Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e203238323730.roa
File:                     3137302e3234372e35322e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          uMriHL12jUU73xTC64y7nqaiavaYywu42nbJnIGCFps=
Subject key identifier:   5F:81:F0:18:BF:AD:F4:65:00:43:68:10:AA:40:18:85:3B:0A:BB:E6
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       08D8B68626D0902BAC22498711800EF8A6D17449
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        170.247.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:b6:86:26:d0:90:2b:ac:22:49:87:11:80:0e:f8:a6:d1:74:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=5F81F018BFADF46500436810AA4018853B0ABBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:de:b9:4a:86:1a:31:7e:78:b2:aa:ad:63:
                    83:a8:89:88:f2:e9:5a:74:7a:8b:8f:4a:75:54:37:
                    ca:6e:ac:ea:01:03:57:e6:1f:1a:1f:1d:6a:a2:61:
                    52:57:01:40:d3:ed:83:b0:d9:bd:b5:34:14:90:fd:
                    8b:9b:b5:10:77:26:43:a7:1d:de:6b:77:e4:c4:67:
                    c7:a1:11:18:e3:fd:a5:dc:db:f7:80:00:f6:c7:42:
                    e8:84:8f:41:d7:d5:09:36:0f:94:a6:aa:63:a1:86:
                    ab:3b:50:dd:c3:57:58:b7:f9:d4:00:29:cc:ac:b2:
                    12:a1:4a:ec:75:33:c9:b2:ea:bf:87:dd:93:c6:0d:
                    66:45:1e:82:12:dc:6d:f1:77:66:ef:19:5f:e3:32:
                    5e:6a:8c:1c:85:23:41:30:84:85:ca:0c:41:8b:8e:
                    db:45:8d:e1:93:7d:63:9a:ed:87:6c:ad:97:e6:01:
                    2e:d9:76:d0:ad:cc:e2:b2:94:87:e8:63:01:ff:c8:
                    a7:5c:74:b9:74:83:17:e9:cc:25:93:98:70:eb:79:
                    c4:b9:d0:27:19:0c:1e:7d:31:89:3d:8b:6a:e1:e3:
                    ca:00:da:5c:bf:c8:02:11:1f:10:a1:d8:6a:9e:78:
                    1d:b4:93:30:33:8a:f0:d9:16:0b:8a:30:47:8c:9d:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:81:F0:18:BF:AD:F4:65:00:43:68:10:AA:40:18:85:3B:0A:BB:E6
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:68:df:d5:37:b1:06:05:8e:1a:ec:be:d9:c2:5b:fa:31:
         dd:ae:c4:0a:9b:01:15:d2:e1:fc:5e:fc:09:0d:3c:82:b9:89:
         92:5f:e7:c7:b3:93:ae:eb:6d:5f:85:cc:49:2d:19:54:76:33:
         5f:a0:4e:b1:b1:15:8c:70:ac:06:18:0b:7a:22:34:bc:b8:4c:
         e1:a0:be:35:96:0f:02:c9:63:5c:38:2c:97:57:29:8f:f0:98:
         70:11:38:d1:cb:e3:1b:7a:8d:93:78:8e:18:3e:00:2f:75:e5:
         ef:a2:fc:b9:af:75:bc:89:01:e4:93:d2:a6:37:07:1f:01:1f:
         a6:54:54:80:46:95:1b:bf:00:d0:db:c9:5b:e9:23:34:44:10:
         ab:eb:eb:78:d5:bb:5e:cb:61:f9:9a:db:d8:98:da:9d:9f:f6:
         df:a9:c7:33:cd:36:00:e4:2b:36:5e:f6:aa:31:f0:c2:6f:61:
         8e:2f:49:8f:c7:1c:88:f7:8e:8b:c1:46:ae:42:69:09:39:eb:
         4c:44:3f:5c:6b:74:db:75:ad:d6:dd:a2:eb:f7:24:eb:bb:03:
         62:d8:f1:70:03:a9:e7:0b:0b:00:37:42:b4:9f:d1:ec:b9:04:
         86:a9:c5:b0:7a:84:36:62:2c:3b:6c:71:63:12:38:fa:5c:76:
         51:4e:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:54 2024 by rpki-client on console-fra.rpki-client.org