Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
File:                     3137302e38342e38342e302f32322d3232203d3e20323634393936.roa (raw, json)
Hash identifier:          A7ZhFDNlIOTdkK9mgN7lrJrzzB7FJNtQKQU6xofd20c=
Subject key identifier:   A8:93:CC:31:71:BF:FA:E3:08:89:45:D9:9A:5D:20:59:B2:A3:8F:D0
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       69A5BDC9F8F2942F33DB89BCED7087C47EBB5CA0
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:05 +0000
ROA not before:           Thu 04 Apr 2024 08:17:05 +0000
ROA not after:            Thu 03 Apr 2025 08:22:05 +0000
asID:                     264996
IP address blocks:        170.84.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a5:bd:c9:f8:f2:94:2f:33:db:89:bc:ed:70:87:c4:7e:bb:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:05 2024 GMT
            Not After : Apr  3 08:22:05 2025 GMT
        Subject: CN=A893CC3171BFFAE3088945D99A5D2059B2A38FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:72:e3:ea:46:a9:d0:93:db:84:36:0b:9a:
                    9f:1f:b0:d8:66:10:7e:44:20:23:56:59:49:2f:0a:
                    7b:5f:21:d1:1a:e9:dd:95:bf:03:66:9e:b4:22:87:
                    6f:60:dd:88:08:70:02:f9:9b:5d:92:0c:91:ee:a6:
                    f7:95:bd:07:0d:00:0a:d0:d8:f6:82:70:c5:9e:b9:
                    83:bc:07:98:2e:3b:49:83:cd:3d:5f:cc:0f:1a:d5:
                    a1:cc:17:c8:c9:30:93:d7:ef:89:2f:d5:49:86:5d:
                    84:fd:4f:8b:5e:73:cc:24:90:5c:11:55:04:97:f8:
                    1a:b2:12:bd:2d:aa:36:37:12:7f:48:25:60:20:01:
                    6f:5e:39:3e:3e:fb:80:26:ec:a1:01:cb:e7:90:92:
                    57:58:bb:94:d3:11:f0:c3:af:10:8f:61:4e:c3:70:
                    1a:8f:4b:0f:d8:87:13:c5:e9:92:a5:2c:ce:6d:06:
                    5e:b4:f2:a7:c4:06:a0:8a:07:d5:04:b1:46:13:98:
                    2f:02:5e:52:a0:d9:14:88:60:e3:cc:a1:19:5c:bb:
                    b6:6c:a7:f8:fd:0f:55:ca:d9:24:a3:5f:20:31:a8:
                    ac:48:de:8a:26:15:4d:c2:e6:36:11:4a:f8:ac:f4:
                    d7:24:dd:ee:8f:20:6a:5e:7a:88:15:90:0f:45:46:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:CC:31:71:BF:FA:E3:08:89:45:D9:9A:5D:20:59:B2:A3:8F:D0
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:09:8f:4a:89:81:02:f9:ed:c2:be:a6:a3:cc:58:1e:ca:e6:
         16:29:2a:12:6d:3f:f5:8c:97:b4:24:8c:76:4c:67:bd:93:c2:
         c3:0d:88:16:04:6b:55:dc:94:2c:8b:5c:fe:be:81:c6:79:4e:
         b4:c4:c5:d9:b2:ef:ee:51:c7:1a:60:07:bb:64:90:de:14:cd:
         7c:d8:42:ac:1e:44:06:4b:87:ea:ae:4b:9c:16:10:94:04:14:
         30:30:81:9a:8f:25:42:5e:ac:3f:28:f5:ea:97:80:df:24:99:
         42:c6:80:21:ea:7d:44:9a:c8:07:d6:01:6d:1e:83:3c:6e:40:
         ab:dc:21:3e:a5:79:9f:38:a2:b2:72:f8:20:e7:23:79:ca:62:
         85:14:6a:ce:cb:01:e3:fe:e9:27:a1:9a:29:a1:7e:ed:09:9d:
         5c:2d:e2:c2:54:d9:5b:a1:ce:79:5d:52:1b:86:90:b5:81:82:
         1d:0d:61:fe:c0:2f:fd:af:c7:78:d7:cd:6c:15:bf:43:44:63:
         b7:ee:ef:c6:f9:f1:83:70:d5:5a:44:28:dd:da:42:3d:66:9c:
         30:7d:10:02:dd:e6:c8:a0:22:7b:1a:ca:7a:44:6f:e7:bd:bf:
         ed:50:7f:1b:3e:56:d8:fa:40:ed:5c:bc:12:de:f8:07:b1:1e:
         89:f0:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:57 2024 by rpki-client on console-fra.rpki-client.org