Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa
File:                     3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa (raw, json)
Hash identifier:          R+8RM4Ut1WjgboSXvXgtO7Hmu/ZLObyZn2UxSxoQz2k=
Subject key identifier:   41:5B:31:1F:0F:81:56:83:4B:25:B8:89:8B:C2:D7:CD:2F:F6:FD:07
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       4C9D30C69B7F3D501F722391718542260E11547E
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa
Signing time:             Thu 04 Apr 2024 02:49:54 +0000
ROA not before:           Thu 04 Apr 2024 02:44:54 +0000
ROA not after:            Thu 03 Apr 2025 02:49:54 +0000
asID:                     265043
IP address blocks:        170.231.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
                          rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9d:30:c6:9b:7f:3d:50:1f:72:23:91:71:85:42:26:0e:11:54:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Apr  4 02:44:54 2024 GMT
            Not After : Apr  3 02:49:54 2025 GMT
        Subject: CN=415B311F0F8156834B25B8898BC2D7CD2FF6FD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:28:85:93:b3:cb:d3:5b:55:41:37:ed:25:
                    84:7d:4c:3a:36:8a:7a:71:0a:91:1c:9b:2e:8f:2d:
                    f9:e2:4e:3d:82:05:fc:81:ee:7d:65:6e:7b:0e:5a:
                    10:f5:27:92:ba:3c:0e:d4:2d:a1:e2:2a:cc:f5:75:
                    07:53:6a:4e:f0:96:0d:fa:28:94:ed:d5:4e:83:2f:
                    fb:dc:78:2f:c2:c6:ca:1e:db:48:22:b5:03:e4:6f:
                    5c:33:7c:e6:91:de:e2:dc:33:7b:f0:f3:be:ce:ab:
                    45:be:54:fe:77:05:b1:cb:47:cc:75:a5:dc:99:3a:
                    ee:38:f0:61:4b:31:f1:ad:80:fa:0f:3e:f4:d7:a8:
                    19:b6:a3:1e:72:64:d2:14:f2:4f:7b:73:fe:9c:a1:
                    26:ce:c7:24:0e:c6:09:f3:89:db:96:bd:f8:83:cc:
                    e5:8d:a9:3a:95:30:69:7f:18:e4:b1:36:ca:7d:43:
                    08:40:00:f5:23:38:6c:ce:37:a1:01:5b:13:22:82:
                    18:76:ff:e8:0f:26:60:36:fb:82:75:66:f3:d7:d4:
                    b9:46:e0:95:44:6c:10:c0:b5:82:fd:3a:42:5d:f6:
                    49:6d:30:46:15:8e:89:e0:ec:42:fa:45:22:67:f6:
                    49:94:2e:2f:a4:2d:65:ee:14:bb:a1:4d:02:5e:79:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:31:1F:0F:81:56:83:4B:25:B8:89:8B:C2:D7:CD:2F:F6:FD:07
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:5c:5e:a4:88:27:b7:61:da:46:cf:ef:ff:da:4d:95:19:
         b9:ee:4e:b4:7a:b1:6e:82:0c:dd:8a:f4:00:21:2b:d8:7a:58:
         f9:a7:cb:20:6d:58:e7:b4:31:28:95:c7:bc:83:61:72:58:b1:
         9c:a4:97:bc:55:90:db:f9:23:81:e5:e2:8c:55:5e:84:d4:e8:
         2a:f2:5b:f4:54:b5:2e:07:87:3d:5f:f7:e9:f9:57:fa:9e:f6:
         0d:50:0c:7e:69:34:20:ef:d4:de:68:5a:ff:a1:72:73:25:da:
         6d:c0:fd:70:cd:40:1f:e2:f8:90:3c:7e:0b:3d:d7:5f:3b:80:
         cd:42:17:e4:bd:b1:29:e9:f7:e3:73:c3:16:6f:78:e8:ff:ce:
         2c:44:5a:bf:5f:92:d5:cf:ea:5a:71:53:75:4c:2b:8c:73:92:
         da:b1:24:ef:c4:f8:2a:e7:a3:5a:76:e1:0e:84:30:29:cf:38:
         53:aa:af:f2:b6:42:13:55:60:2f:d1:1e:97:39:6e:1a:40:54:
         48:d5:de:4f:9d:ef:51:40:cf:2e:63:a1:9a:31:bb:10:b5:96:
         6b:f0:86:10:b1:f0:bf:5e:8b:19:8f:fa:fe:2d:f6:4a:d5:e9:
         6d:b5:1f:02:27:68:92:16:5d:61:b2:c1:6e:e4:2b:f9:3d:36:
         af:94:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:58 2024 by rpki-client on console-ams.rpki-client.org