Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa (raw, json)
Hash identifier:          lZosJ9SjDWQSyqi4BrTUU1DyEXRcZwpbYu8o5uhAtjs=
Subject key identifier:   8F:0A:E2:B4:4C:28:AA:23:06:1B:75:E0:C3:AC:FE:49:4F:B2:07:80
Certificate issuer:       /CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC
Certificate serial:       1AB52F059266773A3CDF651DA0253588E1896BC7
Authority key identifier: 4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa
Signing time:             Mon 11 Nov 2024 20:30:58 +0000
ROA not before:           Mon 11 Nov 2024 20:25:58 +0000
ROA not after:            Mon 10 Nov 2025 20:30:58 +0000
asID:                     28182
IP address blocks:        170.231.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b5:2f:05:92:66:77:3a:3c:df:65:1d:a0:25:35:88:e1:89:6b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC
        Validity
            Not Before: Nov 11 20:25:58 2024 GMT
            Not After : Nov 10 20:30:58 2025 GMT
        Subject: CN=8F0AE2B44C28AA23061B75E0C3ACFE494FB20780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:d7:2f:c6:89:80:95:c4:08:e5:13:d5:04:
                    26:dc:73:02:61:c0:eb:52:ef:b4:81:4c:71:98:b4:
                    a6:41:36:7c:ef:5b:1b:0f:e6:d4:62:9b:ad:26:70:
                    e2:4f:90:61:a5:5d:da:33:74:12:fe:7c:d6:af:20:
                    97:44:7e:d7:75:f5:e5:dd:5a:48:e4:61:06:a4:16:
                    60:4f:47:8c:7a:32:24:8b:b9:4e:5c:da:32:97:25:
                    2b:7a:bd:37:51:c2:45:18:37:2c:5a:23:3d:0c:09:
                    96:b5:23:b9:6a:4f:10:b2:59:1a:b6:52:dc:c6:7e:
                    8f:c9:67:16:4d:95:3e:0f:81:26:15:bb:4e:e3:0c:
                    3a:7a:a0:76:22:34:8b:33:6d:c7:c9:6d:9e:73:14:
                    65:9e:59:20:43:99:09:54:a3:04:2e:cb:f7:85:76:
                    11:64:45:6a:e1:1e:40:d2:b6:45:88:df:a5:e3:da:
                    86:0a:17:f2:95:3a:c1:11:44:f0:e6:a8:6d:5d:a1:
                    df:33:15:a6:9d:69:40:1c:f4:9b:f1:fe:92:06:6b:
                    d1:1d:42:79:e4:5c:6f:21:34:c3:8d:55:1b:0f:6c:
                    70:d1:a9:49:05:2b:a8:1f:25:95:22:f3:70:93:81:
                    f7:80:b1:70:f9:3a:b8:4c:eb:0b:60:34:3f:4f:88:
                    4f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0A:E2:B4:4C:28:AA:23:06:1B:75:E0:C3:AC:FE:49:4F:B2:07:80
            X509v3 Authority Key Identifier:
                keyid:4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:c2:4a:59:32:ae:96:f6:59:23:9a:40:39:2f:88:0a:a4:
         86:a9:eb:68:c4:06:0e:17:83:19:b2:da:85:95:45:34:5f:9b:
         65:7f:c0:36:48:86:02:b4:ee:cd:65:96:a1:a1:1c:11:cd:be:
         4c:83:1d:4e:3e:40:c4:7e:85:26:1d:4b:8a:2b:c5:d4:f5:1a:
         74:c6:ef:e5:04:71:8a:a8:7a:14:7a:cf:7f:19:e1:7c:d7:b3:
         38:a9:97:08:a4:22:54:5a:26:67:61:67:ad:96:53:fb:8b:04:
         5f:b1:9e:3a:34:5b:f7:aa:13:55:74:0c:49:5e:99:48:63:c4:
         ed:4d:8d:45:b0:0d:69:48:0d:27:99:0f:3c:c3:2b:1c:17:ca:
         55:e5:29:4e:e0:99:c8:a8:cf:b7:20:14:98:c7:de:ec:10:dd:
         39:67:2e:99:51:d0:7a:b5:89:57:6f:ee:6a:33:d1:62:11:d4:
         db:8a:99:bb:99:b1:91:f0:91:20:ad:d5:4b:4b:a4:13:bc:38:
         c7:aa:53:06:94:d0:48:44:25:47:7a:c4:e8:6d:c9:7c:79:a2:
         06:4e:d6:43:cb:71:a9:fe:a7:36:2c:37:16:30:8f:47:f3:86:
         8e:47:ee:30:35:2b:07:d6:f5:d8:7c:ce:0d:7e:93:e3:83:57:
         b0:05:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:37 2025 by rpki-client