Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32392e302f32342d3234203d3e203532353837.roa
File:                     3137302e37382e32392e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          aPq3AsS5o5hkA7n8o+6nhJYDV/aJbmB0dnS0cTOIgmY=
Subject key identifier:   E4:78:95:BB:D4:7B:5F:95:53:B0:1C:33:29:76:A1:1D:AC:BA:9A:EB
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       4B18CCEAB1405FF856D64A8E1CE9BDDF8A3BE1
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32392e302f32342d3234203d3e203532353837.roa
Signing time:             Fri 12 Jul 2024 02:18:29 +0000
ROA not before:           Fri 12 Jul 2024 02:13:29 +0000
ROA not after:            Fri 11 Jul 2025 02:18:29 +0000
asID:                     52587
IP address blocks:        170.78.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:cc:ea:b1:40:5f:f8:56:d6:4a:8e:1c:e9:bd:df:8a:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jul 12 02:13:29 2024 GMT
            Not After : Jul 11 02:18:29 2025 GMT
        Subject: CN=E47895BBD47B5F9553B01C332976A11DACBA9AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:8a:be:a6:18:49:8b:70:30:95:88:9e:a8:
                    05:0f:ec:20:74:dc:9e:a7:ca:5a:b3:5b:f2:a7:c6:
                    39:09:a4:bd:34:a7:13:23:a0:e8:bb:31:7f:2f:cf:
                    c5:60:71:09:a3:69:66:3e:be:9a:11:b8:05:6e:a7:
                    3f:85:37:22:23:29:67:cd:16:4d:b9:1e:96:96:72:
                    42:f5:ae:01:94:bf:5a:5f:ac:a7:1c:64:bb:3d:3c:
                    f1:e6:da:8c:c3:a9:4e:77:41:3a:ef:37:ec:60:e6:
                    b2:73:35:24:ad:f6:76:a8:04:10:ab:92:d0:89:e1:
                    f0:8b:7a:89:0d:60:b8:1b:8b:b2:ff:bf:1f:a8:a3:
                    4f:d6:e0:8e:a5:54:9f:b8:a9:36:f1:0e:61:a6:86:
                    bb:aa:72:55:90:79:08:93:6e:cf:62:fe:b5:7f:3b:
                    23:7d:cd:2a:c3:01:05:ce:da:1a:b5:b6:20:ec:c8:
                    5e:2a:19:bd:c0:4d:d9:18:73:d2:ad:7f:7d:40:da:
                    7c:ad:9f:cf:3a:8a:a2:3c:f2:37:91:a6:36:dc:5b:
                    66:28:04:f7:c0:60:30:4c:b9:98:5d:09:5a:70:7d:
                    a7:e9:f6:28:ef:27:d0:05:a6:ff:bd:a6:4e:7c:18:
                    e3:40:23:00:3c:e5:85:f9:42:24:4f:af:96:7e:44:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:95:BB:D4:7B:5F:95:53:B0:1C:33:29:76:A1:1D:AC:BA:9A:EB
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32392e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:be:41:c2:a2:13:33:80:cd:eb:c5:3d:3d:7e:c0:2a:b5:bd:
         b6:c3:3b:28:05:d9:ee:81:f8:fa:31:8c:8c:df:4f:73:8a:83:
         67:c5:31:cc:eb:53:cc:12:a3:33:c7:99:56:c0:e4:9b:23:68:
         c2:56:da:91:23:67:c4:60:bd:ea:43:12:f8:f0:f7:fd:5c:b3:
         14:84:3e:af:18:6d:09:cb:34:5d:36:2e:ef:88:12:92:48:b9:
         68:73:f0:e9:ca:a1:59:a1:e2:a9:83:bd:48:44:83:ef:2e:5b:
         f3:22:05:27:f4:b7:61:ed:1f:6d:ac:53:8f:b9:4b:b7:f5:96:
         f1:d4:2b:a6:2f:77:39:b2:b5:7f:80:05:78:07:57:23:ee:90:
         3a:65:e5:f4:8f:13:0d:d9:1c:7a:5f:c7:bd:b0:18:df:a7:f4:
         5f:08:b9:1f:7e:eb:62:8a:71:ff:41:8d:f7:05:64:29:80:c2:
         80:4c:1a:58:7a:62:b7:e7:44:1b:31:67:88:e7:81:f1:69:24:
         f3:b5:05:03:52:bd:ea:e5:57:b5:bb:76:77:d0:7f:45:27:45:
         4c:3c:09:66:04:fc:01:e0:d9:27:30:9c:32:da:1a:70:8b:6c:
         2d:42:47:ff:0a:f4:de:70:67:25:4b:31:18:b1:19:9f:c9:9e:
         53:ef:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org