Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
File:                     3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          KZgkUhdDEKXUfMWWU6gMJJ27m9duGjqBpHgIvi8UVI0=
Subject key identifier:   56:FC:1F:D8:5B:B1:8A:FA:9E:BA:C4:A7:DF:25:ED:80:19:0F:40:14
Certificate issuer:       /CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Certificate serial:       03E9DFB202E7823C1B2E740DC44464ED3637A2CE
Authority key identifier: A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa
Signing time:             Sun 28 Jul 2024 21:21:33 +0000
ROA not before:           Sun 28 Jul 2024 21:16:33 +0000
ROA not after:            Sun 27 Jul 2025 21:21:33 +0000
asID:                     263424
IP address blocks:        170.82.119.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e9:df:b2:02:e7:82:3c:1b:2e:74:0d:c4:44:64:ed:36:37:a2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
        Validity
            Not Before: Jul 28 21:16:33 2024 GMT
            Not After : Jul 27 21:21:33 2025 GMT
        Subject: CN=56FC1FD85BB18AFA9EBAC4A7DF25ED80190F4014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:65:ec:61:d6:75:b2:cc:36:b9:e8:85:a6:64:
                    2b:78:d7:68:ba:3c:cf:42:d6:b9:8b:e7:44:0b:70:
                    24:ed:89:c6:7a:09:f9:2b:91:79:48:50:2b:aa:3c:
                    55:76:5d:3e:37:eb:72:f1:85:79:08:af:b8:4b:f5:
                    ae:22:2d:e2:d3:fb:8f:59:57:e9:dc:96:2d:7f:56:
                    e8:aa:aa:5e:18:cc:01:dd:ca:ee:2b:5e:b9:f7:6d:
                    56:5e:d3:97:fc:bd:81:58:20:c1:f4:3d:7f:55:26:
                    67:14:19:4c:aa:fb:72:bd:ee:b3:a0:26:13:19:96:
                    d3:6c:3d:81:4b:36:bf:a2:f6:d6:50:15:ec:1c:8d:
                    5f:8a:8c:08:21:f6:9b:14:b6:4e:50:1a:da:8d:d7:
                    0e:68:62:3a:00:0e:37:95:5d:c4:d8:eb:4b:22:2e:
                    7b:58:6d:43:6c:31:f5:98:c2:0b:94:96:3f:0b:ce:
                    9a:e6:34:0d:dc:e9:ce:dc:0d:58:9a:87:ea:d5:6c:
                    1a:b2:fe:3f:d6:9a:57:f5:74:42:89:f8:a7:f4:5d:
                    6a:f5:f3:20:a1:f4:d4:07:df:66:07:08:da:60:89:
                    4f:47:d1:94:d2:de:08:df:7e:df:5f:17:cd:f3:90:
                    c1:cc:71:63:3f:9f:7b:5e:5e:5e:c2:f4:b9:81:ff:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:1F:D8:5B:B1:8A:FA:9E:BA:C4:A7:DF:25:ED:80:19:0F:40:14
            X509v3 Authority Key Identifier:
                keyid:A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3137302e38322e3131392e302f32342d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:03:ec:40:91:82:e3:64:f6:2b:2e:d6:58:96:1d:d1:f5:0c:
         38:3d:30:6d:b3:8d:be:37:68:61:4d:5f:38:48:07:1d:8a:38:
         56:f1:49:98:73:12:36:5c:64:74:02:d1:5f:c4:58:6e:a4:6b:
         73:9e:a4:cd:0e:03:35:65:6a:d7:99:7d:92:aa:c6:42:0b:b3:
         a2:f2:1e:be:84:57:08:c5:cc:87:bf:06:75:b4:7a:c3:2d:65:
         66:30:03:82:94:b2:52:f1:86:86:64:d1:75:f1:76:bc:bb:b3:
         77:5a:b7:d5:f2:01:1f:a2:c0:46:f2:a5:a0:46:07:8a:7a:6e:
         75:8e:0d:9b:eb:e5:a9:55:26:54:bb:5e:73:04:40:00:4f:0a:
         c7:8f:fc:f8:a7:56:4b:6e:e6:02:6f:fb:84:ff:f6:84:1b:f3:
         07:cc:e4:58:c6:13:34:d4:6f:c7:21:23:7d:1a:fa:17:9b:89:
         a5:c8:54:28:c2:7a:0b:5c:19:98:af:9b:a8:78:2e:50:2c:db:
         ad:ad:31:39:b2:90:81:82:47:89:ca:0e:54:07:4c:bf:3b:e3:
         42:d3:3f:40:eb:2c:fd:91:e3:7a:c5:36:80:10:78:2f:45:bd:
         dc:11:a2:81:c6:aa:59:f5:a9:3a:44:9b:56:6d:36:04:2d:77:
         00:7b:c6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org