Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          hrP/HEAP5FAP8LLP0ZZsF+1X6wzlwDJN0mIvmvAOE4g=
Subject key identifier:   DE:17:5F:1C:9D:EE:5B:16:74:50:0A:FE:2A:F4:BE:C1:0E:CA:EA:4D
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       1CB91ACCBBFAF5A7D760962B0C6E2263DC8BDD18
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:18 +0000
ROA not before:           Mon 27 May 2024 21:46:18 +0000
ROA not after:            Mon 26 May 2025 21:51:18 +0000
asID:                     265010
IP address blocks:        170.84.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:1a:cc:bb:fa:f5:a7:d7:60:96:2b:0c:6e:22:63:dc:8b:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:18 2024 GMT
            Not After : May 26 21:51:18 2025 GMT
        Subject: CN=DE175F1C9DEE5B1674500AFE2AF4BEC10ECAEA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:c3:43:0a:b4:bc:3b:97:b6:77:b4:79:69:
                    d1:eb:46:1c:6b:81:f3:1d:fb:5a:d4:61:a7:dc:ef:
                    09:f3:98:54:d0:af:1f:5e:8e:83:dc:0c:af:8c:43:
                    6c:1d:61:72:b2:9f:be:7e:05:0e:bc:83:51:4d:b4:
                    ff:4f:17:eb:dd:b8:40:93:d2:0a:d6:b4:46:39:71:
                    9e:3f:de:2e:43:c8:1c:09:46:0e:c4:0a:26:ab:a4:
                    0f:e2:d3:dc:71:22:39:25:40:6e:4c:11:82:7c:5f:
                    4e:73:c7:04:e9:cf:1d:be:47:29:6e:ec:53:ba:74:
                    4a:25:f6:a6:20:03:ad:57:04:8c:85:51:4a:f3:e4:
                    00:28:21:fe:d0:43:a9:35:22:23:58:b1:e3:0c:02:
                    c7:74:27:0f:5c:7c:5d:86:9e:be:84:4e:d1:ec:24:
                    12:86:45:23:6f:da:bf:25:ba:17:ab:0d:53:fe:e1:
                    82:ed:18:13:fc:dd:ba:9d:c8:ee:fd:7c:2b:7e:6e:
                    67:91:eb:5f:f1:92:fa:d7:b9:c7:07:83:16:e7:77:
                    37:7e:30:76:7e:e7:97:80:55:ec:0c:8d:9b:fc:3a:
                    ba:c2:47:b6:60:01:bf:45:07:6e:32:54:f5:4c:80:
                    a5:56:cd:3e:a4:66:bc:da:0f:8b:2b:71:86:61:2c:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:17:5F:1C:9D:EE:5B:16:74:50:0A:FE:2A:F4:BE:C1:0E:CA:EA:4D
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:e3:4a:04:04:b3:2f:b6:48:cf:d7:c2:0a:f7:7a:bc:2d:
         d1:62:18:2c:ff:50:77:0f:b2:d3:bb:a9:18:80:54:a4:aa:68:
         b2:86:dc:52:ca:d6:1e:09:4a:48:bf:a0:f7:b7:e0:82:9e:0a:
         bb:97:69:3c:56:c9:c3:a3:6c:f6:37:83:cd:67:04:29:f8:fb:
         a0:1b:96:cb:87:37:78:2d:d5:c9:49:6c:c2:2f:41:e7:12:74:
         d8:39:72:06:b5:13:e7:8e:0a:b9:60:48:c7:2b:34:ca:3b:7a:
         fc:06:42:7a:b4:3c:f0:b1:a1:bd:10:12:20:00:d3:56:7b:3b:
         f7:cd:37:6f:f6:7a:ff:70:a2:d0:a5:7d:50:3f:33:1c:5d:af:
         1e:f8:ef:33:1b:71:2a:4c:38:06:9a:f7:f2:4e:8c:2e:20:07:
         31:07:cc:4e:83:4e:e4:2e:d7:15:eb:6f:a3:62:16:fc:14:c1:
         23:84:36:0d:ea:79:b1:56:e2:68:88:80:05:a3:38:a8:79:a5:
         d2:77:1a:67:cc:0b:a3:01:2a:3a:9b:ed:e2:b0:ff:b0:5d:59:
         19:97:d0:59:c0:61:10:eb:4b:ec:10:3a:20:9d:73:88:02:72:
         fd:dd:ae:5d:2f:b0:16:11:6d:ca:80:cc:83:43:0e:d6:c6:c3:
         68:ac:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org