Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230312e302f32342d3234203d3e20323636303133.roa
File:                     3137302e3234342e3230312e302f32342d3234203d3e20323636303133.roa (raw, json)
Hash identifier:          1zJ/YCI8V1ya8rCZlA/GUfsT1no2Ye5LkSyRXFuILpQ=
Subject key identifier:   59:1F:45:F8:87:94:B3:BD:3B:D8:69:3D:1A:43:70:E0:26:9C:A2:E6
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       0DD5D2FCFCE2294F367C4C01B2EEB7897BB65420
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230312e302f32342d3234203d3e20323636303133.roa
Signing time:             Thu 04 Apr 2024 12:52:44 +0000
ROA not before:           Thu 04 Apr 2024 12:47:44 +0000
ROA not after:            Thu 03 Apr 2025 12:52:44 +0000
asID:                     266013
IP address blocks:        170.244.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:d2:fc:fc:e2:29:4f:36:7c:4c:01:b2:ee:b7:89:7b:b6:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Apr  4 12:47:44 2024 GMT
            Not After : Apr  3 12:52:44 2025 GMT
        Subject: CN=591F45F88794B3BD3BD8693D1A4370E0269CA2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:5d:b2:eb:f7:2c:07:79:64:cd:d5:33:f7:
                    3f:98:19:f0:dc:8c:06:fa:f4:b2:d0:2e:52:49:92:
                    21:e4:4b:a8:56:5f:b6:0b:3a:18:a2:b6:0f:b8:84:
                    2b:b3:72:8f:62:c8:79:d9:f2:c1:2a:02:a9:9c:25:
                    4e:d4:2f:b0:48:22:27:9b:9f:8c:6c:f8:32:1d:96:
                    39:2d:ed:60:29:c6:b2:41:48:a3:4f:0a:f5:cc:cc:
                    da:49:46:10:07:4f:17:5d:aa:34:3e:89:0d:dc:dd:
                    b6:6d:0f:41:65:0f:e9:f5:09:38:68:1b:70:f8:09:
                    88:2e:ac:18:3b:a5:6d:0e:5f:e0:7b:d2:31:92:89:
                    d3:10:14:8c:9f:21:35:29:5a:7f:14:96:0d:91:ae:
                    97:4a:9c:59:2b:66:6f:78:b5:a3:e3:17:06:c6:fd:
                    f2:e6:3d:78:fd:66:95:92:dd:6a:4b:7e:27:9d:00:
                    37:f7:f3:e0:8b:c4:3c:91:87:32:06:9f:aa:d1:61:
                    cc:2d:e2:99:be:35:03:8c:81:5c:5d:dd:21:f5:d2:
                    12:b7:05:8b:58:b7:d1:ec:21:16:f8:86:5a:21:f4:
                    2d:3e:16:8f:e5:1e:88:9b:d9:f1:0a:e1:98:a9:42:
                    6c:45:4a:f5:38:35:6d:dd:21:14:c1:9b:28:a1:52:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:45:F8:87:94:B3:BD:3B:D8:69:3D:1A:43:70:E0:26:9C:A2:E6
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230312e302f32342d3234203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:f8:68:5f:55:b1:5f:cf:52:d3:e2:73:2d:53:9b:15:b3:
         7c:d2:43:71:14:a0:78:a0:e7:54:3e:5d:17:70:5f:87:91:76:
         7f:b4:50:2c:fc:c8:6b:bc:12:6f:6b:04:70:f7:ba:11:5a:aa:
         fe:bb:aa:8f:17:4d:0b:bd:a4:91:bb:f7:42:2a:4e:d8:4b:03:
         8c:78:e7:17:e9:37:ee:6d:25:1f:39:24:41:9c:ff:61:fd:34:
         62:90:26:06:cd:88:90:c4:8f:cb:7d:5a:73:2f:33:ab:e0:78:
         a6:c1:5b:b7:96:40:f4:eb:a4:12:af:f2:77:6b:ab:ab:3f:ff:
         c9:f0:79:3c:15:09:ae:14:45:6d:e9:d1:27:66:7b:04:b2:df:
         6d:17:46:e4:a9:17:6c:ab:6d:b6:07:6a:9c:01:0e:28:23:9a:
         fc:7b:16:03:b1:8a:58:6d:f5:15:7b:09:f1:a1:58:62:01:cd:
         e4:e3:30:25:61:4a:6f:72:7f:d0:55:a1:ca:7c:c2:1c:0b:f5:
         36:47:ba:6f:65:50:8c:42:d2:31:1c:c8:c2:6f:1c:a1:73:58:
         92:63:79:90:e4:cd:20:0f:df:50:0a:bf:9e:8b:2a:19:60:07:
         03:0b:d6:66:ed:62:ad:f6:dc:68:46:ae:d9:d1:7e:2f:86:58:
         33:b0:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:43 2024 by rpki-client on console-fra.rpki-client.org