Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32332d3233203d3e20323634393936.roa
File:                     3137302e38342e38342e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier:          F5/30BIGbQvR6ie/vqujKfPfozbyrD0oO+5O/lTQfaM=
Subject key identifier:   9A:AD:FF:96:C3:BA:4E:E4:66:DB:8E:07:1A:2C:52:AF:BE:20:D4:80
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       0561A59BBBA260C3B590F7F97FE8170E31A86464
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32332d3233203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:06 +0000
ROA not before:           Thu 04 Apr 2024 08:17:06 +0000
ROA not after:            Thu 03 Apr 2025 08:22:06 +0000
asID:                     264996
IP address blocks:        170.84.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:61:a5:9b:bb:a2:60:c3:b5:90:f7:f9:7f:e8:17:0e:31:a8:64:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:06 2024 GMT
            Not After : Apr  3 08:22:06 2025 GMT
        Subject: CN=9AADFF96C3BA4EE466DB8E071A2C52AFBE20D480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:18:1e:d5:bf:3b:cf:48:5c:ab:01:c4:b0:
                    a7:98:e8:01:22:77:43:55:86:80:f3:53:22:49:04:
                    e8:31:77:e6:18:30:cc:02:44:16:d5:39:dd:23:6c:
                    84:04:97:45:56:be:ab:a1:fd:16:4e:7d:f0:b7:95:
                    08:e6:3f:83:40:de:47:77:3f:b0:71:ab:49:dd:cc:
                    81:53:60:e5:5e:50:43:e6:f9:31:cd:49:a4:1f:7c:
                    b9:c8:0e:e5:b5:83:b9:da:1d:93:86:83:2a:32:e9:
                    8c:18:d5:86:90:df:93:17:67:f9:d1:22:4f:58:b7:
                    27:02:b2:09:62:87:f7:54:dc:d3:c9:b9:c2:d4:b2:
                    9f:18:2a:2b:b3:bd:38:1a:9e:96:a9:a6:ce:29:53:
                    0b:cf:99:c3:2f:3b:bd:32:3e:27:3e:52:59:75:0b:
                    dc:d7:cd:81:59:6d:fa:4f:1c:f6:cc:2d:f7:17:26:
                    b9:4b:9a:c8:fb:96:cd:e0:7a:73:2c:5d:7f:e2:24:
                    4e:c2:5c:97:58:f6:9b:a8:7c:d3:e7:f0:18:0b:fa:
                    74:6f:43:96:25:70:16:b3:6e:28:e1:8f:7d:5a:26:
                    51:29:28:d4:b9:62:d7:73:3c:82:76:af:9e:20:80:
                    cd:13:b3:d0:b3:93:ad:ee:51:59:29:cc:86:1a:ff:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:FF:96:C3:BA:4E:E4:66:DB:8E:07:1A:2C:52:AF:BE:20:D4:80
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32332d3233203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:4d:53:b0:c6:4e:6d:a1:a0:55:c3:85:2c:eb:f2:c7:f4:
         36:81:1d:cd:d7:23:04:72:42:82:80:20:06:c6:11:f0:c6:52:
         d2:d3:72:e1:7d:2f:40:ba:93:57:f8:89:3b:74:05:96:1f:87:
         be:23:a4:71:ed:fe:7f:ee:9d:86:9f:7d:e9:06:13:d8:35:1a:
         6f:5b:42:2a:8f:13:99:7e:ed:75:cf:d0:bb:2c:47:98:31:f2:
         ac:17:42:38:87:ac:97:27:b5:8b:51:40:60:f4:76:31:0e:b3:
         63:76:89:10:6a:d3:96:bf:b9:10:47:52:f3:8f:9e:30:62:3f:
         09:ec:c5:43:fa:f2:78:32:f0:d1:2e:0b:88:bb:4c:15:55:c8:
         ba:85:c3:77:60:a8:1e:90:6c:4f:19:28:3b:4e:29:4c:e5:27:
         bd:cb:35:bd:a3:98:ed:65:57:34:b3:7a:c9:0e:00:f4:ac:f0:
         1c:02:81:fc:84:36:30:67:99:01:9c:12:4d:f7:7f:d4:6e:10:
         1a:e5:49:6f:a0:38:00:93:97:1f:5f:79:6e:e8:4d:a1:14:02:
         63:4d:a6:54:0f:0f:04:f5:10:70:35:e7:71:55:7b:6c:a4:8f:
         75:30:4f:af:8e:3a:38:9f:08:6d:56:a2:ad:0d:a5:e3:69:71:
         ab:34:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org