Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa
File:                     3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa (raw, json)
Hash identifier:          lUSNGGWc5yPePCC1DWkX4G+O8EGkLGyodWq2zc+gus4=
Subject key identifier:   2A:9E:89:9F:A3:12:6E:56:DA:73:15:D5:5C:FB:70:2D:19:72:4A:AB
Certificate issuer:       /CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
Certificate serial:       6F35A31C7617715932F1D4C9D62068470A101F2E
Authority key identifier: 4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa
Signing time:             Wed 03 Apr 2024 20:41:03 +0000
ROA not before:           Wed 03 Apr 2024 20:36:03 +0000
ROA not after:            Wed 02 Apr 2025 20:41:03 +0000
asID:                     61673
IP address blocks:        170.245.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl
                          rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:a3:1c:76:17:71:59:32:f1:d4:c9:d6:20:68:47:0a:10:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
        Validity
            Not Before: Apr  3 20:36:03 2024 GMT
            Not After : Apr  2 20:41:03 2025 GMT
        Subject: CN=2A9E899FA3126E56DA7315D55CFB702D19724AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:1d:77:dd:60:3e:86:42:7b:3c:9a:5a:f9:
                    3e:ec:76:94:56:71:2c:04:f6:29:7f:15:c6:c7:c9:
                    c5:b4:b1:e8:0e:e8:b9:d7:6d:0c:52:7e:fa:d7:45:
                    f5:02:66:20:6b:8a:ca:e9:c7:25:1a:83:87:4d:a5:
                    f9:0b:27:2d:b9:0b:27:ad:1d:8a:7f:e8:ee:7f:d6:
                    5f:1f:f1:cf:a8:f0:97:d0:a6:23:29:25:17:d3:07:
                    a1:0f:ed:33:91:46:f9:5f:ec:07:e2:b2:56:c6:2c:
                    6a:33:be:69:c9:1c:4d:0c:0e:a6:bd:96:d8:96:e7:
                    40:92:e2:1d:1a:22:13:e5:8c:94:a5:07:69:00:2d:
                    52:cd:57:69:9e:4f:8a:c7:23:1f:ac:fa:f2:23:5a:
                    b0:7d:8f:8d:67:3d:ad:48:29:95:4f:79:c4:5e:d2:
                    a8:fb:61:58:10:8f:8e:bd:9c:1f:10:2d:c8:39:81:
                    5f:61:75:81:28:51:cf:95:2d:49:f9:e6:ea:35:db:
                    b7:0e:9e:ef:93:36:0e:d1:45:a9:bf:ac:e2:2b:a0:
                    58:2f:f6:51:b0:16:94:80:ea:b3:a1:5e:79:dc:b2:
                    63:20:c4:ce:60:65:63:e9:70:da:7f:b7:80:b5:7c:
                    9a:37:6c:d9:83:8d:53:4e:77:30:7b:35:f6:83:5d:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:89:9F:A3:12:6E:56:DA:73:15:D5:5C:FB:70:2D:19:72:4A:AB
            X509v3 Authority Key Identifier:
                keyid:4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:e4:5b:bf:77:5d:c8:23:32:fe:c4:47:7a:b1:67:98:5e:
         bd:80:89:ea:5e:3a:fe:d3:f2:c5:97:14:1b:50:a5:d7:e6:ac:
         da:4d:66:74:34:3a:ee:89:59:50:c5:db:f7:74:cb:52:1e:93:
         1b:71:1b:6d:8a:7f:da:8d:a6:d1:8d:0c:08:7b:e5:be:03:2d:
         3f:a1:c4:42:2d:df:88:03:2d:1a:8e:e3:55:d4:2f:ad:ba:dd:
         e7:58:2f:05:81:6b:43:df:f9:b4:e2:9d:80:63:98:2a:bd:13:
         a3:eb:0e:06:93:c9:e2:dd:e2:ab:44:b8:3d:82:67:8b:fb:a0:
         f8:4a:2a:06:4e:72:cd:85:c6:92:f3:99:27:7a:b3:11:e8:c1:
         85:2b:8a:84:5d:51:16:e3:60:f8:12:b8:ce:76:ce:83:ac:b8:
         a2:fa:f2:fe:83:7d:87:0e:3b:c1:f8:39:9a:d4:a5:37:3f:1c:
         99:09:20:31:03:32:95:0a:a1:2d:bc:c8:df:c1:83:eb:9e:c3:
         69:76:0d:83:e2:7d:b3:b8:33:48:4f:73:0f:63:9d:bb:fb:f4:
         ff:74:71:87:99:12:14:b1:40:12:72:a6:84:30:44:fb:e3:51:
         3b:dc:fb:f1:82:02:5e:a7:8f:36:39:20:6e:5a:fb:ed:dc:3f:
         27:57:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:28 2024 by rpki-client on console-ams.rpki-client.org