Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137302e3135302e37362e302f32322d3234203d3e203532393133.roa
File:                     3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          L/WWOUuPLI48V4qXCClBdP1gnMP+oIXPnaipdk7/9y8=
Subject key identifier:   C6:68:DE:B2:78:3C:1B:30:8D:36:A7:60:D5:C3:4F:98:D8:3B:FE:03
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       13F724C8CFA873E9D9FE5FBF074202B240A9F59C
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137302e3135302e37362e302f32322d3234203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:16 +0000
ROA not before:           Thu 04 Apr 2024 09:40:16 +0000
ROA not after:            Thu 03 Apr 2025 09:45:16 +0000
asID:                     52913
IP address blocks:        170.150.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f7:24:c8:cf:a8:73:e9:d9:fe:5f:bf:07:42:02:b2:40:a9:f5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:16 2024 GMT
            Not After : Apr  3 09:45:16 2025 GMT
        Subject: CN=C668DEB2783C1B308D36A760D5C34F98D83BFE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:bf:75:26:d4:8b:0b:6b:3f:69:2a:c2:1a:
                    ad:16:41:31:3b:34:b7:44:e1:26:0b:2d:75:49:70:
                    8c:e6:4f:bc:44:20:b8:89:6e:7c:72:6d:f8:67:f5:
                    30:aa:4c:4a:40:8d:d2:a4:42:1b:0d:0f:a8:ed:4f:
                    23:be:fe:7e:46:97:16:9a:9a:a4:f4:8f:40:e3:92:
                    64:bd:3a:20:44:34:ce:de:a3:6d:15:d2:57:04:15:
                    a2:c6:7a:a3:78:0e:60:a7:b1:cf:17:ee:c6:e6:6a:
                    d7:a6:bb:fb:9a:4e:60:99:b0:55:e7:57:ab:b4:9a:
                    14:f2:cf:a2:22:c8:72:14:d2:82:c2:50:e4:95:d4:
                    e4:f5:1f:d1:5f:33:16:1d:41:5f:72:c5:66:5c:8d:
                    5a:26:86:00:29:61:4a:cb:c7:08:e8:87:91:2b:5b:
                    34:2c:fd:ea:73:fa:8e:0a:80:3c:0b:5a:28:1d:8e:
                    b4:06:b9:a7:a5:b8:34:21:09:1f:46:90:6d:d6:40:
                    5c:56:8b:c1:1c:02:e5:6d:18:9c:9e:ef:51:79:6d:
                    90:f6:bc:a9:fc:1b:e8:3e:5f:15:13:50:b6:68:b4:
                    13:cd:18:8b:47:6a:43:19:ba:b8:f0:09:44:b8:f2:
                    de:5b:f6:2c:75:3a:eb:70:f6:3c:68:df:dd:8e:bf:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:68:DE:B2:78:3C:1B:30:8D:36:A7:60:D5:C3:4F:98:D8:3B:FE:03
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137302e3135302e37362e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:e5:d9:3a:18:e3:00:ad:8f:f8:62:24:72:dc:db:f7:76:
         7f:78:03:84:d1:83:2d:93:04:48:ea:8f:b5:b6:5c:99:5e:ae:
         cb:80:df:f6:ef:fc:ed:ef:f7:25:2d:97:24:cd:3c:b6:3a:68:
         08:eb:1c:e8:16:52:00:12:dc:ce:f2:ba:ed:e8:9a:3d:40:73:
         35:f6:e0:46:f9:f6:35:67:90:22:00:10:f1:1c:99:1d:02:a1:
         8e:dd:cb:09:30:ac:e4:c8:a8:97:6f:df:28:1b:20:8e:ca:5d:
         df:e3:2e:a1:51:3e:63:63:1c:55:1d:31:4c:5e:06:b3:61:36:
         7b:24:9f:4c:16:ca:7d:76:56:d1:71:b6:40:a5:8a:9c:d4:20:
         ee:6c:27:37:0f:0b:92:9b:89:ca:0d:31:85:e9:0c:cd:36:ae:
         b3:3d:fe:c4:8b:d9:00:6e:d2:da:80:5d:ab:e9:e8:3f:74:9d:
         ef:50:4d:87:9a:17:d8:6d:22:56:b9:05:42:b6:8f:9e:ef:a1:
         12:37:b6:73:fd:9b:ae:76:db:5b:c4:d5:77:fe:04:87:15:1b:
         4b:96:00:b9:a6:cc:9d:31:97:03:5e:ef:44:09:5d:39:2e:70:
         18:37:17:1b:2f:23:be:94:0d:7a:ac:25:d0:ac:e7:92:6c:47:
         5f:f4:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:20 2024 by rpki-client on console-fra.rpki-client.org