Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa
File:                     3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier:          uFIW8QVozlU9XawWgkOaSR0gvOkd1TekJKzKFiSEAXI=
Subject key identifier:   E5:F5:34:1E:24:73:37:A0:39:FA:1E:82:E7:0D:59:86:AB:CC:A2:DF
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       5BD47E7228166B92E146F8698680AD8E00459DC5
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:19 +0000
ROA not before:           Mon 25 Nov 2024 16:59:19 +0000
ROA not after:            Mon 24 Nov 2025 17:04:19 +0000
asID:                     28669
IP address blocks:        170.238.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:7e:72:28:16:6b:92:e1:46:f8:69:86:80:ad:8e:00:45:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:19 2024 GMT
            Not After : Nov 24 17:04:19 2025 GMT
        Subject: CN=E5F5341E247337A039FA1E82E70D5986ABCCA2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:22:94:f2:d5:ed:69:60:5a:2f:e9:60:39:
                    d9:9a:82:3d:37:6a:bb:67:85:7c:3e:c6:2a:33:2a:
                    1c:f0:6b:45:f2:22:2c:69:34:c7:f2:11:3a:95:f6:
                    9f:7e:44:b9:45:c9:27:5d:b4:0e:a8:2d:44:28:aa:
                    ec:65:f3:82:b6:57:cf:31:60:5b:05:51:03:6e:97:
                    07:7a:3f:5a:0a:0f:0c:e3:b1:9d:08:6a:65:cc:4a:
                    25:66:55:bb:d7:a7:e1:88:05:f9:65:45:0b:87:87:
                    44:a7:72:7f:9e:32:0b:e6:36:3b:76:8b:87:f3:46:
                    76:25:0b:83:9a:67:cb:7d:da:de:17:72:bf:1f:67:
                    b1:5c:eb:ce:44:fe:ae:91:e2:f0:a6:b5:eb:ac:67:
                    98:e5:3c:59:0e:e4:62:c7:51:3d:7c:ea:64:37:c6:
                    00:fc:1b:ea:e7:9e:68:3d:26:b5:b6:f5:2e:38:fd:
                    f6:e7:b2:6c:18:3b:fa:3c:fb:d4:87:0c:03:e1:99:
                    90:d9:85:fa:78:1b:da:91:77:4c:35:e7:ff:51:ad:
                    99:70:ad:d5:e0:52:36:97:2d:e4:e0:cb:20:f6:4a:
                    51:1d:83:55:12:fa:ec:d8:eb:f1:82:9b:2e:9c:ae:
                    e8:56:9e:72:0f:c7:a9:a6:53:f0:91:04:cd:ac:3f:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:34:1E:24:73:37:A0:39:FA:1E:82:E7:0D:59:86:AB:CC:A2:DF
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:df:2e:94:05:a6:c9:18:12:4c:3c:66:a7:0f:71:2f:ca:
         6e:dd:32:32:af:a4:71:70:c3:a3:2d:e4:6d:08:41:fe:23:75:
         8b:2c:45:ed:30:58:ad:8f:fc:18:67:95:88:1a:3a:ab:93:1a:
         98:49:07:6a:f3:35:a9:c6:84:0a:99:29:21:eb:fb:94:34:70:
         3e:98:ea:79:be:25:b7:fa:a5:21:55:70:18:b8:eb:ff:70:3b:
         ef:e8:fa:06:51:73:8c:87:b7:a1:1c:fb:78:2e:2e:64:08:64:
         ee:28:80:23:1f:b1:e4:32:15:2d:6a:66:63:eb:0a:c7:61:b7:
         0b:dc:e4:27:31:eb:b2:2b:ea:2a:6d:03:f6:16:3e:0f:c8:50:
         4e:37:5d:99:d3:be:3e:c2:1c:b2:52:99:01:b4:71:ff:de:83:
         63:c9:dc:54:24:c3:9a:37:b1:64:fe:50:bf:de:87:eb:02:f1:
         56:f3:43:5a:eb:46:82:32:77:f9:ef:50:ca:6f:4b:e8:36:ba:
         d9:b2:5b:de:1f:20:98:33:b8:65:50:1d:09:b9:26:c7:95:54:
         6f:29:07:a8:94:19:9e:00:bd:e8:7f:30:52:79:6e:2d:70:b3:
         bc:48:36:cd:db:c9:3f:e8:07:00:eb:6d:24:5d:c1:f9:ba:64:
         88:78:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org