Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa
File:                     3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          HsBRneav2ZC308BPSA04zSeXz10enYxoEEISZbzRjPE=
Subject key identifier:   55:C6:8D:CD:72:65:1C:D3:82:9B:ED:24:CD:94:09:DE:64:7B:EA:01
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       7CEBA811C305B7708A55644C5AA5D696905374B0
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa
Signing time:             Tue 12 Nov 2024 18:00:46 +0000
ROA not before:           Tue 12 Nov 2024 17:55:46 +0000
ROA not after:            Tue 11 Nov 2025 18:00:46 +0000
asID:                     262369
IP address blocks:        170.254.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:a8:11:c3:05:b7:70:8a:55:64:4c:5a:a5:d6:96:90:53:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Nov 12 17:55:46 2024 GMT
            Not After : Nov 11 18:00:46 2025 GMT
        Subject: CN=55C68DCD72651CD3829BED24CD9409DE647BEA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:72:ed:b8:4e:da:fa:a2:cf:3b:7e:09:fb:
                    42:46:0d:d5:fe:2e:9f:99:f8:9f:99:d2:38:da:9c:
                    42:ba:38:70:57:0c:d0:0c:ef:9e:d3:c2:e5:4c:b2:
                    97:e6:05:b2:e6:47:a4:06:6d:74:78:2b:35:ef:f4:
                    fe:84:d1:18:6f:11:a0:c4:3b:c3:f0:d2:af:5b:73:
                    ae:fd:7f:73:d4:54:f7:1a:21:af:36:08:04:32:84:
                    ad:ba:d6:09:ab:1e:c7:ca:a2:23:e1:45:cb:be:70:
                    ec:43:ed:a8:af:4d:69:a5:0b:31:1c:f5:ea:8f:c2:
                    f6:cf:61:dd:b0:81:69:80:14:70:e7:1d:4b:4e:49:
                    99:25:ef:8f:90:ad:21:78:64:76:f3:3b:f1:33:15:
                    a0:ad:1e:2a:bc:0a:61:6f:29:0d:5d:6f:46:bd:8f:
                    00:4e:70:3c:0c:a6:75:54:40:8d:48:33:fb:64:55:
                    85:d8:e4:59:04:ca:85:3a:b8:99:86:38:b3:6d:ce:
                    3e:c8:1e:a2:fe:73:ce:f1:88:5f:0c:ad:27:97:2f:
                    a0:7a:6f:a9:9a:85:a5:eb:12:77:bd:35:92:61:ff:
                    d5:92:be:de:c4:82:5e:e3:95:8f:8a:80:58:25:76:
                    1d:f1:85:2c:20:dd:bf:93:46:72:2b:c0:e5:e6:e3:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C6:8D:CD:72:65:1C:D3:82:9B:ED:24:CD:94:09:DE:64:7B:EA:01
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:30:bf:60:a2:52:79:54:6f:29:5d:c0:ac:fc:7a:a0:ae:ca:
         25:9c:f1:cf:e0:1a:09:c7:00:a1:87:19:bd:26:d2:78:82:99:
         67:a6:d6:eb:1e:95:88:29:f9:7d:95:37:21:64:3a:13:1f:4d:
         99:e6:00:2a:de:85:7f:9f:03:c9:4c:5d:87:5a:02:f3:74:7b:
         e4:7a:1a:81:a7:71:43:89:2a:91:c2:ac:de:62:8c:21:9f:27:
         32:4c:4b:33:36:14:b6:8b:32:d3:bc:bc:1c:f3:0a:0f:39:dc:
         b8:d0:19:82:6f:88:e6:14:01:48:e9:4a:ae:d8:66:ef:48:5e:
         9e:79:96:2e:8f:c6:67:cb:39:c8:c1:15:11:dc:a2:6d:24:cd:
         35:e6:3f:6a:70:59:53:0d:05:e3:db:43:f3:6e:21:e8:2a:e0:
         1d:14:a4:d0:6d:b1:dd:17:26:05:ba:38:8a:33:2e:70:db:47:
         cb:90:7a:89:09:c8:58:2b:e1:ad:70:89:88:6b:41:d6:a2:36:
         8e:d7:a4:95:21:e5:1e:50:41:d1:24:06:2e:54:9b:85:cf:69:
         66:61:ab:50:f3:cc:ee:aa:f4:53:46:08:ab:ee:01:87:8e:e1:
         ec:4f:01:fd:39:2e:5f:6d:2d:00:0e:2b:cc:5e:f8:6c:18:b3:
         2c:0d:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org