Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3137302e38312e3232372e302f32342d3234203d3e203631363636.roa
File:                     3137302e38312e3232372e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          kqect0SjSYEo7MrzY3L+AeHW6TWd/ooAQnOBfwCFQMc=
Subject key identifier:   2E:75:54:BE:07:97:30:D6:08:D2:2F:9E:1B:99:70:F8:84:AC:39:C1
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       4EED1755DF124D92C8DFED5C90CD8D7FFDF092FD
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3137302e38312e3232372e302f32342d3234203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:09 +0000
ROA not before:           Wed 03 Apr 2024 20:19:09 +0000
ROA not after:            Wed 02 Apr 2025 20:24:09 +0000
asID:                     61666
IP address blocks:        170.81.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ed:17:55:df:12:4d:92:c8:df:ed:5c:90:cd:8d:7f:fd:f0:92:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:09 2024 GMT
            Not After : Apr  2 20:24:09 2025 GMT
        Subject: CN=2E7554BE079730D608D22F9E1B9970F884AC39C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:09:ac:10:b2:bf:fd:58:83:f6:d4:6f:e4:
                    86:9c:a1:97:d4:90:ec:5d:19:c4:c9:26:f4:fb:b3:
                    83:2d:c8:4c:63:2e:9e:79:67:17:5b:74:d8:b6:c0:
                    eb:65:c5:51:e8:ff:25:ff:7a:87:c0:94:ba:ee:ad:
                    08:25:8c:93:83:32:1a:38:d2:e3:fb:cb:40:9d:c2:
                    fb:30:f5:f5:61:e9:16:71:96:0c:f8:b1:00:e7:00:
                    2a:09:39:25:5c:c1:23:e3:a6:88:a8:7e:6c:0a:1f:
                    f6:e1:a0:81:2d:cf:95:4d:53:0a:65:31:f5:a9:5b:
                    e8:51:bd:7c:b4:b7:a8:f2:c4:28:41:40:af:6c:b7:
                    16:91:d3:3d:f2:d0:c2:19:72:d6:a0:a4:f5:89:d1:
                    05:ae:e2:02:1b:20:68:c6:db:e5:f6:71:01:dd:a5:
                    63:c2:9c:10:2a:1b:3e:f3:f8:de:6e:39:85:a6:b2:
                    a4:0c:e1:fb:cd:56:75:6e:35:0c:d6:9c:91:b9:2d:
                    7a:b3:86:3d:4a:92:78:23:eb:f1:7f:67:ec:85:32:
                    84:46:86:cc:a4:88:7f:a2:37:0a:c9:bf:f1:41:14:
                    c6:bc:61:6d:aa:51:c3:5b:f0:d6:06:36:90:b4:47:
                    2b:06:4e:39:1d:5b:cc:28:65:94:57:b2:11:72:af:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:75:54:BE:07:97:30:D6:08:D2:2F:9E:1B:99:70:F8:84:AC:39:C1
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3137302e38312e3232372e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:71:27:bb:03:28:98:67:89:f8:b0:03:90:9f:23:79:6f:
         fc:69:df:82:54:39:6c:44:fd:e7:dc:62:76:53:4a:d5:76:e3:
         5f:40:67:d5:6f:26:b6:67:77:8f:c3:15:94:f6:7b:7d:f3:f9:
         fa:4b:65:a5:ae:6b:8b:85:24:16:31:c1:9b:aa:e8:30:d8:ee:
         52:2a:40:a1:1f:dd:49:a2:d2:db:40:78:c2:e4:96:9a:b5:53:
         bb:66:52:fe:da:11:f9:d3:31:dd:eb:2f:8a:8d:2d:14:92:60:
         79:7d:95:82:82:86:9e:61:b9:80:df:fa:c8:cd:65:d3:f3:8e:
         4c:d2:20:cc:44:a6:3a:6c:e4:03:98:8f:00:76:37:6f:80:f1:
         fe:ba:80:a0:07:17:91:76:61:24:08:9b:32:e6:62:86:ae:70:
         49:9d:e2:df:e8:87:14:75:60:06:e6:67:a3:f9:be:b9:66:5c:
         14:3b:c9:57:cc:53:52:ab:6c:50:34:6b:d3:13:33:2b:4c:ab:
         f8:dd:03:b1:e7:87:90:41:ad:17:ba:e1:a3:66:13:e7:ee:cf:
         86:4e:af:dd:ee:1d:fe:c1:64:6f:cc:81:7c:c6:11:9a:d3:d4:
         a2:1b:60:47:c4:6f:9c:32:8f:4e:78:72:48:f5:2e:32:f1:e2:
         27:f3:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org