Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          A3BMgnimSQeZxr341dXkmBNGLkxBllwLfXu1gcSqVos=
Subject key identifier:   BB:29:16:52:ED:3F:DD:C8:6E:26:AC:5C:97:35:3C:51:9A:85:09:F8
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       6C1DCD72655FC9EBC6983CC81CE3050D94CFE16C
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:09 +0000
ROA not before:           Tue 29 Oct 2024 12:26:09 +0000
ROA not after:            Tue 28 Oct 2025 12:31:09 +0000
asID:                     265010
IP address blocks:        170.84.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1d:cd:72:65:5f:c9:eb:c6:98:3c:c8:1c:e3:05:0d:94:cf:e1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:09 2024 GMT
            Not After : Oct 28 12:31:09 2025 GMT
        Subject: CN=BB291652ED3FDDC86E26AC5C97353C519A8509F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:1d:48:73:9e:60:b6:d9:30:8d:3f:b7:06:
                    59:75:ae:e9:4c:21:e6:62:b5:34:83:ec:4f:3a:1c:
                    ed:4c:36:9f:c0:bf:04:39:16:b1:d6:d1:1a:01:d4:
                    05:98:82:8b:bc:83:48:ee:0f:cd:60:41:0d:6c:71:
                    56:af:c3:8c:72:ec:91:8d:45:e1:7e:38:5b:8d:2c:
                    03:6d:62:08:91:ee:c4:43:36:c2:ec:70:f6:11:78:
                    b3:90:73:ca:0c:45:ef:2e:27:6f:96:8a:6d:b9:07:
                    aa:3f:81:f0:93:08:55:60:f0:61:8d:fc:e6:8b:84:
                    0c:0b:6d:77:59:9e:d9:ba:9d:32:f1:c5:f0:cb:cf:
                    1e:17:a5:71:83:5b:d4:55:a3:10:86:83:b7:22:df:
                    0f:84:33:68:68:32:0e:ea:58:57:55:a0:a8:cb:33:
                    25:cd:0a:61:e0:94:d1:7f:fd:24:db:7a:31:96:02:
                    91:37:20:72:77:66:fa:ed:7f:50:b9:57:b1:b8:f1:
                    d9:c8:45:a2:e9:16:a1:72:f3:97:7b:d9:3b:be:59:
                    4d:7f:d4:ef:5f:4a:c3:28:3e:86:ce:24:85:db:7b:
                    dd:db:96:2c:ba:6e:27:19:ef:3d:bd:38:74:7b:2b:
                    cf:63:b8:9e:59:59:15:56:f9:5d:b0:5c:0d:6e:98:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:16:52:ED:3F:DD:C8:6E:26:AC:5C:97:35:3C:51:9A:85:09:F8
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:84:71:5f:c6:28:c9:b9:60:5c:61:5b:5c:e5:6a:9b:43:c3:
         7b:9e:9c:7d:0d:bc:31:4a:f2:94:55:2a:29:90:a5:7c:b5:c9:
         f7:35:48:30:a9:3f:d3:53:51:0d:54:87:64:be:24:2f:aa:61:
         a8:f3:47:d3:b3:e2:f6:f9:fa:7e:75:c3:1e:b0:94:64:e0:49:
         83:7c:12:eb:89:0b:6f:42:9c:7f:f7:2b:58:78:36:87:53:e1:
         7b:d9:42:5a:50:49:5f:13:4f:24:c8:1f:4d:7d:ff:20:15:02:
         31:dc:39:ef:b7:9f:a4:46:17:ce:bd:b3:b7:65:3c:17:a0:3c:
         cb:fb:e1:8f:a1:75:39:10:0d:46:b8:62:ed:0b:4a:f7:95:5c:
         a0:78:e0:86:17:73:63:38:1d:a9:e7:36:b9:6e:ef:5c:db:b0:
         60:de:04:75:ab:3e:5f:73:d8:4f:a6:74:4b:05:aa:52:42:06:
         51:67:66:71:ed:02:db:90:dc:bc:3c:59:95:14:c9:ad:62:e4:
         85:8d:70:5c:df:c1:6f:8a:23:d7:29:20:46:d2:6c:9b:c0:da:
         4c:28:61:c7:22:80:bd:66:20:05:e7:60:90:7e:9f:7b:68:20:
         e3:a1:35:e6:d6:a4:d4:51:c4:b8:c1:26:11:5a:ba:3f:07:be:
         9d:28:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org