Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa
File:                     3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (raw, json)
Hash identifier:          WlNfSr8klRLTG+TcNvT+yMmq0YJaCdaGLMfM5ID/a9c=
Subject key identifier:   5B:88:C2:6A:25:41:FC:1E:45:89:63:25:81:D6:9C:88:87:A3:BA:19
Certificate issuer:       /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial:       405416078A84D212BD1C7924B5FA168F98A8F36E
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa
Signing time:             Thu 04 Apr 2024 09:25:22 +0000
ROA not before:           Thu 04 Apr 2024 09:20:22 +0000
ROA not after:            Thu 03 Apr 2025 09:25:22 +0000
asID:                     263877
IP address blocks:        170.246.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
                          rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:16:07:8a:84:d2:12:bd:1c:79:24:b5:fa:16:8f:98:a8:f3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
        Validity
            Not Before: Apr  4 09:20:22 2024 GMT
            Not After : Apr  3 09:25:22 2025 GMT
        Subject: CN=5B88C26A2541FC1E4589632581D69C8887A3BA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:02:2a:9b:61:19:d2:94:6d:c1:e8:74:f3:4c:
                    1f:1c:ab:58:0e:1b:d9:f5:f7:d4:e8:d8:d5:28:1c:
                    0c:19:80:28:d8:90:46:34:24:74:f2:7a:07:de:fd:
                    eb:46:02:34:93:fd:fd:e2:b3:17:f2:54:e2:6a:ef:
                    84:52:dd:5b:fb:81:8e:01:fb:d7:78:34:eb:30:a2:
                    fb:79:6f:e0:31:28:c6:e0:46:7f:d5:48:60:65:73:
                    4a:86:b6:f5:c9:2f:73:bb:e0:29:d5:7d:f0:17:1f:
                    3c:9e:3f:26:37:a8:f9:5d:f1:bb:2e:be:a7:70:fd:
                    60:b0:cd:47:8f:d9:44:ae:9c:4e:2a:1c:a6:0a:0f:
                    3f:39:44:c5:5a:b4:26:56:cd:6c:0e:db:48:46:22:
                    d6:d3:31:72:00:08:e2:c7:e1:53:0e:b2:74:88:e7:
                    e6:3f:2e:11:35:30:22:27:64:c7:4f:f7:08:38:8a:
                    4d:b4:97:8d:b6:97:0f:9f:f1:b6:e6:0a:cf:d2:c7:
                    88:d6:fb:68:6a:a0:ce:6b:6f:73:fb:2c:89:e7:77:
                    12:32:25:49:a3:fe:14:05:5d:b9:72:e1:af:4b:37:
                    95:6c:fb:5d:12:e2:ed:1e:b4:04:c0:e5:9b:eb:15:
                    e8:24:ea:fa:41:8f:95:f8:bb:f0:2e:23:05:55:09:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:88:C2:6A:25:41:FC:1E:45:89:63:25:81:D6:9C:88:87:A3:BA:19
            X509v3 Authority Key Identifier:
                keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:05:f3:18:43:68:2d:b1:a3:8f:1e:e0:ce:9b:74:37:0d:9a:
         2f:c2:75:a9:93:a7:55:d5:67:0d:71:b5:1f:e8:9d:35:63:9e:
         d5:50:3e:9b:b6:ca:44:6f:7f:1d:42:14:e0:2d:a4:4b:37:b5:
         79:77:6f:56:3c:92:f0:88:65:b5:f9:f2:59:54:44:da:11:d6:
         91:e3:c0:38:f0:87:6f:8b:37:0f:9b:22:d0:64:8b:07:9b:35:
         df:98:30:fa:ca:fd:08:49:03:1e:c9:84:e1:54:13:7f:95:29:
         eb:eb:1e:e6:16:68:3c:67:c4:4a:99:be:a2:a9:e6:3e:8e:33:
         b3:e7:11:c8:6e:8f:17:ca:a6:8c:02:53:3e:68:59:bc:c6:fc:
         7f:a4:8f:8c:2b:31:97:a6:8f:63:eb:88:97:c1:13:b4:c5:0a:
         91:b4:36:32:c0:59:f5:23:70:4f:6b:be:a9:ed:11:67:49:0c:
         04:9c:bb:c7:ae:5b:07:eb:fe:85:ca:b8:5e:e7:d5:01:3e:c5:
         ac:86:95:d7:27:e1:4d:e4:68:b7:4b:be:15:8c:a6:d7:05:bf:
         27:11:23:85:0c:ae:ff:60:de:c7:0a:1b:68:ea:4e:1a:39:0d:
         ad:25:05:54:05:1d:38:1a:99:0b:f5:a0:92:91:3c:92:17:cd:
         ec:31:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:20 2024 by rpki-client on console-ams.rpki-client.org