Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e203238323730.roa
File:                     3137302e302e3230342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          +u7MzH2oC8E/kUIl7MdLyzrcgIp7Sstx03l79MnxGZE=
Subject key identifier:   42:4F:63:37:61:84:DC:78:6A:57:1D:16:47:2B:15:D4:FC:6F:3A:CB
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       21C3F7CD5F707BBB4016DF73837711AC9EC4FDE7
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:22 +0000
ROA not before:           Mon 09 Sep 2024 14:55:22 +0000
ROA not after:            Mon 08 Sep 2025 15:00:22 +0000
asID:                     28270
IP address blocks:        170.0.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c3:f7:cd:5f:70:7b:bb:40:16:df:73:83:77:11:ac:9e:c4:fd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:22 2024 GMT
            Not After : Sep  8 15:00:22 2025 GMT
        Subject: CN=424F63376184DC786A571D16472B15D4FC6F3ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:58:75:9c:14:03:9b:b5:b5:13:91:42:54:
                    cd:e7:b8:e3:aa:4e:4b:15:cd:78:4b:71:92:42:df:
                    df:ad:54:e3:1d:b4:53:3f:a1:43:13:40:aa:24:87:
                    7e:17:54:66:c5:ad:74:00:d5:2d:ba:21:35:cd:6e:
                    88:a1:69:9d:ff:cf:3c:af:5c:5a:96:fc:ed:07:32:
                    a3:a0:ac:b1:92:06:c3:dd:bc:ef:12:2e:dc:35:e8:
                    04:5f:63:fa:7a:ea:42:ea:3c:45:70:2c:ec:7d:f3:
                    f4:1b:18:5b:53:e7:fe:13:95:e5:f9:45:b5:e4:e3:
                    70:08:0a:fd:82:33:69:b6:18:3a:c3:72:79:94:b4:
                    ef:52:17:6b:5a:ad:be:a0:20:11:73:e5:74:a0:46:
                    57:2f:a7:f5:20:0c:2d:71:58:cf:74:7b:8f:7e:63:
                    98:37:de:a2:f5:74:a9:ef:78:7e:1b:5c:27:33:98:
                    2c:9a:90:27:56:9a:a0:cc:a3:c4:eb:c2:eb:04:25:
                    ae:27:34:c5:11:73:0b:f5:8a:14:8e:c9:f1:18:fa:
                    53:99:bb:c0:61:2e:41:2a:82:5f:05:b3:d2:c6:c5:
                    38:86:06:02:ad:99:8d:05:43:64:2a:c1:9a:6f:76:
                    a7:06:52:8a:06:9e:7c:35:62:27:80:fa:18:83:bc:
                    3d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:63:37:61:84:DC:78:6A:57:1D:16:47:2B:15:D4:FC:6F:3A:CB
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:b0:0d:85:88:3e:11:48:94:bf:f7:35:67:d8:1f:92:c5:
         a7:57:11:16:57:2d:b6:a9:f6:7b:28:df:bf:45:7a:5f:d1:c8:
         86:62:8e:45:a9:68:43:ce:e1:8c:1e:4e:e7:65:05:0c:43:7b:
         bf:96:a3:8c:a9:63:8b:ba:5b:7a:36:01:17:d2:e6:a5:37:44:
         37:1a:86:8c:40:26:5a:46:7e:42:00:27:f8:9a:bb:d8:b3:bb:
         e2:cb:de:e2:f4:73:32:7c:7a:3e:7d:bc:f6:f3:a9:67:dd:6c:
         db:ea:96:d8:9e:fb:bd:cf:e4:bf:ae:0b:89:9a:ad:9f:3b:08:
         5b:5c:15:c7:4b:02:51:37:9a:88:2b:40:4f:01:0e:59:a9:2e:
         3f:3b:9e:2a:9f:22:8b:1b:72:45:b2:26:00:ee:ba:3a:b1:94:
         d2:9d:7a:42:e3:02:07:60:0c:26:db:f4:11:c3:f9:57:fb:b5:
         f0:50:ee:aa:fb:58:64:e1:7d:e5:f9:fc:2e:57:7a:f1:f3:eb:
         cc:c2:90:15:d9:0c:ea:b3:f7:e9:05:b6:b4:2e:10:3f:1a:52:
         8e:69:98:0f:7b:c7:37:c0:93:ed:73:9d:64:14:9d:55:2b:d0:
         86:6e:c3:73:c3:1d:c7:bf:37:cc:6f:7f:dc:06:18:8c:80:bf:
         08:a1:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org