Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
File:                     3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          pMDfIORQTQDXldPplVYNCBMCgjQHvqKNRpd1+mmfvi4=
Subject key identifier:   F0:52:93:6D:63:11:6B:6E:5B:76:99:2C:C9:09:B8:C7:A1:C1:14:6E
Certificate issuer:       /CN=97544BE1E037DEC68470E5CF05CB2966855E710F
Certificate serial:       5582EA7A377018C81712821A67A430038A1C322C
Authority key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:14 +0000
ROA not before:           Mon 08 Apr 2024 20:02:14 +0000
ROA not after:            Mon 07 Apr 2025 20:07:14 +0000
asID:                     262509
IP address blocks:        170.247.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:82:ea:7a:37:70:18:c8:17:12:82:1a:67:a4:30:03:8a:1c:32:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97544BE1E037DEC68470E5CF05CB2966855E710F
        Validity
            Not Before: Apr  8 20:02:14 2024 GMT
            Not After : Apr  7 20:07:14 2025 GMT
        Subject: CN=F052936D63116B6E5B76992CC909B8C7A1C1146E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:84:ea:eb:c1:90:cd:88:44:5a:da:b4:d6:
                    c1:70:d7:e3:d2:d7:01:4e:5e:e6:dc:25:a7:48:a9:
                    8e:bb:5e:a2:16:a5:3f:5e:0a:97:68:d0:1e:40:5d:
                    b6:38:70:35:fc:05:14:10:d4:ed:e0:60:db:88:eb:
                    8b:68:36:c7:a4:e4:3a:be:17:8f:7b:33:2e:df:8f:
                    d9:a3:19:7b:2f:09:cb:77:eb:1a:56:8f:fe:f8:92:
                    a7:67:a4:4b:fe:a8:dc:78:c5:44:fb:68:3c:e6:1c:
                    33:5b:ed:2e:b5:22:0d:18:4b:b5:76:49:20:b2:f6:
                    74:9c:0d:d9:86:48:00:4b:2e:38:7b:d6:5c:39:9e:
                    32:e4:20:a9:ab:95:6c:bc:59:a1:7f:14:d7:b6:22:
                    2b:b0:ed:b8:e1:e4:e2:88:1d:65:a1:54:b6:5c:a3:
                    0e:c9:23:25:96:88:d5:93:38:49:48:da:23:44:36:
                    b4:f4:fe:39:d9:4b:ad:98:0e:a6:89:9d:d4:fe:26:
                    62:a4:9c:41:bc:ae:0a:aa:c0:48:ff:cc:73:87:ef:
                    11:b1:31:e7:27:6b:63:f7:53:f8:ab:36:eb:ed:c6:
                    a6:dc:76:5a:a8:1f:f6:51:42:f6:86:ba:68:b4:61:
                    19:01:f5:7f:d6:d7:ef:3f:1c:fc:a6:2f:94:34:43:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:93:6D:63:11:6B:6E:5B:76:99:2C:C9:09:B8:C7:A1:C1:14:6E
            X509v3 Authority Key Identifier:
                keyid:97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:15:d1:96:e0:a0:9d:25:72:ca:d8:17:bc:34:24:f2:c7:8e:
         98:c0:87:14:9b:a1:61:67:63:aa:bc:d9:2c:b4:6d:a1:f4:5b:
         f9:fd:35:98:c4:5c:d4:3f:ca:bf:d4:0c:2b:7d:3b:fd:af:7b:
         2c:b4:67:c3:80:cc:7e:ca:d1:3e:0d:b8:07:4e:ef:bf:b7:ab:
         6f:c6:5e:db:30:78:12:93:83:f4:74:2d:a5:04:b4:6d:d7:19:
         68:42:c4:00:4f:a9:56:56:10:2c:73:aa:cf:e3:aa:7e:9a:d3:
         3d:22:79:5d:ed:30:f4:49:1e:da:5f:77:37:f2:aa:6b:e9:76:
         2a:87:76:3b:fe:9a:cf:91:9b:d1:30:80:ca:7e:ad:f0:aa:c4:
         f1:e6:43:70:d5:0f:02:fe:79:f4:15:76:1a:4c:b6:2b:b0:4c:
         0b:58:36:41:a2:83:75:8a:1c:82:c8:3c:9a:1e:18:04:b2:f8:
         b0:c3:7f:a9:39:6d:f8:41:2b:df:a1:79:7b:ad:44:f3:e9:61:
         4d:12:92:03:48:b4:30:da:45:00:e6:08:f2:c2:cd:d0:25:ac:
         18:30:79:a0:fa:f2:c6:32:0c:aa:6c:7b:01:f1:75:8d:b5:10:
         70:3a:5b:7a:60:d4:22:7b:56:95:20:d6:a1:d8:c4:17:47:32:
         5d:b3:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:14 2024 by rpki-client on console-ams.rpki-client.org