Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          pkPkiPL1CFKQG+LY8Db+K0+rvtqo94zSi8KRP8lGBMI=
Subject key identifier:   CA:D5:D6:F9:2E:6F:2A:56:A5:C5:E4:C2:81:71:E9:2B:7D:85:18:C4
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       3B7EB5A5C2EB4F8522324856CA9CA421C93B734E
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa
Signing time:             Mon 17 Jun 2024 11:27:52 +0000
ROA not before:           Mon 17 Jun 2024 11:22:52 +0000
ROA not after:            Mon 16 Jun 2025 11:27:52 +0000
asID:                     52706
IP address blocks:        170.233.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7e:b5:a5:c2:eb:4f:85:22:32:48:56:ca:9c:a4:21:c9:3b:73:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Jun 17 11:22:52 2024 GMT
            Not After : Jun 16 11:27:52 2025 GMT
        Subject: CN=CAD5D6F92E6F2A56A5C5E4C28171E92B7D8518C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:4b:97:b2:05:c2:b7:62:da:21:f9:56:3e:
                    7d:00:a2:0f:06:e8:a8:61:9c:4e:8a:58:35:b7:84:
                    61:4c:1a:50:73:eb:3f:f0:5e:1e:12:a2:a4:60:cc:
                    ee:3a:05:aa:48:53:73:30:cc:ed:95:e2:63:c9:bb:
                    a8:7a:9d:94:ed:7d:b0:31:d3:38:f9:94:ea:81:86:
                    a2:0f:d5:8c:1d:cd:42:c5:29:6f:13:98:7e:27:5e:
                    0b:51:27:a7:5b:2a:89:b3:aa:41:70:a0:75:52:24:
                    d6:54:0f:d2:d1:33:62:c5:8a:85:bd:00:fd:98:21:
                    9a:45:cb:58:e8:1c:49:5c:fc:ac:f3:e9:4f:0b:a6:
                    99:fb:8b:e3:6a:b0:1c:4a:1c:ac:e6:cc:6c:b4:35:
                    7b:66:e3:64:7d:38:57:d3:af:fb:34:01:77:aa:d0:
                    4d:90:87:31:ed:6c:ea:0b:60:e4:f6:a0:ea:25:04:
                    02:5e:65:40:e9:48:2d:af:4c:9b:0f:00:a1:93:b5:
                    04:f8:ba:a2:a3:cf:ae:3e:4a:17:82:1a:62:cf:51:
                    9c:30:a1:44:c8:41:6e:f9:98:e8:22:3e:44:af:3d:
                    2f:89:41:ba:22:8d:5c:62:a1:97:74:a4:d8:cf:eb:
                    01:ae:1e:ce:44:62:da:24:a0:6f:4d:6a:17:7a:3c:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:D6:F9:2E:6F:2A:56:A5:C5:E4:C2:81:71:E9:2B:7D:85:18:C4
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:39:b0:2f:ac:67:05:7e:35:b4:b2:33:6b:b6:03:46:45:
         01:24:9e:18:fd:51:9a:e0:ca:15:85:fc:b5:3b:5f:61:33:28:
         5a:c7:e6:06:f5:54:b9:73:4f:c3:59:55:2c:53:f1:bb:43:7f:
         d6:f4:42:9e:97:4f:d4:e6:d1:c6:25:db:19:b2:f8:3f:33:fa:
         1e:db:6e:ef:68:ae:d5:1f:43:39:c7:4b:aa:b6:ba:3b:49:e2:
         77:82:dd:22:62:30:53:d0:b7:ee:eb:cf:41:78:a1:98:40:48:
         ba:72:64:c0:0b:97:c4:dd:c6:a2:2c:7c:b2:8b:62:3e:f0:99:
         7b:fe:a9:1d:c5:bb:c3:d8:5a:9e:62:cf:f2:b8:84:73:c2:5e:
         4c:e2:9f:72:6b:03:7f:1c:cf:be:48:75:d6:ff:81:ee:e2:75:
         98:83:e9:a8:dc:58:25:6b:cb:7b:bb:d3:ab:0e:d7:8f:64:cc:
         b1:34:35:4b:d8:28:66:34:fd:65:39:d7:76:71:61:3b:e0:d1:
         63:6e:63:a6:31:ae:c9:51:c1:2f:b3:f2:06:74:21:ec:39:63:
         e9:cf:a2:52:03:b8:4f:b2:bc:1c:8b:f8:0b:9c:0e:7b:05:26:
         b5:1e:8e:75:f4:c8:09:ba:f1:34:56:44:73:ab:f5:eb:2a:a8:
         93:51:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org