Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa
File:                     3137302e3234352e32342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          cG7NbRvotCeA1d8EXOKfu2CBU++oesoQfC+HGHouIaA=
Subject key identifier:   96:DD:60:AE:62:E0:CC:B4:2D:2C:05:07:49:C9:D3:67:84:78:FA:BC
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       496817029C1C250F16A9B5F6C06F16C73A609752
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 04 Apr 2024 09:00:22 +0000
ROA not before:           Thu 04 Apr 2024 08:55:22 +0000
ROA not after:            Thu 03 Apr 2025 09:00:22 +0000
asID:                     61588
IP address blocks:        170.245.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:68:17:02:9c:1c:25:0f:16:a9:b5:f6:c0:6f:16:c7:3a:60:97:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Apr  4 08:55:22 2024 GMT
            Not After : Apr  3 09:00:22 2025 GMT
        Subject: CN=96DD60AE62E0CCB42D2C050749C9D3678478FABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:c4:37:e5:0b:86:f0:0c:56:72:19:cb:e8:
                    62:5e:58:ba:ee:03:7e:26:f3:46:5f:0a:9a:20:dd:
                    f8:98:ce:0c:4f:7c:b6:b0:96:f0:7b:62:6a:24:d0:
                    61:9b:5c:d9:8b:a0:d7:7a:e2:ba:d0:bf:e9:1f:d7:
                    16:d8:fe:1d:6c:06:fa:a5:ff:a7:52:48:19:90:ac:
                    f0:98:ae:f6:06:d2:8b:96:f9:da:d3:55:8a:a5:7e:
                    32:41:4a:4b:a5:3c:d0:cf:eb:78:7f:0e:ed:a2:74:
                    42:b2:49:bf:76:33:24:f6:7a:59:0f:d2:fc:24:80:
                    b0:ca:8d:0c:55:67:77:41:93:3c:02:6f:5e:19:d9:
                    d1:f7:80:cf:bc:a5:b4:a5:fc:cc:bc:2c:c6:bd:70:
                    54:a3:c9:86:78:ec:cb:a4:ac:e6:fe:09:fa:15:97:
                    1c:9d:07:8f:29:3f:1c:0c:79:37:eb:74:8d:5d:b9:
                    26:ee:d6:93:d9:5f:df:d0:3c:59:1e:15:5d:4f:fe:
                    9b:37:30:e7:a5:2a:b8:81:01:b0:79:68:f9:7e:9f:
                    73:df:73:81:b8:c8:cc:29:2b:b0:98:e9:b1:ce:65:
                    29:c3:62:55:65:a0:e8:d5:ec:92:c2:ce:02:eb:2f:
                    a4:4d:db:18:da:45:a5:72:32:db:ea:6c:6c:d4:e0:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:60:AE:62:E0:CC:B4:2D:2C:05:07:49:C9:D3:67:84:78:FA:BC
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:46:19:a7:d0:d5:82:7f:a8:dd:ea:36:7b:96:6a:68:5f:28:
         0f:40:ca:a1:ee:a6:c5:ac:c5:7e:7d:6b:b5:42:7a:b4:08:72:
         ce:48:36:ec:09:6a:f9:89:9a:d0:b7:2e:4e:95:99:0b:e7:fb:
         3f:e0:f0:09:22:a5:a9:d8:77:b7:b8:50:27:08:69:7a:b7:20:
         86:15:30:aa:fc:fb:34:9b:eb:f3:6f:8a:74:32:91:b6:71:69:
         cc:9b:9c:ab:76:c4:d4:8c:76:7b:8d:c1:97:01:6a:86:61:b0:
         99:04:f7:23:3b:c5:80:3e:24:54:27:15:64:a5:5c:5b:0a:ee:
         c9:8b:98:19:ea:41:af:a7:e7:96:1d:48:6f:3f:2b:9e:df:90:
         e0:14:3b:c4:65:21:70:62:92:09:fc:3f:b0:78:fe:b2:80:d1:
         8f:aa:7f:ec:d3:f6:42:9f:c0:34:8a:52:f1:67:5b:de:2e:3c:
         20:9a:09:0b:ee:96:be:21:52:37:3c:8d:eb:f3:db:f7:c0:c1:
         7c:78:aa:86:b4:eb:7d:da:03:88:cd:bc:3a:a7:67:e5:39:3f:
         44:34:77:ef:e8:38:4f:6a:c6:9d:2b:09:46:ca:0a:e3:8c:de:
         5d:78:b9:21:ac:26:9e:65:29:02:ec:39:1a:68:15:c0:65:24:
         c5:cf:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org