Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          M/DlavmjBRBAnNMmDL/K+i93xcMuMgPwuj/n1FOwKlE=
Subject key identifier:   1D:32:E3:8B:86:85:32:80:15:30:A8:B8:45:21:18:29:F3:16:3A:9F
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       44BBCC4E119DDFD9CB7FEE5D33B9B9350B0BD0C1
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa
Signing time:             Wed 03 Apr 2024 23:28:25 +0000
ROA not before:           Wed 03 Apr 2024 23:23:25 +0000
ROA not after:            Wed 02 Apr 2025 23:28:25 +0000
asID:                     3356
IP address blocks:        179.49.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 05:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bb:cc:4e:11:9d:df:d9:cb:7f:ee:5d:33:b9:b9:35:0b:0b:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Apr  3 23:23:25 2024 GMT
            Not After : Apr  2 23:28:25 2025 GMT
        Subject: CN=1D32E38B868532801530A8B845211829F3163A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:e4:99:ae:cd:86:92:94:93:1b:d1:66:41:
                    81:a7:4f:5a:29:f5:88:c0:b1:24:7a:ba:d3:a7:01:
                    ea:02:50:66:69:c6:d3:34:33:4f:05:dd:6a:cd:2b:
                    43:b5:5b:e9:c0:1a:bc:61:77:1f:aa:62:8a:22:5b:
                    b7:af:74:c8:09:45:9f:cf:d6:37:98:4c:98:68:fe:
                    1a:0f:55:04:f3:81:e2:01:de:ec:74:80:ff:64:98:
                    8b:aa:fa:bf:0b:fd:e6:aa:54:ef:46:87:2c:9e:82:
                    e6:38:66:fc:4c:d0:07:0c:84:b0:86:2d:b4:78:6d:
                    ad:74:e7:02:4a:bf:d5:c3:da:9b:f1:5e:d7:e0:35:
                    6d:38:f5:f3:4f:b2:e7:d2:8b:aa:f8:da:ef:a8:8a:
                    d5:01:24:d6:98:43:37:98:d9:a4:94:9a:0e:9d:88:
                    ba:a8:3a:07:91:15:e1:cf:fe:0f:ed:01:d7:b3:86:
                    e3:34:a8:b8:c2:b8:ed:c6:72:13:fb:14:20:a9:23:
                    b1:e9:f6:00:f9:c5:89:af:af:0e:3d:bb:af:49:54:
                    65:52:46:59:cf:c4:a0:71:fa:13:c3:e5:62:aa:6e:
                    cd:d5:c6:d1:3a:fb:69:82:b6:9d:63:f5:e9:83:4c:
                    05:ce:db:63:8b:15:b8:70:2a:a3:bf:c8:00:87:07:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:E3:8B:86:85:32:80:15:30:A8:B8:45:21:18:29:F3:16:3A:9F
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:66:54:fb:c6:57:43:57:a8:1c:f9:0c:f0:db:86:9a:db:10:
         ac:b0:cc:0d:35:f2:fc:a9:3c:a3:a6:0b:5b:b4:4a:7d:2f:aa:
         73:65:41:f2:da:ae:a5:3c:5b:2d:a6:d1:c1:3b:6f:46:62:d3:
         02:ae:54:7e:b3:ab:d0:03:da:af:22:0d:19:cf:b8:1a:27:c9:
         bb:6e:01:f5:c1:c0:46:c7:84:9b:a9:cc:e9:15:66:00:1d:4b:
         ea:5c:47:dc:03:83:4e:7d:3b:74:64:1f:04:f4:0d:d5:57:8c:
         d8:26:5e:d7:42:ee:36:e6:a0:8d:35:38:e4:3b:b7:91:6e:6f:
         29:75:b1:cd:c0:74:98:06:b0:3b:f3:0c:a2:16:34:e8:c1:4b:
         1e:c0:3c:02:85:5f:64:18:e6:bd:69:82:03:b5:9a:31:8c:12:
         91:00:7e:f6:cc:54:a0:cc:31:e3:7b:49:ee:dd:66:c3:99:e0:
         a7:03:fa:c5:26:2c:40:5c:04:5f:da:ed:94:1f:fc:45:f2:68:
         63:3f:87:f5:aa:85:a4:44:c1:cc:0b:cf:b7:6f:6e:79:d4:53:
         26:80:eb:87:8b:79:2b:21:84:ad:b0:8d:7d:5a:57:00:03:be:
         8c:ce:04:2d:2b:05:f5:25:28:e6:17:b0:52:f6:0f:6e:c0:f6:
         68:a9:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:32 2024 by rpki-client on console-ams.rpki-client.org