Nov 2025 17:04:04 +0000
asID:                     53080
IP address blocks:        170.150.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b6:eb:c3:77:33:9e:49:fd:ba:08:65:ea:c8:76:a5:ed:35:05:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:04 2024 GMT
            Not After : Nov 24 17:04:04 2025 GMT
        Subject: CN=D1F978CA6FD8AC4811651F8E78482C7323E5275A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:db:9a:a9:92:82:55:20:2e:39:8b:8f:f3:
                    cc:9a:ca:29:83:9b:15:d2:7c:d3:7b:05:ff:d9:58:
                    d9:6f:34:f2:39:67:f6:dc:6d:a1:0b:c5:0d:fb:31:
                    21:10:fd:2e:6e:e4:d4:e2:5b:7c:ae:5e:cf:31:16:
                    05:92:00:59:97:0b:43:d4:5d:85:60:0f:7d:a6:0d:
                    af:32:55:95:3c:03:02:d0:61:ff:fe:89:e0:66:04:
                    45:20:69:01:8d:87:87:d5:18:36:3e:1f:0b:71:f3:
                    ee:22:55:90:00:4e:aa:bf:27:af:d5:0a:7d:34:d3:
                    13:12:72:28:e5:de:56:eb:03:0e:7d:92:17:41:7c:
                    c1:22:4e:7b:6d:0a:aa:3b:5f:51:32:9d:5f:fd:43:
                    ab:3a:8d:9a:09:24:4b:09:e8:f9:cf:f9:08:2b:c9:
                    80:0f:79:16:b8:c9:b8:60:01:24:49:15:2e:7b:bc:
                    3e:37:97:96:51:29:20:cc:d6:35:96:11:59:7a:be:
                    10:fe:64:f8:c6:39:c3:74:f3:1a:de:04:d8:26:35:
                    f6:d3:7b:ad:b7:12:96:8a:be:d6:28:a2:d8:62:a6:
                    ab:80:46:1d:3e:45:c1:e6:d0:ab:36:cf:8b:8f:85:
                    6e:a7:bd:c6:84:58:99:c4:d6:af:25:a5:8d:48:07:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:78:CA:6F:D8:AC:48:11:65:1F:8E:78:48:2C:73:23:E5:27:5A
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3135302e342e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:39:f7:43:6b:47:2e:73:c7:7c:c1:bf:9e:60:cc:61:b0:
         71:63:ec:50:d3:e2:27:ab:10:73:8b:27:86:b6:dd:bd:b9:3a:
         29:10:a3:e8:16:84:46:35:91:e1:93:0d:b1:57:8c:bb:ad:1c:
         14:8d:9f:d2:03:91:7e:4e:73:45:4f:a5:5f:0d:d5:c0:99:b0:
         d9:98:2e:56:6b:2d:c9:19:cd:49:97:5b:c7:88:61:ea:3b:83:
         9f:7e:e5:c7:f7:34:42:b8:03:ec:4c:bf:cc:2a:a7:30:24:3d:
         69:c6:8a:a9:ed:76:2f:dd:9e:ad:a1:a3:03:f0:21:2a:b1:11:
         f8:59:ba:61:41:2e:fa:c1:66:40:4e:f1:af:8d:4e:42:78:56:
         0c:da:a6:41:81:8a:9d:72:58:f3:fd:aa:1a:13:fe:bd:8a:18:
         21:8f:eb:90:c3:0f:06:af:71:bf:6a:3e:77:e1:0d:49:97:6b:
         e0:f3:c0:08:46:71:07:8e:19:da:e1:61:f2:c5:50:3c:35:b1:
         aa:b2:4b:36:5d:c1:b5:28:9c:a2:c3:a6:0d:d4:20:47:b4:c9:
         4d:4a:83:1d:fc:71:2f:b2:56:45:34:50:a4:8b:99:44:ab:40:
         5b:4c:29:f3:a5:6f:d7:c1:22:aa:eb:4b:1f:6b:ad:5f:1f:ea:
         54:ed:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org