Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa
File:                     3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          Xkq8QNnhct5FfRLYaHjFBSLEhoKdtzWLLx8UQ5l26eQ=
Subject key identifier:   78:0D:A4:6D:7E:0C:13:FE:40:00:DC:58:FE:F2:51:60:E2:73:22:13
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       2F8C072290A8305A016CB73FDCED631FFC0E51D3
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 04 Apr 2024 09:00:25 +0000
ROA not before:           Thu 04 Apr 2024 08:55:25 +0000
ROA not after:            Thu 03 Apr 2025 09:00:25 +0000
asID:                     61588
IP address blocks:        170.150.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8c:07:22:90:a8:30:5a:01:6c:b7:3f:dc:ed:63:1f:fc:0e:51:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Apr  4 08:55:25 2024 GMT
            Not After : Apr  3 09:00:25 2025 GMT
        Subject: CN=780DA46D7E0C13FE4000DC58FEF25160E2732213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:6a:16:10:82:67:87:d9:df:57:60:d2:d8:
                    71:9f:52:f6:95:30:10:b8:f9:d5:2b:7e:02:78:31:
                    21:be:95:e2:ef:c4:60:fa:c2:41:8f:0e:ae:2a:40:
                    77:65:0b:cb:d5:ad:a5:9b:31:d1:4a:ac:b4:3a:8a:
                    7b:86:a7:85:1f:0b:a4:d4:7f:68:5c:b9:4c:f9:ff:
                    85:e0:2f:83:fa:a0:f0:b5:51:39:51:7c:68:d8:9a:
                    1f:4b:70:1f:05:52:6c:c1:5e:b7:f9:6e:e9:6c:54:
                    60:f0:61:a8:50:ca:b1:6e:27:9f:5c:28:32:c6:8a:
                    64:8e:6c:56:66:43:c0:f5:fb:b1:4d:e8:4a:77:5a:
                    20:df:f1:58:7d:89:80:13:c3:06:43:67:40:b5:8a:
                    56:10:49:50:a4:5d:17:78:26:fe:cf:8e:69:ad:f8:
                    4c:35:dc:55:b6:57:44:d4:93:0d:bb:e8:25:53:48:
                    e0:9e:7c:b0:83:b0:af:32:8f:f8:b6:2c:4b:70:99:
                    8e:ae:ee:f7:ef:b3:94:b5:50:12:4a:9d:71:fa:60:
                    50:1c:91:ba:f9:06:a0:34:dd:93:b3:1a:42:ea:d8:
                    12:18:c3:60:34:5c:a2:a5:6b:c3:ca:e0:75:82:8a:
                    f6:63:08:26:e3:15:a2:5c:73:c6:af:63:3c:f4:7f:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:A4:6D:7E:0C:13:FE:40:00:DC:58:FE:F2:51:60:E2:73:22:13
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:d4:ee:cf:fb:b1:50:8d:87:db:f7:6f:2d:46:ab:1b:33:
         49:45:b7:eb:31:9e:3a:0d:8d:b7:d6:34:0d:8d:76:a2:44:45:
         de:65:20:56:f2:2c:2e:41:45:33:9e:e3:f0:11:b2:ed:e0:ac:
         03:e2:84:49:8a:3a:b3:63:ec:e9:b8:62:b8:f1:88:ae:b7:e4:
         42:a8:e6:8c:92:c9:76:78:0c:9a:42:a8:76:7c:5c:b6:74:12:
         74:47:22:e5:59:21:c3:40:de:45:be:01:15:b1:91:f9:f0:df:
         e9:d8:b7:ee:88:74:4b:d4:4b:26:fe:53:a4:b7:61:c5:5b:7a:
         c6:a8:e1:30:e9:99:c1:6f:d9:91:d9:d6:dd:31:8f:73:cd:d3:
         90:52:f6:ee:fb:2b:b7:80:26:f8:94:6a:98:a4:8c:64:85:13:
         da:ee:48:9e:9d:9d:8e:eb:b1:37:d0:75:10:86:1b:16:8b:78:
         ae:b9:78:10:de:69:33:36:34:10:dd:66:4e:66:a3:33:d2:96:
         ff:6d:6f:1a:27:e2:08:98:2c:05:e5:46:2b:e3:70:b1:26:05:
         3b:9c:75:e6:64:c5:5a:cc:67:03:1a:d3:df:94:9b:e0:26:6d:
         78:44:75:ac:2b:fe:9f:db:e7:16:aa:69:17:fb:bd:d9:bd:95:
         54:1e:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org