Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131302e302f32342d3234203d3e20323732313933.roa
File:                     3137302e3234372e3131302e302f32342d3234203d3e20323732313933.roa (raw, json)
Hash identifier:          TDjjEdU8HcdagL6tjdSPku+t1M/18nyLrKmYXDTFUbM=
Subject key identifier:   1E:1F:7F:AB:1D:32:71:8B:D3:3F:B0:48:EA:A4:97:D8:2C:0E:DE:39
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       7EB67F1027BFB0535D76DAC3CC7F2D6E77E32DE0
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131302e302f32342d3234203d3e20323732313933.roa
Signing time:             Fri 23 Aug 2024 18:25:27 +0000
ROA not before:           Fri 23 Aug 2024 18:20:27 +0000
ROA not after:            Fri 22 Aug 2025 18:25:27 +0000
asID:                     272193
IP address blocks:        170.247.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl
                          rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b6:7f:10:27:bf:b0:53:5d:76:da:c3:cc:7f:2d:6e:77:e3:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Aug 23 18:20:27 2024 GMT
            Not After : Aug 22 18:25:27 2025 GMT
        Subject: CN=1E1F7FAB1D32718BD33FB048EAA497D82C0EDE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:34:f9:ec:f9:0f:d8:ef:47:e1:9b:a0:28:
                    67:da:ef:a6:fb:51:dd:a6:cf:2f:ca:ca:3f:76:8f:
                    57:6e:22:01:dc:08:9a:3a:99:41:ae:a1:9f:57:0a:
                    4a:0e:f2:5e:c3:b2:86:90:0d:0c:24:9f:80:02:17:
                    4f:98:85:b5:fd:37:5e:64:a4:6e:0e:47:c9:5f:a3:
                    fa:d6:91:59:d7:19:4e:93:ff:41:e5:05:0d:86:5e:
                    b9:5a:54:5f:81:89:cd:be:cf:3d:1e:f7:f9:09:82:
                    73:61:15:c1:dd:e7:2d:91:4f:fc:37:5b:c2:67:76:
                    dc:64:99:fe:4d:82:8a:09:25:2e:87:b2:00:10:5d:
                    6e:3e:b1:a9:3f:36:51:78:6e:48:55:49:dd:51:67:
                    8f:c9:38:81:82:9a:ed:c9:85:e6:a0:9a:65:fa:47:
                    9b:1c:d1:8d:ea:fc:9d:6f:cf:ce:d0:6c:ba:76:ac:
                    1f:31:79:9c:c7:7a:27:04:4a:a3:92:94:6e:dd:3b:
                    bd:a7:65:5a:6d:34:3b:a7:e7:fd:bc:75:96:59:ea:
                    ae:0d:84:ad:18:89:69:32:63:0f:53:1f:f6:f0:7f:
                    e4:09:c2:bb:f1:eb:c5:0d:6d:8f:59:67:89:97:5b:
                    ed:51:be:c8:c9:0c:c6:9a:1c:88:4e:5b:5b:f0:09:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:7F:AB:1D:32:71:8B:D3:3F:B0:48:EA:A4:97:D8:2C:0E:DE:39
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131302e302f32342d3234203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:e8:d2:5d:a8:d0:b6:62:c9:48:cb:f7:1f:68:6c:0e:49:
         a9:66:8b:08:e9:df:fa:02:a7:3e:78:13:24:70:b8:c0:cb:5a:
         a9:b0:2e:6a:e2:3c:33:5d:25:4f:cd:aa:94:b0:10:a4:db:88:
         38:93:54:91:96:69:75:72:3d:e3:47:91:0a:0a:df:8c:e3:e1:
         ec:69:50:b8:ed:e6:86:0a:46:a3:a4:8d:24:2a:8c:d4:d6:15:
         e8:cb:46:99:f1:74:d4:ff:0d:c1:63:34:e9:fb:e6:7b:60:59:
         4a:4f:01:22:49:4c:f6:42:cd:e2:cd:39:c8:33:7e:b3:a5:93:
         cf:1a:ce:bc:d5:36:f8:ad:e3:06:dc:48:11:68:26:62:54:d8:
         ed:c1:66:68:f9:1a:12:e0:23:ae:b6:3b:9d:5d:8a:01:0b:f6:
         20:99:ba:db:03:fe:63:06:e0:ce:f1:e2:c4:ec:30:90:ff:25:
         b4:10:f9:98:04:54:5c:a3:95:55:4d:98:22:39:a6:73:d6:dd:
         0e:c6:31:1d:76:64:64:39:0e:21:63:ab:9c:af:36:1f:90:34:
         b0:a6:bc:96:03:26:13:99:61:f4:7d:84:75:c4:18:c3:39:1f:
         a3:e4:07:4b:fb:1b:87:c0:ab:c7:c3:05:f6:b3:ba:c9:b6:1e:
         43:5d:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org