Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa
File:                     3137302e3233312e38342e302f32322d3234203d3e203533303232.roa (raw, json)
Hash identifier:          CBu5e5Q2jUuslW3M9t/DXfvvo1nzNvhsbEmT4GbvC+8=
Subject key identifier:   49:BD:09:D2:52:0A:5A:FE:DE:3B:E8:88:21:F7:F3:AC:5A:53:6B:97
Certificate issuer:       /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial:       07696F8E4EF161130E5F28AB100C16AD912B5C1A
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa
Signing time:             Thu 04 Apr 2024 09:46:32 +0000
ROA not before:           Thu 04 Apr 2024 09:41:32 +0000
ROA not after:            Thu 03 Apr 2025 09:46:32 +0000
asID:                     53022
IP address blocks:        170.231.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl
                          rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:6f:8e:4e:f1:61:13:0e:5f:28:ab:10:0c:16:ad:91:2b:5c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
        Validity
            Not Before: Apr  4 09:41:32 2024 GMT
            Not After : Apr  3 09:46:32 2025 GMT
        Subject: CN=49BD09D2520A5AFEDE3BE88821F7F3AC5A536B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:e0:74:e7:92:3e:8d:cf:e9:cd:3b:61:95:
                    30:b3:6f:cf:c0:a3:0c:6a:50:43:40:c7:28:82:b3:
                    05:3b:c2:c7:ff:c6:90:26:25:b1:4b:a0:3f:37:e0:
                    e1:e3:f9:a7:f9:72:b5:64:98:16:36:b8:fa:a4:d8:
                    04:85:cb:1d:35:13:2b:31:0f:40:35:82:e2:bf:72:
                    4d:9a:77:0a:b1:c5:53:7a:6e:9a:d6:46:1e:f4:42:
                    bf:63:7e:56:56:2c:65:66:8f:1c:cf:d9:6c:92:76:
                    68:02:89:86:5a:61:14:84:99:d6:c7:25:1e:6d:6d:
                    d6:c3:ca:49:fe:c4:50:19:f7:8e:04:7b:bd:1b:c2:
                    f5:72:41:16:85:ba:c7:35:9e:69:05:be:8b:9c:65:
                    4a:38:0a:6d:ba:09:27:93:c6:b8:20:48:fc:ed:a6:
                    c9:56:81:43:43:54:90:b2:67:33:00:c4:46:d0:ca:
                    bd:2c:50:12:50:60:fa:26:28:a3:dc:af:73:60:76:
                    b6:88:c1:c5:1e:22:d4:39:65:13:c9:8f:70:d9:c0:
                    d6:56:9f:6c:e1:89:8f:5d:9c:1a:4e:98:33:d2:0f:
                    3f:d5:ab:e8:da:24:a3:5d:2f:62:c0:9c:ab:f9:af:
                    ef:7b:46:9f:8c:d3:73:0a:72:e1:aa:10:61:47:2b:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BD:09:D2:52:0A:5A:FE:DE:3B:E8:88:21:F7:F3:AC:5A:53:6B:97
            X509v3 Authority Key Identifier:
                keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:13:dd:f1:b5:25:42:c0:fc:bc:71:f7:04:f4:bd:c5:61:
         dd:43:18:89:dd:24:d6:e8:cf:59:22:a9:0a:f2:ef:a3:fe:ba:
         72:31:dd:21:c2:55:17:e9:b7:cc:05:f8:06:fd:8f:28:81:d9:
         fe:75:a6:bd:e2:67:4a:ca:4d:bd:4a:da:b4:da:52:16:f8:6e:
         fa:7a:9b:ed:4a:c3:b6:41:62:c0:37:38:fc:cb:83:f1:af:59:
         1a:4c:e3:25:0d:7e:5d:92:b4:07:10:32:8e:f1:ad:2f:43:b6:
         fb:79:2a:d5:bf:cc:8e:69:08:b1:68:7c:10:8a:97:62:89:24:
         74:30:5c:df:c3:c9:39:cb:81:9a:c6:4d:9d:07:57:e4:60:06:
         7f:6e:13:73:48:6f:32:7a:a2:e8:6e:f3:7e:11:7d:04:08:23:
         21:c7:3c:e5:61:5e:43:65:6b:af:55:b1:86:8e:bc:3b:bc:e8:
         b4:a0:29:07:06:48:11:ba:ad:03:ee:97:dc:c7:c8:a6:b7:fe:
         7a:c6:75:31:d6:c8:f8:0e:c4:f0:ee:0a:26:b5:36:3a:78:53:
         55:67:94:49:21:ca:b7:e0:97:b7:70:e0:8b:86:7e:ea:16:58:
         90:50:fc:73:4d:c0:f6:a9:b7:8e:5c:a8:3f:56:17:a6:0e:55:
         08:90:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:25 2024 by rpki-client on console-fra.rpki-client.org