Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38362e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38362e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          5x1gzXwydjQ8a8pY370XdGOYDMxH3VBa87m5x4TRfJE=
Subject key identifier:   B0:CF:89:5E:2E:27:6B:F5:1B:41:3C:47:AB:11:B0:D8:D6:E8:0A:4D
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       33FB0083FCC3E3C0465BFF8FABEEC465E5CAD5DF
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38362e302f32342d3234203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:06 +0000
ROA not before:           Thu 04 Apr 2024 08:17:06 +0000
ROA not after:            Thu 03 Apr 2025 08:22:06 +0000
asID:                     264996
IP address blocks:        170.84.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fb:00:83:fc:c3:e3:c0:46:5b:ff:8f:ab:ee:c4:65:e5:ca:d5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:06 2024 GMT
            Not After : Apr  3 08:22:06 2025 GMT
        Subject: CN=B0CF895E2E276BF51B413C47AB11B0D8D6E80A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:56:75:76:cb:0b:1f:9c:6a:fb:b8:16:12:
                    61:56:fc:1e:e3:ed:83:a6:90:01:17:c4:94:05:8e:
                    df:43:e3:6a:1a:e2:a0:40:a7:95:33:99:a1:d3:be:
                    71:c6:a7:70:d9:be:37:2e:b1:d8:f1:ae:7e:90:2e:
                    52:79:01:ae:81:96:d2:24:ee:3e:8e:0d:ba:00:20:
                    4b:97:de:5c:32:ba:6e:c5:2e:0b:bf:db:2d:43:7a:
                    45:cd:cc:9d:04:e8:0a:54:48:e1:dc:b0:6d:59:d4:
                    5b:65:c2:46:1d:7f:57:95:cb:c9:04:54:1f:ca:43:
                    4d:1c:45:c3:e3:cd:85:5a:fe:50:fc:b8:f4:9e:91:
                    3c:5a:d2:bb:cf:4d:e7:33:54:6a:88:00:a3:72:e6:
                    f3:f9:0b:54:f2:7f:6c:c6:0f:e0:69:65:fa:0a:02:
                    73:83:84:62:5c:9d:05:45:6b:98:c9:fa:d1:8a:fd:
                    64:d5:94:a7:8c:7e:22:f3:ed:33:3b:bd:75:ca:39:
                    f9:d4:2d:e1:27:39:96:07:ad:24:4b:56:ec:cb:92:
                    8d:b8:47:34:5d:9e:6d:5c:c7:d1:04:68:88:f2:eb:
                    f9:6f:dc:b6:5d:ca:4b:ad:4f:0d:3c:5d:04:cf:5d:
                    16:ca:9e:6b:33:a5:f1:64:ae:59:cd:2a:7f:7e:d2:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CF:89:5E:2E:27:6B:F5:1B:41:3C:47:AB:11:B0:D8:D6:E8:0A:4D
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38362e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:77:b1:df:01:b4:f0:0d:87:48:36:9a:a3:d0:7e:03:52:de:
         78:7e:2e:9f:6e:80:c8:47:2e:8b:39:62:b8:35:7a:49:85:2b:
         ec:68:5d:3e:16:bd:bf:51:97:c6:57:ca:fa:f6:44:27:2c:9f:
         72:0a:d1:9c:70:f0:46:6a:ac:eb:3a:ab:16:b0:1a:35:e5:32:
         ce:cc:e2:54:9c:da:8a:8e:d3:f3:1d:a8:db:bb:b9:59:24:7a:
         32:bd:a8:db:81:f4:37:e0:e2:62:75:3e:c9:47:2d:a7:b4:47:
         f9:d5:ca:f9:5b:fb:be:3c:02:a2:93:ea:2f:6e:92:5c:f1:5a:
         89:6a:b0:1c:9e:99:cb:6b:6a:95:80:4c:ef:d8:45:c5:34:a4:
         2f:9b:68:75:4b:0a:82:7f:ba:34:01:cb:58:76:6c:23:c9:fe:
         d8:7f:06:d6:46:6b:c6:60:d8:1b:a3:dc:2a:7c:ee:88:66:87:
         b6:ae:db:c2:5d:80:70:2c:bc:a6:fa:1c:3c:64:c3:3a:a9:b8:
         db:65:ae:05:0d:2a:d4:f5:b2:fa:fb:ee:2b:19:1a:a5:4b:77:
         19:15:db:23:89:77:24:e9:b3:88:5e:d6:16:06:fb:89:36:84:
         da:8e:f4:c2:e5:52:89:f1:72:13:b3:ec:ac:f8:c9:9b:7f:b5:
         99:b8:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org