Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa
File:                     3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (raw, json)
Hash identifier:          y5cOMkMMAMHSIAHr+v1FX+Aa0BYFkdB82/YOE+0HEPQ=
Subject key identifier:   8A:79:74:51:2D:3C:1B:82:05:AA:5C:32:BA:C4:A3:4D:E1:20:B5:05
Certificate issuer:       /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial:       44CEC8F70CAE1402F94A357300CDEF3F47B22F4F
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa
Signing time:             Thu 04 Apr 2024 22:20:09 +0000
ROA not before:           Thu 04 Apr 2024 22:15:09 +0000
ROA not after:            Thu 03 Apr 2025 22:20:09 +0000
asID:                     266311
IP address blocks:        170.79.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
                          rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ce:c8:f7:0c:ae:14:02:f9:4a:35:73:00:cd:ef:3f:47:b2:2f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
        Validity
            Not Before: Apr  4 22:15:09 2024 GMT
            Not After : Apr  3 22:20:09 2025 GMT
        Subject: CN=8A7974512D3C1B8205AA5C32BAC4A34DE120B505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:32:9c:18:a8:05:4a:83:58:d4:31:33:9a:
                    d5:f2:4e:c3:1f:19:d2:14:7c:a5:83:e6:0e:98:e7:
                    5e:7c:a7:e0:19:c3:26:90:d9:6c:6c:f0:29:10:e6:
                    db:8f:33:16:3d:27:a1:2e:f2:6b:ee:b4:79:6b:e3:
                    5e:76:c0:39:7c:93:af:a6:36:8e:c8:52:28:46:0d:
                    b8:a5:8d:b0:a9:b8:24:a7:32:3e:1a:cf:ae:6f:ee:
                    a3:a2:87:6d:c7:a7:21:45:b4:7e:64:21:06:64:3a:
                    5f:6d:cc:4e:6e:fd:b1:4d:ea:19:a7:65:d1:1f:ea:
                    03:d7:4e:dd:b7:95:11:1e:24:06:16:86:df:eb:e9:
                    33:b7:50:4d:09:b9:64:82:74:da:0d:b4:8d:0f:f7:
                    bd:4e:04:29:1e:21:9b:13:09:da:8a:05:f4:42:c2:
                    31:28:7f:24:4c:98:ea:08:3d:98:a9:6f:72:7c:a2:
                    5f:99:0c:42:25:70:5a:f5:f9:16:9c:f8:10:a4:ad:
                    48:42:3b:9d:28:6b:16:ee:dd:49:af:b1:2f:2d:30:
                    db:c4:4d:cc:0a:dd:a5:78:64:af:6e:38:aa:88:6b:
                    b4:46:61:11:d0:13:a5:75:e3:db:0e:1e:e1:9e:19:
                    db:45:fb:52:9c:0d:d3:cc:cd:d4:a2:c4:86:cb:5c:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:79:74:51:2D:3C:1B:82:05:AA:5C:32:BA:C4:A3:4D:E1:20:B5:05
            X509v3 Authority Key Identifier:
                keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:75:7b:f7:bc:ea:5e:82:9d:9a:37:80:01:4b:a8:97:4c:78:
         48:89:eb:ae:b5:88:23:f6:ab:45:e6:24:0b:b6:e7:ad:52:7d:
         b4:7c:d9:b7:1c:5b:37:4c:b4:36:d3:95:6d:36:8d:96:b6:b8:
         1f:ee:f3:4d:e8:99:83:77:0a:1d:54:13:3a:a1:c1:51:b4:fa:
         f5:97:7e:da:b8:aa:36:cb:41:b7:6d:68:8d:8b:f0:f7:90:a7:
         df:58:0b:49:93:b7:0d:13:1e:97:db:19:85:e1:79:7b:4a:b4:
         2c:eb:36:ad:c8:6f:06:10:ec:33:66:c5:5b:c3:62:bd:37:72:
         72:31:7d:22:7a:d1:e6:06:f6:3a:cd:1e:bc:24:6d:7a:bc:b9:
         17:86:bd:a2:21:9a:42:37:dc:26:c3:2f:1b:44:f5:ab:ad:9f:
         23:14:44:2e:1a:d3:54:ad:b5:d0:6f:12:81:f8:41:2d:64:10:
         17:63:10:f3:88:fa:01:40:f8:6d:d0:db:ca:3a:7a:86:f8:b8:
         dc:0c:78:76:68:dd:67:52:64:ae:e6:92:1c:1c:44:6e:d4:59:
         4a:e4:ba:83:08:d7:ce:a5:d4:ea:a9:9f:ea:ea:e8:e0:86:fb:
         86:41:cc:02:d3:e4:6a:6c:41:a5:3b:af:2e:f5:0e:c7:48:dd:
         dd:61:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org