Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa
File:                     3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          7qZNuvqJa+vgDgfk5M2Q7iccaZfSiCzBkxeuS2v6iPU=
Subject key identifier:   0B:C1:74:02:01:73:D7:BB:96:17:CD:96:60:DE:F6:6A:99:B9:B2:4F
Certificate issuer:       /CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
Certificate serial:       4D4ABE75AFC93FDF6C0A80CE51331A7C81A9BC6A
Authority key identifier: 33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 04 Apr 2024 11:45:22 +0000
ROA not before:           Thu 04 Apr 2024 11:40:22 +0000
ROA not after:            Thu 03 Apr 2025 11:45:22 +0000
asID:                     262530
IP address blocks:        170.231.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4a:be:75:af:c9:3f:df:6c:0a:80:ce:51:33:1a:7c:81:a9:bc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
        Validity
            Not Before: Apr  4 11:40:22 2024 GMT
            Not After : Apr  3 11:45:22 2025 GMT
        Subject: CN=0BC174020173D7BB9617CD9660DEF66A99B9B24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:c6:09:d3:d2:c8:94:09:07:49:b6:15:05:
                    a4:e3:bd:73:62:17:fd:bd:98:68:34:e4:14:20:6c:
                    b5:97:bd:c7:e6:6e:54:6a:3e:17:a3:80:59:6c:df:
                    5b:9c:da:b6:b8:47:2e:c5:89:b7:60:f2:95:73:f1:
                    38:ff:c4:40:d8:4d:77:13:27:c3:34:3c:70:40:02:
                    85:cb:ff:29:f6:ba:cb:d5:80:e9:6b:99:ee:6c:69:
                    f7:41:c1:d1:b1:c0:7e:02:1a:8d:b4:56:71:c8:be:
                    38:e4:a7:c1:36:a1:60:cd:11:58:3f:13:f7:82:81:
                    5c:d3:db:6f:6b:5f:5e:c0:f1:41:74:76:d1:5f:88:
                    02:3e:79:5a:9e:59:8c:c2:b1:32:d6:2b:1d:51:1d:
                    4c:c7:ed:1a:38:cf:ab:e9:c8:35:ee:a0:12:e8:ae:
                    fa:39:ae:14:8f:d0:84:87:59:12:69:bd:9b:35:f2:
                    39:2d:31:c4:a6:71:d5:49:d2:b9:cf:d3:7d:a3:98:
                    1d:f1:06:fb:33:08:92:1a:fb:30:59:df:e8:be:1e:
                    b6:c3:37:6b:b6:d2:ce:78:db:04:1b:b5:eb:f6:3b:
                    70:9d:20:9c:6d:af:e1:33:d0:9f:4c:b0:d7:a2:c6:
                    16:de:df:d3:0f:20:18:29:ce:b9:bf:27:bb:51:e3:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C1:74:02:01:73:D7:BB:96:17:CD:96:60:DE:F6:6A:99:B9:B2:4F
            X509v3 Authority Key Identifier:
                keyid:33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:8f:80:5c:f1:34:c9:de:06:bd:8e:1d:71:ac:53:67:52:62:
         2a:d0:40:4e:ba:1c:c3:26:49:a6:94:d6:60:4c:32:ad:1b:e3:
         ca:d0:b0:9b:dd:00:fd:56:ea:59:fd:8b:ef:b3:63:ff:03:a8:
         39:7d:63:ff:5a:d7:6b:96:4f:42:37:1f:e2:48:39:93:fb:98:
         4a:1e:f0:98:cd:1a:64:17:71:fd:07:f8:77:cf:3f:97:6f:90:
         bd:f6:b1:c1:c8:66:28:25:4a:14:cb:24:fa:9b:3f:29:d0:57:
         25:01:95:c9:7e:4e:c7:6e:da:cb:a7:a7:7c:05:d3:15:77:61:
         90:36:5a:1a:69:bb:7c:4a:a6:93:12:44:87:11:fb:6c:d2:15:
         ef:59:df:72:b7:a4:3e:83:36:c2:57:01:a8:1b:ce:7a:a5:a8:
         62:ef:e9:46:c7:a4:2a:c9:6e:fc:a9:09:ee:87:88:98:52:17:
         1c:66:b8:2b:ea:e0:be:3e:ea:17:cd:e2:df:84:a9:c1:66:20:
         93:e5:18:99:13:e6:22:11:26:36:5b:7c:97:39:e1:b3:ab:06:
         28:d7:89:3d:31:ca:22:b9:6c:30:9a:05:90:dd:39:c1:ca:0b:
         5d:dd:d4:c3:cb:e6:91:e6:9e:35:4a:b2:3e:ad:f0:9f:e2:0f:
         22:5f:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org