Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e2033333536.roa
File:                     3137302e38332e33362e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          5LZAuz8tKa6ji7MqzYuxQ1Bzxk3oKVyI0kpCavJEs1o=
Subject key identifier:   E7:63:3C:82:1F:D3:A8:D0:E7:DA:9B:8D:53:1C:CF:46:63:ED:5E:6E
Certificate issuer:       /CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
Certificate serial:       131946D417C7CC92C447AC7F011CFD9269402DCD
Authority key identifier: C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e2033333536.roa
Signing time:             Fri 05 Apr 2024 01:03:59 +0000
ROA not before:           Fri 05 Apr 2024 00:58:59 +0000
ROA not after:            Fri 04 Apr 2025 01:03:59 +0000
asID:                     3356
IP address blocks:        170.83.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 03:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:19:46:d4:17:c7:cc:92:c4:47:ac:7f:01:1c:fd:92:69:40:2d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
        Validity
            Not Before: Apr  5 00:58:59 2024 GMT
            Not After : Apr  4 01:03:59 2025 GMT
        Subject: CN=E7633C821FD3A8D0E7DA9B8D531CCF4663ED5E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:a6:80:d1:13:1a:f6:49:09:96:f3:0b:e7:
                    ea:bb:c0:d1:2a:18:7c:01:c1:e6:12:1a:eb:00:0d:
                    f0:f5:f4:d5:93:b3:97:f4:64:22:cc:2e:73:ff:ed:
                    81:d5:4c:bf:16:79:ca:fd:a5:ee:7c:5d:61:c0:86:
                    4d:3c:99:e6:82:1d:84:3d:67:e4:66:f4:fa:0e:67:
                    d4:88:d1:30:76:8e:81:ca:40:f8:ec:d4:f3:1c:f2:
                    fd:47:bc:e8:7e:92:96:e2:15:48:da:2c:0b:fd:26:
                    ae:97:f1:6e:0c:d9:1c:dd:70:75:5a:2a:2a:eb:d5:
                    14:ca:a6:63:54:19:c4:b8:12:c6:b1:36:47:48:a9:
                    41:3a:e4:b5:c8:53:81:b5:87:90:93:11:d6:dc:0e:
                    ea:3c:09:57:e6:19:cf:83:55:c3:be:c5:79:e8:2a:
                    27:15:15:f4:b4:05:d1:6f:8b:a2:a4:3a:e0:9f:00:
                    1a:c7:54:be:c5:71:90:92:5c:b5:07:a2:73:bb:22:
                    3d:74:50:69:33:8c:ab:f8:19:a5:70:c9:db:76:62:
                    fd:3f:10:1b:b1:2e:0e:e6:c9:85:31:19:dc:f1:21:
                    72:fa:6a:cf:07:9e:32:34:93:d1:58:8d:5d:6d:fa:
                    82:cd:cf:ec:27:0a:a9:fb:38:b8:d4:18:85:ca:b0:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:3C:82:1F:D3:A8:D0:E7:DA:9B:8D:53:1C:CF:46:63:ED:5E:6E
            X509v3 Authority Key Identifier:
                keyid:C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:59:87:9b:7f:0c:d8:5b:03:3f:04:a2:f7:19:db:97:ed:
         e2:5f:71:5a:8a:31:7a:1e:88:c9:19:76:cb:ff:39:43:51:7f:
         97:ad:fd:f1:ee:b2:c6:85:26:d4:d4:3f:ba:9c:52:76:8a:eb:
         49:3a:f9:63:cc:62:23:0f:d5:e4:93:20:f7:ee:57:78:69:a2:
         32:27:6c:83:4b:18:57:55:d7:17:e6:b0:36:e1:78:ce:7a:96:
         d9:df:f7:4d:65:30:8f:41:2c:b0:f7:8c:7e:48:fd:17:ab:88:
         c1:98:50:41:21:c4:76:9c:cb:8f:a2:84:d8:5f:38:ea:5d:1a:
         30:55:3e:ac:4f:ab:17:e7:ba:74:d9:57:aa:03:76:28:86:09:
         c8:92:a7:40:b1:d4:93:ac:b0:b6:eb:dc:04:74:62:ea:96:c6:
         e0:bf:c5:b2:f0:ca:03:a7:76:d5:39:73:47:44:82:02:51:9f:
         43:52:cf:fe:61:f2:4c:67:6e:83:9b:25:1c:d5:86:53:f8:57:
         e3:73:15:d5:7b:a3:f8:8d:b5:7a:e3:ef:8d:be:ab:4a:28:53:
         ec:a0:92:35:a8:53:67:34:7a:97:4b:c7:4d:18:ed:77:b1:73:
         a9:88:3e:71:8b:10:7c:2f:94:c6:d5:67:94:45:ce:5d:a3:52:
         e4:2f:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:11:07 2024 by rpki-client on console-ams.rpki-client.org