Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
File:                     3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (raw, json)
Hash identifier:          7ogbspXrTZdCu2YAkejPs9FWFUDBpmswr5JyH8pZjZI=
Subject key identifier:   C4:02:80:B5:0E:9A:B8:E6:24:C6:7A:83:45:EE:8F:3E:73:48:65:7A
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       424E56CEC9A71C268F6A28D5E1AC5281C1810039
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
Signing time:             Thu 04 Apr 2024 03:01:18 +0000
ROA not before:           Thu 04 Apr 2024 02:56:18 +0000
ROA not after:            Thu 03 Apr 2025 03:01:18 +0000
asID:                     264992
IP address blocks:        170.84.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:56:ce:c9:a7:1c:26:8f:6a:28:d5:e1:ac:52:81:c1:81:00:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Apr  4 02:56:18 2024 GMT
            Not After : Apr  3 03:01:18 2025 GMT
        Subject: CN=C40280B50E9AB8E624C67A8345EE8F3E7348657A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:97:bd:6d:c7:a2:67:17:1e:09:f7:e6:20:
                    a2:3c:b7:85:ee:f2:27:31:38:ed:3a:d1:68:39:e6:
                    4d:23:9b:4f:6c:41:46:8e:90:d2:0a:5b:5d:32:8b:
                    cf:c0:ee:72:f6:a5:d4:6d:b9:aa:b1:29:74:7d:e8:
                    e0:a8:d9:65:0c:5d:df:d7:3e:b6:27:ab:d3:a5:e9:
                    9a:33:a1:d6:46:ad:10:38:be:f4:ff:06:55:cc:46:
                    92:ed:92:0e:d8:ef:2d:84:c3:ce:56:89:79:34:11:
                    94:d5:82:fe:9b:c7:81:48:b3:64:a9:98:09:43:7f:
                    35:2c:39:2e:07:ad:b1:ca:5b:b5:c1:d1:47:af:ac:
                    d3:61:97:43:d4:11:44:37:2d:e7:a1:32:c4:0e:b3:
                    ac:4f:39:50:9c:45:e8:72:92:04:09:9f:6a:b1:9e:
                    f9:a4:24:92:c3:1d:4b:f0:ab:0a:1e:b5:47:95:a5:
                    34:29:cc:d0:32:38:11:9b:f5:5b:ac:e4:78:2b:29:
                    df:d9:7e:ba:9a:ff:4f:e2:a3:57:33:b1:c3:b3:85:
                    f3:c0:d2:f5:03:2d:bc:d4:3d:88:0f:75:0c:67:af:
                    52:75:79:c6:2d:35:a7:c9:ac:bc:95:9d:ba:32:56:
                    f5:61:08:8f:12:db:10:2c:aa:fa:b9:60:96:87:9c:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:80:B5:0E:9A:B8:E6:24:C6:7A:83:45:EE:8F:3E:73:48:65:7A
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:bf:9a:68:29:cf:34:6a:02:aa:50:c6:e4:b7:b7:3d:3a:
         31:a3:b0:36:66:d2:69:9b:d8:52:f1:8f:54:4b:83:cf:9e:c9:
         d9:43:f2:99:3c:ba:16:fa:74:2d:f4:42:bd:48:ab:87:c9:f2:
         e8:ff:00:a7:12:0d:3a:b9:0a:c4:0e:63:37:89:ac:48:17:e6:
         bb:07:18:d2:9a:71:4b:5d:f3:36:e6:23:16:55:dc:c7:58:b9:
         fc:bc:16:eb:2c:80:c6:ec:7e:b3:0a:d0:3c:40:fa:5c:57:79:
         9d:5a:92:6f:45:6f:0f:ca:c7:fe:d2:59:9e:72:82:8b:2d:d3:
         7c:9f:72:6c:11:bf:26:89:ee:d7:92:b2:ca:2b:64:ad:f5:29:
         70:a4:46:5c:3d:c1:60:18:5c:9a:93:02:38:e7:6d:b3:fb:90:
         4d:8e:83:0b:43:c3:d4:ba:a1:bd:a6:0f:53:4f:49:03:d1:f8:
         56:04:40:47:bc:ba:d2:f5:c4:9c:67:05:5b:6a:61:e0:1c:a6:
         2f:15:52:a4:2b:6e:c1:e9:12:57:1d:33:4b:aa:c3:ae:49:f3:
         5e:4e:87:99:44:5e:b0:e8:40:66:a2:88:2d:90:38:c2:5e:35:
         5e:8a:db:d3:54:57:7e:8d:28:f9:47:e5:c7:69:76:ff:9d:03:
         36:42:e7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:07 2024 by rpki-client on console-ams.rpki-client.org