Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
File:                     3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier:          eHkd38QbUF4P46f9J5WiW9T2fXm6UmKqzOKA+afn+oQ=
Subject key identifier:   A3:1A:56:17:63:8F:F2:58:B8:D4:1A:D1:B5:2B:CE:07:B7:85:8E:B8
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       6849EDB1691A8C4824970B7EAB7B57CABB22DC83
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
Signing time:             Mon 25 Nov 2024 17:03:49 +0000
ROA not before:           Mon 25 Nov 2024 16:58:49 +0000
ROA not after:            Mon 24 Nov 2025 17:03:49 +0000
asID:                     264299
IP address blocks:        170.254.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:49:ed:b1:69:1a:8c:48:24:97:0b:7e:ab:7b:57:ca:bb:22:dc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:49 2024 GMT
            Not After : Nov 24 17:03:49 2025 GMT
        Subject: CN=A31A5617638FF258B8D41AD1B52BCE07B7858EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:2f:00:ac:29:b9:09:f2:e3:a4:59:4c:50:
                    26:2f:9e:f3:e5:8c:c0:c9:bf:3b:a8:fd:fe:c5:9f:
                    70:ce:29:fc:17:24:81:72:42:0c:f9:57:ef:84:f3:
                    23:bf:b6:4a:a4:5f:46:5d:ea:b7:ae:ee:24:2b:11:
                    87:f7:a5:e4:49:a5:76:6f:ac:ff:cd:f2:41:30:63:
                    b3:d4:60:00:86:19:0a:84:05:4e:da:6e:f1:53:56:
                    5e:33:a4:97:b8:0a:92:ea:cb:c0:16:e3:f1:e9:fc:
                    e0:2d:27:76:54:11:0d:7c:56:3f:50:b3:a2:e4:69:
                    8d:18:3c:ba:f4:1d:09:88:23:da:69:d7:ec:b9:46:
                    3d:3b:6a:a7:ff:a0:4e:c9:0d:57:a5:6b:b2:2b:8e:
                    c1:51:90:e4:33:72:de:61:35:8e:d3:5c:53:a8:c2:
                    65:d0:ad:99:ad:88:e9:ec:4f:ec:74:46:c2:4d:c9:
                    20:ed:88:4d:0f:da:b2:22:7d:fa:ab:1a:d0:e2:f7:
                    d6:e7:7c:d8:59:d5:93:cb:88:03:18:b5:eb:78:95:
                    4d:83:59:37:ad:10:29:3c:74:99:f2:59:31:8b:7f:
                    5a:e3:26:78:6a:48:51:a7:07:08:ee:52:f1:5d:c6:
                    4d:cc:a5:8b:c1:e6:d9:f3:0f:50:67:04:89:96:f0:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1A:56:17:63:8F:F2:58:B8:D4:1A:D1:B5:2B:CE:07:B7:85:8E:B8
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:7d:da:85:24:47:41:d9:28:14:1a:ad:81:db:d1:c2:e9:de:
         69:57:76:23:51:69:99:c2:61:2a:f3:71:8c:9a:d7:dc:12:b3:
         11:11:5a:8f:51:1c:3d:fc:78:94:49:52:cd:51:df:b2:e3:03:
         fd:2e:56:62:fb:11:e1:03:29:45:74:11:ec:ca:28:c7:12:83:
         1f:16:9f:89:03:2e:52:4f:3e:21:3a:27:23:ef:da:b7:ef:35:
         3a:eb:16:59:c3:98:73:f2:8f:40:a1:f1:af:f7:05:f9:1a:a2:
         57:97:e5:94:96:e9:65:e0:a3:3c:f2:04:b5:c4:c3:36:1f:05:
         7b:d3:3e:09:77:aa:5b:05:fd:f6:d2:94:42:4a:80:3c:66:b5:
         5f:a8:dc:3d:a2:14:43:10:d0:86:03:fe:ae:a2:8e:f3:31:7e:
         f5:1b:db:93:ce:df:13:72:f4:0e:02:62:ae:ab:2e:be:32:74:
         de:7f:aa:d4:3f:0f:f8:53:c4:f1:64:e9:8d:06:63:23:cd:3d:
         11:8b:67:4f:a0:0f:ff:0d:d2:96:2e:c1:ba:83:3c:cc:52:95:
         c5:38:48:16:0d:18:8f:8e:4c:9e:47:b1:d0:fa:bf:65:3d:62:
         4b:13:0e:cb:d4:f6:aa:02:7b:8d:ee:9d:ea:61:ad:13:c0:ae:
         1e:be:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org