Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa
File:                     3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (raw, json)
Hash identifier:          1pEDXxgtoXa8FHZk9uZJJN1QFfHrSPNgSZs7IXiz+Bs=
Subject key identifier:   49:FB:DC:4C:15:3C:60:89:86:65:82:CB:8E:3C:3D:FF:AF:36:47:18
Certificate issuer:       /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
Certificate serial:       6297CD7219979687A57CB114EA0C7BB21958D00B
Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa
Signing time:             Thu 04 Apr 2024 22:23:46 +0000
ROA not before:           Thu 04 Apr 2024 22:18:46 +0000
ROA not after:            Thu 03 Apr 2025 22:23:46 +0000
asID:                     266299
IP address blocks:        170.79.148.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl
                          rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:97:cd:72:19:97:96:87:a5:7c:b1:14:ea:0c:7b:b2:19:58:d0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
        Validity
            Not Before: Apr  4 22:18:46 2024 GMT
            Not After : Apr  3 22:23:46 2025 GMT
        Subject: CN=49FBDC4C153C6089866582CB8E3C3DFFAF364718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:b9:06:4d:aa:e0:99:53:41:ad:c0:b8:69:
                    8c:73:05:d5:4d:4f:57:70:2d:7c:22:f6:cf:64:27:
                    34:9f:3e:24:53:be:e3:97:a1:7f:b5:bf:97:95:f9:
                    f5:fe:46:6f:fb:0d:f6:7f:b4:49:f5:dd:05:c3:a7:
                    11:68:74:4a:5d:30:7e:da:da:0b:f5:19:35:aa:c6:
                    cb:88:32:f2:d0:30:8f:c0:6e:10:a1:91:2b:cf:eb:
                    d2:42:f1:33:0c:88:ae:47:0b:b9:db:41:e5:28:49:
                    b4:93:1d:c8:87:ce:b3:1d:7d:e7:5a:00:86:12:0d:
                    87:7d:a2:58:a8:e5:d5:66:83:bd:d8:52:fa:cb:61:
                    8d:c4:20:24:04:66:0d:2c:6f:97:0e:d6:5a:6e:e1:
                    cd:e3:5f:e7:5b:98:43:63:74:31:d2:fc:c8:4f:51:
                    de:8f:db:5d:55:58:7f:be:29:56:c6:fe:34:1d:56:
                    a4:97:6a:fe:d1:f5:cb:23:51:fa:09:4f:1c:08:92:
                    d6:31:bc:04:1c:5c:6a:b8:d8:4b:44:a5:63:b2:6a:
                    6d:6f:de:98:66:db:0a:79:7a:45:54:71:ab:bb:49:
                    9f:eb:4f:a9:88:36:f3:77:02:f2:b3:86:57:4a:53:
                    3e:36:ce:fd:05:1a:59:34:01:aa:4e:ae:db:2f:9e:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:DC:4C:15:3C:60:89:86:65:82:CB:8E:3C:3D:FF:AF:36:47:18
            X509v3 Authority Key Identifier:
                keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:1d:aa:65:27:43:7a:81:b5:c7:f7:de:41:5d:9b:d8:9a:
         e5:6d:e2:8e:f6:4b:b6:3b:a2:02:1a:4c:e3:42:3f:12:93:8f:
         6e:b9:8e:de:55:72:e9:a0:5c:46:25:9c:4d:19:50:c4:8f:c3:
         ba:ed:17:87:73:ee:da:b8:5f:66:96:65:65:da:a7:6b:e4:bf:
         18:80:86:4b:81:a6:6e:a3:8c:d4:0a:de:02:d1:8c:d4:42:87:
         b6:5a:a0:0b:51:a9:49:da:6f:b1:07:c7:d5:39:73:7a:0a:a6:
         65:7d:73:58:61:09:50:0a:20:5b:c5:ea:50:2c:09:93:ab:8d:
         5e:b2:15:bf:de:10:c9:aa:2a:91:69:1c:71:af:c5:47:0b:c7:
         40:fb:82:96:38:8a:c9:2f:3d:fe:80:72:16:14:4c:6f:7a:2a:
         ee:ef:79:79:45:1e:2b:3e:f8:48:1a:34:0b:cc:d5:5b:3e:1c:
         f0:51:93:60:ce:3d:7f:06:71:d7:44:b2:6d:91:f1:10:52:e3:
         d3:aa:ef:8b:15:41:7e:3f:51:10:9c:cd:fc:77:9d:8c:7c:5e:
         c2:74:01:3e:65:75:88:39:4f:b6:c8:78:a3:54:8d:cf:3c:8b:
         2c:83:fe:b1:28:e3:32:77:4b:4c:7b:a3:45:37:c3:66:5e:12:
         e0:23:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org