Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          6LBYbpV/9pOFVYvpOJMFs+AJVOl2slkeOpptqdTmPBk=
Subject key identifier:   8B:5B:A2:18:26:F1:EB:4A:C3:31:79:3A:99:8D:48:6C:C5:72:77:8F
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       533790CE7F162046B32B857A4694115D088DC854
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa
Signing time:             Mon 17 Jun 2024 11:28:23 +0000
ROA not before:           Mon 17 Jun 2024 11:23:23 +0000
ROA not after:            Mon 16 Jun 2025 11:28:23 +0000
asID:                     52706
IP address blocks:        170.233.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:90:ce:7f:16:20:46:b3:2b:85:7a:46:94:11:5d:08:8d:c8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Jun 17 11:23:23 2024 GMT
            Not After : Jun 16 11:28:23 2025 GMT
        Subject: CN=8B5BA21826F1EB4AC331793A998D486CC572778F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:17:64:98:24:0c:92:12:0f:9a:90:7e:13:
                    5d:57:28:61:6a:78:6a:1d:a2:2f:e1:da:6c:1a:b3:
                    93:ed:f4:e2:d2:f4:94:09:51:86:6e:fa:48:88:c2:
                    bd:7c:f4:6d:5f:9f:b9:36:36:f9:2d:11:14:cc:03:
                    af:eb:9f:0f:75:5c:d7:fd:ea:7b:8f:7f:ef:9c:1d:
                    26:bd:4c:40:89:4d:42:2c:79:54:85:70:54:30:e1:
                    c5:92:1e:58:cf:f5:bf:2d:bf:0d:4f:89:e8:3f:9b:
                    46:62:bd:b2:89:42:fa:f6:6c:f5:5e:a7:64:2f:e3:
                    d2:e3:5d:89:68:44:0e:25:f6:dc:cf:25:8c:d6:9c:
                    fb:4f:68:01:c2:0f:dc:11:b7:e0:2e:88:16:ed:fd:
                    2c:1d:a5:1f:1e:cb:9e:6d:41:77:0c:74:c2:4a:b2:
                    82:89:60:dd:18:54:83:49:2f:a0:97:43:b0:45:cc:
                    4b:96:ef:13:bf:52:79:cb:ea:ee:0d:09:93:93:7f:
                    c5:58:78:22:cd:d9:78:28:18:13:05:61:5b:65:7b:
                    48:bc:95:22:f5:b3:31:55:65:e5:40:c5:34:93:5e:
                    7c:36:76:da:5f:f2:16:a8:80:9e:28:de:5a:cf:f0:
                    7b:76:18:17:1b:58:0a:c0:bf:27:22:41:75:c1:be:
                    81:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5B:A2:18:26:F1:EB:4A:C3:31:79:3A:99:8D:48:6C:C5:72:77:8F
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e1:30:28:c6:84:74:71:31:e5:6d:d0:b7:53:44:68:9e:bd:
         40:ec:b5:cb:b2:e6:7c:8c:e1:d2:95:41:67:2b:fe:12:f2:16:
         67:67:29:fe:6f:e3:b8:2e:4f:e9:a3:50:0e:7b:7c:6f:b1:f0:
         01:f5:e6:67:e0:31:c7:83:be:fc:4b:20:ec:69:11:62:55:4e:
         89:da:70:ac:af:9f:e6:9d:25:88:d6:14:26:2a:5b:44:37:24:
         8f:c0:4d:4b:e7:49:58:f8:b5:8f:a3:e4:1d:b4:f1:f8:37:ea:
         2c:17:b4:97:1a:8f:a4:4b:aa:c6:fa:eb:6f:3a:77:81:d1:fd:
         41:a1:53:ea:0e:69:ce:ac:05:5c:f9:63:aa:7d:25:04:3f:80:
         ea:65:6f:b7:98:52:b0:e5:72:a5:80:e9:65:0a:ab:9d:99:eb:
         8b:fb:23:6b:cb:2a:43:38:b0:07:b7:01:d0:55:c9:f9:82:a9:
         7e:a2:e0:cb:67:97:99:37:7c:cf:54:a4:c7:a3:56:ff:58:66:
         ff:2a:6c:e6:91:56:2d:0c:05:0e:56:95:9c:3e:ad:57:e5:7c:
         08:4d:9b:e8:15:35:13:65:a0:94:2e:73:48:68:70:e9:76:3d:
         96:28:7e:a3:c3:da:0c:94:19:da:43:38:e3:08:ba:8e:6b:39:
         6d:6c:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org