Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          YHvk0FLSZ2XBLmLrmflo+tVFJygDbfIfjbfZhbVZ61Q=
Subject key identifier:   BC:21:F9:E4:73:88:9D:AF:92:F5:4B:58:40:D0:D0:95:97:41:8D:04
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       09871762C126F48F74702DC5FBA1F4AAF5243A57
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:06 +0000
ROA not before:           Tue 29 Oct 2024 12:26:06 +0000
ROA not after:            Tue 28 Oct 2025 12:31:06 +0000
asID:                     265010
IP address blocks:        170.84.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:17:62:c1:26:f4:8f:74:70:2d:c5:fb:a1:f4:aa:f5:24:3a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:06 2024 GMT
            Not After : Oct 28 12:31:06 2025 GMT
        Subject: CN=BC21F9E473889DAF92F54B5840D0D09597418D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:79:c4:59:a4:99:b5:4e:36:67:32:55:37:
                    59:d3:f2:38:8d:0a:00:a8:c9:e6:7a:4b:ed:3a:cf:
                    c6:bb:95:98:06:96:c0:ae:de:e0:1c:1f:9e:29:bb:
                    20:d1:ee:7c:b4:a8:df:fb:8c:e6:5e:d1:23:ad:2a:
                    58:6b:48:9f:1a:ef:45:b9:17:99:73:23:3e:eb:39:
                    f5:70:32:8d:81:92:b2:ad:32:c9:8e:7e:69:d0:4d:
                    12:72:70:17:f9:54:ba:98:fa:a1:98:10:9c:e5:01:
                    94:93:61:a6:1f:26:2f:dd:5a:08:be:1c:aa:42:c5:
                    f2:3b:cd:86:f9:da:a5:b9:bf:8b:2c:43:3e:a7:94:
                    6e:62:ae:5d:b7:df:d7:37:cf:9d:32:ca:23:47:fa:
                    4a:52:f1:41:3e:2a:db:23:36:80:1a:18:d2:19:7e:
                    a3:22:0c:fb:ad:15:20:5f:7d:aa:58:3f:14:84:f5:
                    c8:32:4f:11:8d:4f:6a:df:1e:bf:eb:bd:20:1f:cb:
                    bc:f5:70:d4:ca:72:07:27:08:75:76:f8:94:2f:59:
                    25:37:e1:d1:7e:52:e2:dc:30:1d:ac:89:c7:41:42:
                    cf:08:45:67:9b:0a:bc:da:cd:d4:3e:b3:89:9b:2c:
                    40:26:8b:6b:6a:d4:70:00:fd:3f:ee:93:bc:23:83:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:F9:E4:73:88:9D:AF:92:F5:4B:58:40:D0:D0:95:97:41:8D:04
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:80:29:7a:5c:81:c7:11:ee:30:86:fa:bc:41:b8:e1:e2:93:
         3c:0b:95:b6:aa:c7:25:95:91:86:dc:ec:b1:e8:e1:ad:fc:b3:
         b3:ec:e1:c3:ef:9d:00:0b:4a:86:40:65:8b:be:f2:01:45:00:
         3a:8b:b1:a4:49:06:46:ee:58:41:88:1b:69:79:b4:62:04:8b:
         d9:3c:49:0b:57:c7:1f:26:9a:56:19:11:18:73:8d:6d:33:84:
         f8:e0:38:f9:56:4f:d0:58:a9:3c:a5:02:38:18:15:7f:75:99:
         a4:2e:9d:ff:6f:ec:df:01:24:0c:fd:61:fb:9b:6c:5f:02:fc:
         cf:87:43:1e:7f:ad:5f:4d:2a:62:ad:dc:3c:e4:91:5b:92:39:
         16:ff:4e:32:47:cf:c0:db:bf:65:ce:cb:0c:17:f3:73:27:4b:
         85:fd:87:1c:4c:a8:f5:ca:2a:f0:66:59:76:3e:65:87:07:be:
         37:4d:19:a9:f9:42:4a:29:94:0e:4e:49:60:64:0d:f3:76:4f:
         8b:59:68:93:0e:e1:bc:59:14:e1:8f:2f:bc:e1:eb:75:6e:b7:
         6b:82:bb:2a:dd:84:ed:99:12:23:72:8d:a0:2f:8e:db:54:5f:
         9e:f5:d8:ea:f3:1c:f8:fc:40:30:bb:7f:f2:72:09:88:16:2e:
         b0:f9:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org