Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
File:                     3137302e302e3138382e302f32322d3234203d3e20323634393735.roa (raw, json)
Hash identifier:          bJJ9ou+KdPNFznXd3G6IeAP7wllUH6GdKc+xn3yxJT8=
Subject key identifier:   87:38:BC:58:02:E9:75:97:4E:BB:4F:63:72:D7:F8:E3:49:80:4B:BE
Certificate issuer:       /CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
Certificate serial:       3D90B9CF4ABB8AAA8C90F5F6436AF0851C8C7B12
Authority key identifier: EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
Signing time:             Thu 04 Apr 2024 06:32:49 +0000
ROA not before:           Thu 04 Apr 2024 06:27:49 +0000
ROA not after:            Thu 03 Apr 2025 06:32:49 +0000
asID:                     264975
IP address blocks:        170.0.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl
                          rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:90:b9:cf:4a:bb:8a:aa:8c:90:f5:f6:43:6a:f0:85:1c:8c:7b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
        Validity
            Not Before: Apr  4 06:27:49 2024 GMT
            Not After : Apr  3 06:32:49 2025 GMT
        Subject: CN=8738BC5802E975974EBB4F6372D7F8E349804BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:54:b3:81:54:bc:e7:bc:d5:17:d0:63:a1:
                    45:48:72:9d:db:d6:b6:eb:92:eb:09:ba:72:51:ab:
                    2d:53:15:9a:1b:08:7f:4b:91:01:84:45:5a:50:3f:
                    5e:3e:08:d7:d3:e0:02:e5:1e:e1:12:8d:b6:44:55:
                    18:67:2b:a3:21:b5:38:ac:9a:b0:59:ce:49:40:ff:
                    dc:f8:96:92:7b:25:99:bb:59:51:58:a1:de:cd:58:
                    57:20:2f:86:d3:e3:f3:20:f9:88:da:55:0c:d4:21:
                    d8:5f:da:2b:7f:bf:41:5c:2a:91:3f:5a:97:6d:f4:
                    ae:a1:bb:79:4f:de:c1:e9:a8:46:4f:63:28:87:62:
                    3b:d4:f1:fc:36:fc:4d:9f:08:fd:ef:75:c7:e6:bb:
                    1a:32:8b:5d:35:eb:0e:9b:02:e7:20:e9:13:ee:cc:
                    94:f5:8e:90:be:e4:3a:b0:96:cc:49:18:a7:0f:8a:
                    5e:42:37:8c:90:c9:94:1d:c5:ef:a1:e6:22:60:63:
                    5f:fb:49:04:15:03:4d:cc:c6:07:45:0c:4d:17:df:
                    5b:70:8b:f5:ce:d3:1e:65:a3:c1:04:86:10:ea:18:
                    f0:09:da:74:e8:9e:89:65:44:62:41:85:31:eb:4a:
                    10:35:97:75:20:5b:55:32:9e:c1:c0:f8:34:99:a8:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:BC:58:02:E9:75:97:4E:BB:4F:63:72:D7:F8:E3:49:80:4B:BE
            X509v3 Authority Key Identifier:
                keyid:EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:dd:cf:7a:a7:0f:9b:e3:22:2d:5c:20:d6:9e:cc:6a:66:
         99:18:8a:10:ef:96:0c:0d:22:79:f5:82:5e:51:f2:4b:7b:d0:
         ea:c4:43:c7:a8:27:7b:88:79:fc:ad:e3:5e:89:1c:42:16:e3:
         33:90:1e:c7:83:82:8a:16:05:e2:bb:40:be:f7:df:5d:61:cd:
         b4:a3:4a:28:b6:ea:51:15:02:24:84:71:28:d8:98:81:c7:35:
         2a:4b:17:ba:2c:71:96:38:c2:92:63:07:1b:eb:f4:a9:03:12:
         33:8c:6b:c4:a1:4b:48:ec:61:2c:9c:3c:11:d5:ae:fa:c5:48:
         72:c8:99:ca:96:6c:37:d5:4c:e6:f0:78:78:97:4b:9f:af:68:
         6c:8a:68:8f:36:3b:f6:81:db:29:df:75:12:ee:be:66:cc:6a:
         47:71:2d:9c:49:22:5a:86:56:ed:d3:ee:a8:70:0d:81:df:02:
         9b:92:b5:63:df:c4:ac:ca:ce:20:68:e6:49:74:de:10:6c:b1:
         5e:d1:a7:9a:a1:09:96:5a:52:5d:18:b0:c0:ca:be:04:4f:b6:
         2b:c5:33:f8:36:1c:b3:29:0d:97:c6:d0:1c:02:93:89:07:f6:
         61:c7:84:98:f2:d6:e0:ff:11:27:91:8b:08:a6:22:bc:24:7f:
         d3:ee:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:10 2024 by rpki-client on console-fra.rpki-client.org