Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323032.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier:          x4hGLVQvmAYWyLuUe80aaKMbIP4laLEAtmU86k5R6yI=
Subject key identifier:   C2:2D:BE:5F:F6:8B:E9:34:84:16:48:56:CB:F5:B6:66:C0:E7:F0:C5
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       60620A35B98A49F30E8570293472F0CC4C262F17
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323032.roa
Signing time:             Wed 03 Apr 2024 23:28:26 +0000
ROA not before:           Wed 03 Apr 2024 23:23:26 +0000
ROA not after:            Wed 02 Apr 2025 23:28:26 +0000
asID:                     202
IP address blocks:        179.49.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:62:0a:35:b9:8a:49:f3:0e:85:70:29:34:72:f0:cc:4c:26:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Apr  3 23:23:26 2024 GMT
            Not After : Apr  2 23:28:26 2025 GMT
        Subject: CN=C22DBE5FF68BE93484164856CBF5B666C0E7F0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:94:bc:be:2e:b2:27:53:1e:fc:09:72:3f:
                    f7:a1:73:e1:38:6d:14:48:ca:7d:ee:f2:5a:c3:b3:
                    da:27:2f:84:44:6a:4d:37:d1:66:ca:19:7f:3c:6a:
                    f8:39:27:6e:5b:b6:00:83:cc:63:2b:41:8b:8d:7f:
                    cb:5c:3f:d7:8e:b0:78:2a:92:48:3b:bd:06:cf:be:
                    a8:a8:3d:9d:1a:51:be:18:34:a9:e1:42:e6:17:6f:
                    5d:21:69:b7:05:0c:56:da:b2:f5:3e:f1:6a:a7:f9:
                    65:08:62:2d:7c:66:a3:75:95:64:7e:6c:c1:f8:8a:
                    f9:6d:fe:83:a4:4b:fe:b9:8e:17:f7:d5:54:3f:8b:
                    82:05:9b:37:01:79:41:6d:84:5f:56:e8:be:83:fd:
                    d7:0e:4b:17:5f:4d:57:52:d6:3d:61:69:ca:b4:e3:
                    c1:4b:0b:24:10:4e:2d:36:10:27:1f:69:7e:bd:18:
                    89:9b:46:e4:87:f2:83:46:36:a7:41:94:a7:bf:c4:
                    48:3b:b0:81:54:5b:6b:a1:29:16:47:e9:75:a5:9b:
                    3e:73:b1:f9:2b:87:b7:21:5b:9d:e6:9d:e8:c7:7b:
                    b0:3a:18:22:6c:6e:2c:90:ff:da:a7:9e:b4:aa:cc:
                    8e:ae:8e:50:12:81:9c:9f:44:0d:f9:55:d7:1d:53:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:BE:5F:F6:8B:E9:34:84:16:48:56:CB:F5:B6:66:C0:E7:F0:C5
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:b5:67:ed:35:22:f3:72:20:96:e4:19:d5:a5:50:12:2c:a7:
         87:e5:1a:35:f5:1b:37:3c:ac:5b:10:5d:3a:2c:a4:1a:df:c3:
         1f:ee:df:7a:1f:96:33:84:a6:8e:c7:7e:89:74:78:4b:55:6d:
         c1:70:bc:b2:ae:90:96:e9:c4:ee:be:07:47:88:d1:fc:64:1d:
         d0:ef:fa:d5:f6:02:4e:ed:95:c5:91:56:87:04:41:bf:c1:78:
         a7:81:aa:25:3c:99:df:2b:ff:05:9a:7f:08:49:8b:85:0b:7a:
         b1:21:21:de:f9:e5:c1:fb:29:1a:16:67:5c:28:ed:5b:22:7b:
         95:ab:ec:9c:e7:41:2d:0a:4b:e9:c5:c6:5f:4e:7d:97:54:00:
         ba:0c:13:fd:58:3c:53:36:f1:a7:13:c6:15:0c:1e:97:c7:8a:
         b0:6f:78:7f:41:c9:5d:36:de:b0:77:5a:0b:f1:0e:d7:62:08:
         f5:78:9c:2d:ed:e3:72:48:23:cc:0d:62:e6:96:76:d9:9d:ba:
         3d:86:b9:78:1f:7d:21:a4:50:0e:89:3a:cd:f2:b8:5a:2d:4c:
         b5:5c:71:30:c7:9f:90:cc:ee:4f:a4:bd:82:30:7e:8e:cf:c5:
         72:cf:01:65:68:75:c2:e8:7a:f0:ec:02:a5:59:46:f3:af:9e:
         6d:fc:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:21 2024 by rpki-client on console-fra.rpki-client.org