Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
File:                     3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (raw, json)
Hash identifier:          GSNFTzUEyTdlowf4FvLQskWocmh2y49rrioxhq5gT7M=
Subject key identifier:   C9:70:49:A2:8F:C2:86:DF:82:C6:D9:F2:25:02:A7:EB:CE:DF:46:34
Certificate issuer:       /CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
Certificate serial:       19309CDA04552670CFD0A83CED68B6D69DE5B7B0
Authority key identifier: 18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
Signing time:             Thu 19 Sep 2024 18:12:57 +0000
ROA not before:           Thu 19 Sep 2024 18:07:57 +0000
ROA not after:            Thu 18 Sep 2025 18:12:57 +0000
asID:                     265011
IP address blocks:        170.84.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.crl
                          rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:9c:da:04:55:26:70:cf:d0:a8:3c:ed:68:b6:d6:9d:e5:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
        Validity
            Not Before: Sep 19 18:07:57 2024 GMT
            Not After : Sep 18 18:12:57 2025 GMT
        Subject: CN=C97049A28FC286DF82C6D9F22502A7EBCEDF4634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:ae:3e:b0:bb:6c:80:8b:ee:dc:06:69:f5:
                    88:0a:05:54:25:33:02:cf:93:f8:15:5d:cd:62:2e:
                    ca:4a:0e:a3:3e:1e:8c:3b:d2:ca:86:b0:99:e0:7f:
                    30:38:14:20:b4:a8:d4:18:a0:da:ed:78:eb:1d:1d:
                    c0:32:3a:cd:67:09:3e:95:39:1b:23:69:6b:7b:28:
                    d5:ee:48:ae:42:b0:43:8e:89:a3:6b:47:21:82:65:
                    60:e9:94:b7:13:c4:6b:24:07:39:38:8c:47:02:dd:
                    c4:09:46:aa:ab:01:08:be:99:d8:1c:61:5c:e2:5a:
                    c4:a1:b5:11:7d:1a:cc:2f:1b:50:8d:97:75:a3:bc:
                    6f:db:4d:4e:f8:d5:16:14:52:97:e4:d9:bd:88:87:
                    6d:83:f8:d1:b4:47:70:49:a8:d6:25:5e:2f:a3:ce:
                    71:ed:75:24:d4:19:46:64:b7:44:08:ca:0c:98:6d:
                    c3:0a:09:dd:bc:37:5d:84:c5:99:1a:25:a2:8d:fa:
                    28:0c:78:31:5d:82:13:3d:f5:02:bb:89:12:71:92:
                    d0:04:10:90:d0:fa:d8:95:1e:71:8e:60:42:6e:ab:
                    1b:08:83:35:f5:8e:89:50:d3:9d:c0:fa:35:a5:84:
                    0d:ac:d7:93:87:8b:bb:a9:44:ad:a1:c8:b2:ad:74:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:70:49:A2:8F:C2:86:DF:82:C6:D9:F2:25:02:A7:EB:CE:DF:46:34
            X509v3 Authority Key Identifier:
                keyid:18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:9f:33:c9:37:fb:25:bc:56:2e:21:e3:4e:b5:a8:5e:bd:
         0b:b4:ee:82:90:3e:7d:b7:8a:aa:b8:7c:77:e4:f1:94:d7:35:
         e9:65:ae:f8:b0:0d:0a:59:a6:52:5f:3e:a2:cd:70:37:d2:8e:
         e4:98:86:38:c5:07:21:46:b4:98:9d:26:24:9e:d8:a8:7b:00:
         9c:f0:cf:5b:a7:12:f3:30:e6:82:14:31:cb:aa:e5:8d:3f:a8:
         55:e0:15:56:1e:69:a9:b0:71:82:47:2d:4b:4e:71:43:d7:56:
         ec:00:4c:f3:1b:fe:6f:cb:8c:26:9e:1d:0f:93:f5:7d:99:14:
         55:d2:f5:43:f6:64:ad:37:65:4e:92:f3:3a:a6:9c:9a:e8:bc:
         b6:b5:57:fc:95:fc:61:c9:a4:1e:68:65:26:18:60:91:bd:d5:
         4b:fd:30:a2:31:c9:a0:c2:4e:73:c3:d9:19:e9:46:6a:f0:57:
         3f:74:18:3d:06:74:c2:6a:c1:0b:29:52:b8:4b:c0:fa:5e:a0:
         81:6f:b7:99:96:7b:8a:ce:dd:b6:99:c8:fe:61:50:94:ef:25:
         35:14:4b:e7:eb:29:20:89:3a:64:0f:48:ce:38:af:aa:22:e3:
         d2:87:89:39:8d:fb:86:eb:16:5b:b4:ac:a6:4a:c8:9e:74:43:
         e3:4d:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 00:37:43 2024 by rpki-client on console-fra.rpki-client.org