Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          KDeoh3+cInYxtH0rA0LAgZkNvsj+gV1VkgRvrrjHPmg=
Subject key identifier:   32:5D:79:A3:9B:16:D9:58:6E:75:C9:3F:38:68:64:49:1E:6F:42:14
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       56855EFB9BF334DB036DC543D34C29ECEBF7F062
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:13 +0000
ROA not before:           Tue 29 Oct 2024 12:26:13 +0000
ROA not after:            Tue 28 Oct 2025 12:31:13 +0000
asID:                     265010
IP address blocks:        170.84.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:85:5e:fb:9b:f3:34:db:03:6d:c5:43:d3:4c:29:ec:eb:f7:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:13 2024 GMT
            Not After : Oct 28 12:31:13 2025 GMT
        Subject: CN=325D79A39B16D9586E75C93F386864491E6F4214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:ee:fc:68:0d:b4:f7:c7:9a:e3:30:14:96:
                    1b:d2:c0:98:ff:eb:8d:fa:ef:cb:37:03:b6:a2:65:
                    00:85:45:17:27:b8:ea:69:0e:e0:8a:dc:95:75:c5:
                    c0:20:ba:d9:e5:ed:4b:df:d1:fe:ea:9e:2f:cd:43:
                    89:87:32:73:14:c4:12:15:2a:ce:d6:02:15:09:1b:
                    54:3e:60:e5:21:de:47:e6:53:4c:e8:f1:00:46:e0:
                    f7:72:59:76:ab:58:41:62:0c:5d:25:1c:bb:30:a0:
                    41:c9:09:c0:e2:04:93:a9:93:91:ae:1d:df:ee:9a:
                    77:a6:fe:8a:f0:97:7c:57:0a:19:6e:ba:97:7e:fb:
                    b3:fb:46:cb:24:a0:ba:97:c1:ab:54:72:d2:70:7d:
                    a0:06:a8:7f:6a:c9:12:0e:83:03:0a:26:1a:1e:b2:
                    da:a9:e8:de:b3:8b:c3:94:b0:61:ec:78:ff:f7:cd:
                    14:f7:60:12:a3:4a:91:09:48:b1:02:59:db:a6:42:
                    de:ff:71:86:66:e5:ac:44:34:2f:03:19:dc:a3:12:
                    0d:26:ec:6f:8a:86:ba:73:22:10:fb:ca:ef:7d:fb:
                    ba:9d:2f:32:7e:38:1d:e0:12:ed:7c:8f:e4:1f:7f:
                    57:ec:0c:f0:4f:1f:5e:ff:af:5c:22:8a:6b:32:8d:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:79:A3:9B:16:D9:58:6E:75:C9:3F:38:68:64:49:1E:6F:42:14
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:5a:1b:76:7c:a5:9e:c3:25:79:38:06:d6:35:a9:d1:ac:
         fd:27:3f:59:6f:55:00:e9:c2:1a:01:6e:3e:39:b0:66:5c:8d:
         86:e3:cf:1f:1e:b6:0a:6b:a9:76:24:f6:bb:21:32:f9:09:e0:
         71:ee:0d:21:9e:07:36:db:93:9f:36:85:54:16:1f:e8:04:18:
         dc:6a:75:11:49:0b:41:80:ca:17:4b:97:b0:bf:b3:06:3e:37:
         9e:c4:4c:99:fd:64:7f:af:51:07:f8:ac:37:0e:58:e4:34:14:
         44:73:13:15:0d:4f:12:d7:0d:01:ce:ce:04:a3:c4:9a:c5:48:
         ea:67:8f:22:06:ad:12:a6:71:e1:e1:80:46:3f:51:7a:a5:98:
         95:0c:74:6b:64:c0:c2:a1:e4:4e:31:2d:f1:c4:91:68:03:7a:
         46:dc:f8:1a:29:0f:53:87:9e:e6:da:25:a2:3e:ce:4a:78:c0:
         2c:f6:5e:0e:bd:34:36:90:6f:dc:da:d5:9b:1c:f2:a8:ea:aa:
         8c:5d:54:63:13:bf:4c:e0:17:f3:93:cf:64:45:79:d9:d6:fa:
         21:ff:ec:34:0f:fe:f5:21:3c:93:ff:e4:bb:85:66:94:81:8e:
         b1:8b:8c:8c:97:c0:49:56:2f:a5:31:b4:1e:b3:4b:14:7d:03:
         9d:7b:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:08 2024 by rpki-client on console-fra.rpki-client.org