Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
File:                     3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (raw, json)
Hash identifier:          iIrQVb+oFNoMn4qIX3ARP+rhcCH/gWUK95CLvP//8bw=
Subject key identifier:   4D:A4:58:BE:C6:17:DF:86:A4:FC:27:D3:13:6D:E6:60:B6:26:00:FF
Certificate issuer:       /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial:       2E8B0F2832DE554FF3DF88A35EF396207C120660
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
Signing time:             Thu 27 Jun 2024 12:04:00 +0000
ROA not before:           Thu 27 Jun 2024 11:59:00 +0000
ROA not after:            Thu 26 Jun 2025 12:04:00 +0000
asID:                     52592
IP address blocks:        170.247.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl
                          rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8b:0f:28:32:de:55:4f:f3:df:88:a3:5e:f3:96:20:7c:12:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
        Validity
            Not Before: Jun 27 11:59:00 2024 GMT
            Not After : Jun 26 12:04:00 2025 GMT
        Subject: CN=4DA458BEC617DF86A4FC27D3136DE660B62600FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:23:0f:5f:47:c7:5a:19:29:b6:33:11:3b:
                    80:76:15:da:de:84:9d:4f:49:c9:ea:aa:70:f5:06:
                    d6:db:ad:23:bc:36:92:99:65:6a:0e:d4:95:96:db:
                    22:31:c2:44:3b:7e:28:46:f3:7d:ae:3b:ea:cf:1e:
                    91:d4:7e:76:58:9f:96:fa:fe:f3:0b:30:d9:c4:4a:
                    9b:15:b4:8f:76:d5:91:91:20:75:3f:26:93:58:fa:
                    45:81:eb:5b:0a:1b:57:a6:8d:ec:b4:27:4d:97:3e:
                    6d:5e:0f:e9:12:b5:c0:2b:79:50:26:20:a7:f0:58:
                    13:a7:c8:a9:9f:52:1d:8c:d4:16:a4:04:e1:2a:c3:
                    42:59:2d:23:48:75:02:3b:1f:1e:76:47:84:7b:49:
                    73:3a:3d:4a:fa:06:1d:42:b4:6d:a5:29:4c:d0:80:
                    d5:0f:4e:68:8f:d2:6b:20:d4:67:3c:eb:50:90:04:
                    71:18:89:b4:f8:89:f2:09:57:b1:55:b6:34:f5:09:
                    63:17:0f:db:a0:9d:ee:c7:f0:58:fc:a3:82:8d:0c:
                    e3:b7:ff:a2:b6:b7:49:04:cf:12:62:e5:8c:8e:e6:
                    ac:c8:11:5c:8f:f2:51:24:ba:96:61:55:05:85:92:
                    b6:ea:05:38:c8:16:c4:08:df:c9:de:61:74:0b:72:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:58:BE:C6:17:DF:86:A4:FC:27:D3:13:6D:E6:60:B6:26:00:FF
            X509v3 Authority Key Identifier:
                keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:ad:0e:ef:45:f1:e7:d8:f0:a1:81:56:93:5a:fb:80:a5:
         33:d0:38:2d:61:60:5c:72:8b:75:91:84:f6:83:20:b7:d5:68:
         3c:2f:f6:b4:4d:17:23:2c:1c:3e:61:fc:58:81:0a:c8:df:40:
         f9:b0:cc:ba:af:14:3d:75:d7:ac:90:8c:6e:38:23:97:d0:ab:
         5b:1d:37:61:2d:c5:6f:a7:7e:89:61:45:fe:69:65:00:0c:4c:
         9f:ac:67:47:c9:8f:f1:5f:1b:6a:e8:d9:46:1b:f1:20:52:cd:
         d3:80:be:fb:74:c5:2b:be:cb:0d:d6:81:25:d1:62:86:f3:b7:
         89:7e:73:0c:74:09:a4:19:7f:9f:15:ad:da:c2:39:cc:d2:9d:
         2f:9f:0a:31:81:de:8b:08:b6:23:68:64:a0:3d:0f:a7:44:a9:
         ce:e1:c8:92:85:dd:dc:47:66:d7:5b:5c:cc:1a:87:3b:24:b0:
         ab:9d:08:06:4d:3f:92:9e:f0:99:e1:4c:13:6b:ba:76:b0:6b:
         aa:e0:99:07:1f:d5:2b:10:bb:e0:3d:9b:27:6b:ba:75:20:44:
         10:32:47:66:9e:67:a6:7d:ea:45:44:2d:7e:77:ef:24:b5:7b:
         f6:76:82:d1:23:e4:ba:e5:79:ed:26:2d:c1:13:95:cd:e2:76:
         d2:0e:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:07 2024 by rpki-client on console-ams.rpki-client.org