Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          mv8pbMjxA3u08OpCyya6XC0mOlYnUvqiaa1QUCdbVoE=
Subject key identifier:   DD:19:B1:BF:C5:20:14:1B:C6:E5:01:5F:64:10:33:BB:80:68:4F:C5
Certificate issuer:       /CN=95DCFB3408E5756D963C105FC27CDAA5323D7B17
Certificate serial:       1BA8C2EDFA6EB4E92AA871C60580B0B58652B677
Authority key identifier: 95:DC:FB:34:08:E5:75:6D:96:3C:10:5F:C2:7C:DA:A5:32:3D:7B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95DCFB3408E5756D963C105FC27CDAA5323D7B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
Signing time:             Mon 10 Jun 2024 13:41:44 +0000
ROA not before:           Mon 10 Jun 2024 13:36:44 +0000
ROA not after:            Mon 09 Jun 2025 13:41:44 +0000
asID:                     266020
IP address blocks:        170.245.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/95DCFB3408E5756D963C105FC27CDAA5323D7B17.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/95DCFB3408E5756D963C105FC27CDAA5323D7B17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95DCFB3408E5756D963C105FC27CDAA5323D7B17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a8:c2:ed:fa:6e:b4:e9:2a:a8:71:c6:05:80:b0:b5:86:52:b6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95DCFB3408E5756D963C105FC27CDAA5323D7B17
        Validity
            Not Before: Jun 10 13:36:44 2024 GMT
            Not After : Jun  9 13:41:44 2025 GMT
        Subject: CN=DD19B1BFC520141BC6E5015F641033BB80684FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:fc:32:45:3f:2e:2b:7d:a8:47:5c:09:9e:
                    bd:cb:ac:98:fe:c1:6b:fb:ea:9c:83:55:35:9d:46:
                    19:21:8c:d7:10:72:8d:dc:b2:8e:21:ab:c5:61:a1:
                    b0:47:51:4c:49:77:45:7f:cc:8f:96:0e:dc:7f:8c:
                    ee:17:fc:b7:16:24:0d:11:43:c7:13:c6:40:2d:b0:
                    2c:7a:0e:bb:97:d4:62:43:5b:08:69:d1:d4:52:bd:
                    87:98:85:75:3e:7d:63:21:19:2f:79:c3:0c:55:36:
                    db:c5:96:2c:b4:a9:8d:43:78:f6:ed:39:b4:58:ec:
                    84:e7:3a:65:8f:00:ef:49:3a:72:fc:5c:b4:68:69:
                    87:85:20:ae:f9:7d:22:5e:04:03:ba:da:36:8c:51:
                    94:fb:f0:7a:3e:31:e9:ae:95:89:f6:eb:35:4c:06:
                    b4:ba:ff:75:82:c8:58:93:fe:8a:c5:17:ef:cf:78:
                    48:90:2d:f0:ac:aa:14:be:21:e0:96:82:64:6e:9f:
                    cb:8a:89:96:c0:70:d8:0e:78:df:93:fc:e0:b6:6d:
                    9a:63:0c:9b:02:ad:4b:e3:ee:b3:e2:94:01:64:76:
                    ba:e1:5b:04:9b:c7:9a:20:fb:69:27:c7:05:6e:4e:
                    1d:94:68:72:5a:c3:92:82:4f:e8:6e:73:33:f0:4b:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:B1:BF:C5:20:14:1B:C6:E5:01:5F:64:10:33:BB:80:68:4F:C5
            X509v3 Authority Key Identifier:
                keyid:95:DC:FB:34:08:E5:75:6D:96:3C:10:5F:C2:7C:DA:A5:32:3D:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/95DCFB3408E5756D963C105FC27CDAA5323D7B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95DCFB3408E5756D963C105FC27CDAA5323D7B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:6d:93:b5:58:6b:c8:cb:a8:7e:c0:f0:65:c6:4f:1f:09:
         74:32:1e:7b:04:6c:bc:77:fd:47:85:3a:b8:4a:ec:0d:70:18:
         62:2d:b3:39:cf:a8:1e:e9:05:59:b3:a9:ba:a7:80:c4:de:9c:
         ce:97:ec:a1:09:d9:3d:58:dc:b3:3b:84:4c:91:eb:36:69:6c:
         df:d8:ff:87:ff:d7:ca:bd:4d:43:b7:01:62:a6:93:01:91:d9:
         bd:7d:bd:3d:6e:db:b9:0c:42:3e:03:ff:a4:ff:02:55:07:55:
         c3:76:03:bf:6c:ba:21:e1:9f:e5:e4:e9:43:04:1a:30:a5:d2:
         07:bf:73:ee:3b:7b:74:db:95:05:a0:71:ed:47:1a:28:f6:36:
         f8:f2:0e:ab:69:07:77:18:db:06:b7:ac:4e:fd:1f:f6:bc:a3:
         a1:1c:79:97:81:68:2b:5b:3a:f3:4d:04:8f:74:dc:df:44:51:
         02:e2:bd:23:ad:0b:f6:72:bf:e3:4b:af:48:4c:62:42:57:d1:
         c5:d7:9a:8c:bf:e9:c6:e2:b1:8c:70:e0:eb:1f:df:7f:cc:65:
         ab:1f:1a:bc:cf:b2:8c:98:bd:e2:26:31:65:69:c4:47:df:33:
         9a:6b:54:c7:73:81:7f:8a:91:78:f4:c1:01:3a:31:65:7e:1f:
         be:fe:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:27 2024 by rpki-client on console-ams.rpki-client.org