Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa
File:                     3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          3f6R65emXmNLpbVJ3Z9SCoS11OJn1LQkXvDc6zwjags=
Subject key identifier:   9E:13:01:AA:37:20:B6:7A:41:90:76:9C:9C:28:13:F5:06:AD:1A:D4
Certificate issuer:       /CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
Certificate serial:       2E68F56058429DA3B5BBB31F7C2FE8526E891958
Authority key identifier: 46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa
Signing time:             Mon 16 Sep 2024 00:03:12 +0000
ROA not before:           Sun 15 Sep 2024 23:58:12 +0000
ROA not after:            Mon 15 Sep 2025 00:03:12 +0000
asID:                     262785
IP address blocks:        170.238.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl
                          rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:68:f5:60:58:42:9d:a3:b5:bb:b3:1f:7c:2f:e8:52:6e:89:19:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
        Validity
            Not Before: Sep 15 23:58:12 2024 GMT
            Not After : Sep 15 00:03:12 2025 GMT
        Subject: CN=9E1301AA3720B67A4190769C9C2813F506AD1AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:8a:37:72:35:4c:31:a7:0f:6a:52:32:91:
                    db:87:8d:25:d4:aa:ad:55:b3:0a:15:61:24:9c:f3:
                    0b:4e:1f:35:86:82:8e:38:a9:67:d5:7a:08:c2:14:
                    f8:d0:b7:ff:47:67:71:e7:4a:fc:da:42:d7:41:5b:
                    6e:a4:a1:1d:75:ce:53:84:b7:55:d8:39:e3:07:d9:
                    94:d4:58:b4:f5:a3:f8:49:f4:7d:2e:bf:40:0e:49:
                    c8:15:1b:96:9d:d3:db:e3:25:a5:26:f6:d2:0a:1d:
                    8d:b3:83:eb:07:ab:13:78:b1:7e:4e:d7:1e:cd:75:
                    c9:a7:a9:5b:72:d8:f4:1b:e1:9e:89:db:96:ba:86:
                    b9:01:ec:d4:1e:a0:a2:7d:76:9d:02:6c:f8:36:0c:
                    7a:db:33:8d:ac:91:5a:ef:dd:e1:74:41:d3:52:40:
                    35:7b:d7:de:48:b3:e1:16:20:96:44:cd:4f:26:ed:
                    53:b1:8a:bc:79:03:7d:c0:52:59:ac:b3:ce:9a:ef:
                    99:34:1b:b1:b6:96:5b:1c:70:06:7c:3a:4b:26:6a:
                    39:23:7f:61:a0:86:d0:9a:8d:9b:a5:d5:c8:45:c4:
                    e6:1a:9c:3b:42:5f:0a:43:e1:cc:42:96:e0:1c:f6:
                    35:5f:1d:9e:95:0e:39:dd:14:57:b7:89:30:cf:33:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:01:AA:37:20:B6:7A:41:90:76:9C:9C:28:13:F5:06:AD:1A:D4
            X509v3 Authority Key Identifier:
                keyid:46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:e0:1b:7b:9f:de:51:7f:19:e1:3c:a7:be:fb:d5:e2:7b:
         34:f3:0d:c2:25:db:6c:fb:61:83:ef:06:42:68:96:77:66:a6:
         08:e5:48:6a:6c:fe:e2:b2:a2:72:73:dd:3a:39:82:5d:31:62:
         8b:2f:d8:28:e6:d0:29:e5:35:e5:0c:c5:bf:36:d6:9e:14:29:
         af:18:a7:cc:19:10:8c:41:c0:48:bd:df:91:63:e4:ec:6b:53:
         41:f7:6c:fd:e1:12:fe:f0:11:2f:b4:7f:4b:43:cb:85:d1:34:
         f6:4f:d2:8a:8d:1e:ec:c9:b3:ce:04:c0:05:d9:0e:6e:aa:9f:
         b5:8f:57:e1:d9:80:27:e2:69:9f:d5:31:56:b5:cf:c3:fc:ac:
         65:74:36:72:22:ae:9b:dc:d8:d3:0e:c2:19:27:b3:0e:0c:ad:
         44:72:b4:66:77:b1:f0:2f:c9:94:fe:ef:03:28:b6:72:1f:1e:
         50:80:c1:78:44:67:86:e0:91:1d:c2:f0:79:50:47:45:21:22:
         82:56:8c:e8:6e:d5:4f:9e:7b:d7:52:d6:c0:e1:26:b9:e7:e5:
         d9:4f:0f:c1:c2:95:2a:17:d2:b6:2b:11:4b:fa:d2:8a:76:de:
         6c:e5:87:22:30:e6:1a:f8:7e:d1:7e:7d:a5:2d:8d:46:19:f2:
         2d:7f:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org