Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          hPxm2AdrLozXkoMZ6XIl3qUqHCH4Hfdo81SB4vyMP8Y=
Subject key identifier:   D4:B6:33:3F:09:7D:92:94:EA:3F:89:09:6F:B5:79:DB:B6:76:23:21
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       69BF2FA8CB19D0F3143669A1252E07B6998CAB1E
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:35 +0000
ROA not before:           Thu 04 Apr 2024 02:23:35 +0000
ROA not after:            Thu 03 Apr 2025 02:28:35 +0000
asID:                     52706
IP address blocks:        170.233.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bf:2f:a8:cb:19:d0:f3:14:36:69:a1:25:2e:07:b6:99:8c:ab:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:35 2024 GMT
            Not After : Apr  3 02:28:35 2025 GMT
        Subject: CN=D4B6333F097D9294EA3F89096FB579DBB6762321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:21:37:43:48:33:be:ef:b5:9b:1a:97:99:
                    aa:3d:8e:8f:3f:6d:09:7f:77:f5:e4:db:7d:bd:b8:
                    0f:6a:96:3b:b2:08:81:4c:f2:92:ea:46:18:30:ed:
                    2f:de:30:3d:35:00:86:9c:94:67:dd:c5:f5:d5:b6:
                    c9:36:c6:52:75:85:6f:ed:de:23:87:2b:00:3a:19:
                    d1:7f:9d:84:ef:62:67:13:f4:75:9d:5a:f3:15:fe:
                    1c:ca:1d:db:e2:7f:cd:f0:ad:7e:74:5b:4d:eb:e8:
                    0d:59:55:3b:a7:51:ba:61:04:4e:a9:97:61:46:fe:
                    9f:cc:a6:ac:ae:7a:4e:b0:19:16:d4:48:e3:9a:21:
                    39:d5:2d:0f:98:2a:9f:a2:ee:2e:cd:b9:9a:5c:70:
                    69:14:f1:dd:b2:5e:be:0b:bb:e2:c3:22:aa:6f:44:
                    51:12:3f:5f:68:bb:1c:f2:e1:7b:ff:19:e8:a8:e6:
                    ec:52:a8:89:2f:07:c6:9e:2a:6e:53:f3:a3:94:48:
                    19:12:2d:0d:84:e7:b9:3f:e9:a4:de:4c:c2:b3:f8:
                    9b:7b:f7:0a:af:53:50:c9:79:2f:14:42:a2:82:64:
                    dc:68:9b:45:38:4c:b0:d4:3e:43:36:9a:14:94:f4:
                    50:28:00:3d:f1:96:28:cb:a6:b5:88:78:cc:cd:8e:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:33:3F:09:7D:92:94:EA:3F:89:09:6F:B5:79:DB:B6:76:23:21
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:36:b8:bb:65:1d:9b:5a:30:c7:ce:f3:14:27:d5:34:ec:
         38:88:53:87:f0:23:72:44:96:ae:d6:c4:d1:bb:18:ec:05:38:
         6a:cd:7c:92:d6:81:d7:5c:da:70:7c:fc:ac:dd:00:93:06:95:
         38:7d:1a:05:42:29:9b:bd:34:7f:e5:3a:41:ea:4d:a0:c0:dc:
         e3:51:97:06:a9:79:b7:5c:38:51:e2:54:2e:74:da:5f:f4:f2:
         ab:4a:73:f0:5d:87:7c:c9:b8:47:c7:fc:50:43:0e:2a:7d:e6:
         09:28:96:ea:7f:e6:3f:e4:4c:7e:ba:80:1f:0d:89:0b:99:5e:
         d0:d6:98:8a:13:e5:91:f3:bd:cc:3d:99:5e:3c:9d:12:9f:f6:
         e5:a3:ed:c8:b5:3e:f6:00:5c:d2:03:c7:8b:69:1a:2b:6e:3d:
         61:5b:88:03:c7:86:13:85:79:b9:be:97:12:ee:8c:6a:32:db:
         87:0b:90:e1:a5:07:7a:4a:c9:2a:77:de:49:b6:fd:29:19:64:
         55:7d:00:cd:02:d7:72:d5:f9:49:75:5e:0c:5a:83:f0:ec:d5:
         58:63:50:3c:0b:ac:e6:de:31:ae:1b:be:7c:b2:19:a6:df:56:
         e6:26:d8:f0:b6:f2:44:06:a8:bc:b8:e4:e7:e0:85:f4:17:1f:
         85:87:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org