Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa
File:                     3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa (raw, json)
Hash identifier:          pnqqK3Geag0L11OXAwlGAm38jdZ+AdO5BS7MXSS7E0s=
Subject key identifier:   5C:3F:10:0B:84:31:E5:ED:E4:5C:F6:C7:05:D2:31:8B:73:B7:D1:43
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       61F6525B5C912E5DB56662A1E0460217A175CC6A
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 02:42:48 +0000
ROA not before:           Wed 20 Nov 2024 02:37:48 +0000
ROA not after:            Wed 19 Nov 2025 02:42:48 +0000
asID:                     61621
IP address blocks:        170.231.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f6:52:5b:5c:91:2e:5d:b5:66:62:a1:e0:46:02:17:a1:75:cc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 02:37:48 2024 GMT
            Not After : Nov 19 02:42:48 2025 GMT
        Subject: CN=5C3F100B8431E5EDE45CF6C705D2318B73B7D143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:40:9f:f2:f5:8f:84:c1:ed:e2:c6:fa:53:
                    0a:0a:f7:a9:cb:f3:6c:4c:03:6e:5f:b0:3e:f3:05:
                    71:58:48:e9:a3:53:fb:9b:1e:8a:00:74:b0:fa:e6:
                    51:24:04:06:a1:56:aa:2f:b0:b1:38:24:d7:3f:c1:
                    ad:32:e6:a5:c3:81:39:68:09:9c:73:b6:cd:65:9f:
                    ad:a1:41:6d:7f:73:71:aa:98:9c:cc:e8:1a:0f:05:
                    10:04:b6:f9:8a:ee:27:3b:24:ff:c1:3f:6d:23:c0:
                    e9:c3:48:b4:d2:01:e5:51:a5:66:b7:ed:f6:d0:c6:
                    c3:f6:b9:d8:ea:aa:be:76:13:9c:71:cd:5b:85:fe:
                    7c:f9:fd:20:0f:ae:42:48:3d:59:f6:3f:7c:fd:f7:
                    32:7a:a0:7a:e1:f8:05:e0:32:f3:fb:6d:5d:0a:56:
                    2b:af:e6:e8:f9:33:16:20:56:65:3f:a1:97:c1:87:
                    3c:66:41:dd:05:8a:26:67:24:0e:b7:72:ab:75:0e:
                    4d:b2:46:85:6c:1a:d9:e4:d0:bf:42:6b:77:04:74:
                    19:0d:c8:4b:33:3b:3c:42:01:60:41:e1:ef:0d:e5:
                    5a:1a:d7:5a:3a:20:71:09:4d:35:8e:5b:a5:6d:a8:
                    9c:22:28:a9:f3:21:06:fe:43:da:c0:d9:48:1d:fd:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3F:10:0B:84:31:E5:ED:E4:5C:F6:C7:05:D2:31:8B:73:B7:D1:43
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:03:78:d2:61:f9:fc:7f:81:e4:7e:93:ee:cb:f0:2b:2b:
         89:cf:26:ee:ab:cc:63:00:bf:6e:85:49:bd:13:6f:13:01:4b:
         9a:dd:06:f9:34:a0:2b:54:0e:d2:a4:3c:8e:d7:74:1a:a6:e9:
         ff:37:45:1d:e2:06:44:ee:f7:fb:b5:e4:bd:8b:f4:c1:7a:be:
         ed:36:ed:b9:b5:9e:97:76:46:0e:b8:08:31:d5:84:6a:34:d3:
         db:83:39:8a:b8:d4:55:00:8c:e8:90:de:fd:5d:36:b0:96:ca:
         e5:8d:6f:c4:77:e4:59:8a:37:44:28:e5:78:30:b0:16:ca:4a:
         7e:c8:27:1b:5c:30:f2:8f:13:bf:36:68:2f:97:54:51:3c:bc:
         56:5e:d1:ba:72:f5:d0:83:cf:4c:75:52:2d:83:53:20:a7:02:
         cc:b8:1a:2b:d4:42:87:b8:c0:a6:8d:cf:84:a8:bf:1d:cb:5a:
         c7:54:ed:30:85:33:c9:c6:11:c1:f7:99:f7:7b:a1:06:81:c9:
         8c:55:a1:c0:c3:68:35:9a:ea:a1:a3:12:a5:c3:08:c2:d7:46:
         a4:15:22:b8:eb:e7:f3:47:13:1f:97:d3:00:f8:23:70:65:1b:
         24:1f:c0:b3:8d:a8:22:8f:de:22:b6:fa:52:73:c1:9d:f2:a7:
         77:6b:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:32 2024 by rpki-client on console-ams.rpki-client.org