Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
File:                     3137302e3234352e39372e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          kG6orEyrkw+nron5DknLbsnqfFGHpWRZbYcxwTcXq/A=
Subject key identifier:   DB:78:C3:A8:5F:58:A4:AC:E6:FD:6D:1E:A6:A5:C2:17:6C:60:A6:04
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       27FF040C3FA0E20B25EAF89FD264540DA0E0322F
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:20:04 +0000
ROA not before:           Wed 10 Apr 2024 19:15:04 +0000
ROA not after:            Wed 09 Apr 2025 19:20:04 +0000
asID:                     61748
IP address blocks:        170.245.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:04:0c:3f:a0:e2:0b:25:ea:f8:9f:d2:64:54:0d:a0:e0:32:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:15:04 2024 GMT
            Not After : Apr  9 19:20:04 2025 GMT
        Subject: CN=DB78C3A85F58A4ACE6FD6D1EA6A5C2176C60A604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:55:67:c4:1d:85:c1:a3:e3:c3:77:21:f5:e2:
                    05:36:a6:53:2e:bd:81:96:f0:31:53:7a:30:4d:53:
                    c3:dd:d7:f2:01:6c:b8:09:28:4f:32:15:c8:5f:cb:
                    98:0a:0b:5c:e4:44:66:9c:80:63:72:bc:58:fc:dd:
                    9e:87:e7:4e:86:f1:65:89:df:18:3b:09:a0:5f:b8:
                    a1:2a:1f:9d:7f:73:41:32:c1:5d:ff:f5:37:eb:22:
                    d2:06:d1:bc:c8:82:d1:ac:2b:aa:8a:dc:bd:5c:a9:
                    05:f4:1a:44:65:04:91:6b:af:df:1a:c9:15:55:d4:
                    6d:43:b4:ef:ac:0b:ab:c8:f1:5a:a3:77:06:4d:0b:
                    72:0f:9a:cc:28:d3:31:bc:9e:77:6c:dc:36:55:ff:
                    2d:f1:19:f6:6f:7b:30:df:bc:b2:82:3e:ec:d6:c6:
                    db:53:cf:e7:30:bc:bb:ff:c3:4a:c0:ef:f6:68:ce:
                    3c:07:b6:af:cb:93:d2:15:3a:12:70:4e:5d:1b:fb:
                    6a:de:18:53:68:ff:65:8f:79:88:f0:71:6f:77:db:
                    b2:bb:66:af:b3:70:ab:f9:88:4e:e8:91:5d:3e:7b:
                    af:2a:11:a5:03:71:18:9f:2f:41:28:ee:95:3d:d7:
                    1e:ef:ff:df:a9:53:bf:a3:80:22:b6:47:d4:c1:b9:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:78:C3:A8:5F:58:A4:AC:E6:FD:6D:1E:A6:A5:C2:17:6C:60:A6:04
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:6f:2e:d3:f2:8d:14:64:fc:06:02:fa:c3:bf:00:98:77:
         98:46:dd:15:5c:93:0d:68:44:16:8c:f9:19:32:f0:c1:36:26:
         95:97:74:aa:25:ea:6c:84:ce:41:21:8d:94:cd:7d:8a:04:db:
         00:68:0b:1e:60:7d:d7:66:b6:9d:06:8d:be:47:11:81:14:fc:
         29:71:37:7f:2e:ec:f5:b6:83:34:d7:0c:cb:d9:f7:7c:3b:a6:
         5c:5f:c0:13:5c:66:7f:83:e8:ff:6c:30:45:55:e6:a1:5a:de:
         8b:1d:fb:cb:a8:3b:76:1b:73:44:6e:02:f8:05:73:a6:6a:9c:
         4e:e1:24:f4:ef:b3:8f:1e:30:b2:b3:83:0a:f7:cc:56:7b:11:
         16:52:98:51:62:98:d3:33:8c:d2:b6:0c:f0:01:7d:04:61:fe:
         0e:c7:93:8d:31:80:b6:9e:c3:19:dc:0d:51:a6:fa:a6:19:e2:
         7b:46:0b:e2:5b:c2:ed:d9:d0:d5:1a:3e:41:aa:17:7b:95:9c:
         8e:f4:b2:e3:82:88:75:b8:75:21:1e:66:65:2f:99:2f:81:4e:
         7d:99:77:51:f7:6a:e8:3a:4c:48:00:9f:f4:fd:44:1b:96:23:
         03:8d:7b:51:c7:9f:d3:b5:41:e8:9a:ef:23:30:91:fe:58:4a:
         52:43:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:12 2024 by rpki-client on console-fra.rpki-client.org