Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa
File:                     3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          0zZgC2qwj+XzAutwf0If1TkwmD3KTGhe5SdLaMSd9Ys=
Subject key identifier:   F2:C2:53:00:25:FA:47:95:92:E7:43:54:72:14:9B:09:F3:07:3A:8E
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       04DDDD330BAAD6D9F6E5FDC5FC9AF1D3E5C4B0CD
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa
Signing time:             Tue 16 Jul 2024 08:18:52 +0000
ROA not before:           Tue 16 Jul 2024 08:13:52 +0000
ROA not after:            Tue 15 Jul 2025 08:18:52 +0000
asID:                     265093
IP address blocks:        170.233.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dd:dd:33:0b:aa:d6:d9:f6:e5:fd:c5:fc:9a:f1:d3:e5:c4:b0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Jul 16 08:13:52 2024 GMT
            Not After : Jul 15 08:18:52 2025 GMT
        Subject: CN=F2C2530025FA479592E7435472149B09F3073A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:f1:de:d3:85:d8:aa:ec:da:04:62:05:3f:
                    58:c3:e8:4c:28:38:7c:77:0f:55:67:2d:9b:06:b6:
                    3a:4b:38:cc:ac:83:02:7c:97:aa:de:bc:22:ff:fb:
                    57:94:95:05:10:8c:b5:44:aa:fc:99:88:ec:16:0b:
                    83:cf:48:21:c3:a2:82:d1:13:5b:1c:65:49:4e:0c:
                    81:51:ff:0f:f6:25:90:5a:72:4e:32:a9:c9:9f:35:
                    0c:b7:89:28:40:3c:a2:d3:a6:3f:66:d1:a9:67:16:
                    87:8b:f3:5f:46:59:6b:76:86:7d:b0:db:e5:bd:e7:
                    fd:8b:8d:a0:1d:8d:6d:32:72:1f:b8:6c:eb:5c:d8:
                    4d:df:3d:c0:b0:dd:2e:da:1e:ec:c8:06:bc:06:b6:
                    16:5d:49:87:07:9f:92:ff:cc:53:be:45:9a:cc:07:
                    97:aa:db:ab:f9:31:61:f2:6d:9b:28:4d:84:3b:dc:
                    89:30:5a:af:51:eb:96:35:04:b2:cd:6c:60:40:83:
                    83:31:db:bf:76:ad:4c:8c:39:4f:50:33:79:f0:e3:
                    e1:54:ff:3a:83:28:61:d8:00:9e:62:ff:2c:50:b1:
                    12:50:07:27:a0:e7:05:48:cf:6f:7e:ac:9e:dd:cc:
                    06:e8:1f:20:fe:48:4d:c3:d8:29:31:18:b0:de:b2:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C2:53:00:25:FA:47:95:92:E7:43:54:72:14:9B:09:F3:07:3A:8E
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:e8:64:e8:b5:7f:59:02:8d:96:49:20:3f:4a:28:44:a6:
         94:0d:5d:d6:e0:cf:0e:a4:30:5c:2d:51:22:99:14:d2:dc:1c:
         ef:7e:60:f6:78:5e:aa:db:dd:2c:3a:9c:7f:5d:41:34:6a:c0:
         e5:00:70:2b:81:4f:bf:13:ec:aa:98:f1:5d:fc:6a:d6:28:9b:
         50:7f:8d:81:8f:cb:5b:21:7d:a2:08:fb:fc:03:3a:93:c0:48:
         2a:1a:53:80:c5:58:5c:bd:e8:86:cd:24:7c:91:e4:27:76:5c:
         b1:cc:3a:3f:29:f0:27:e2:58:cc:51:5d:2d:c5:88:93:df:0d:
         c6:32:ec:89:83:e2:e7:a0:64:7a:eb:c0:ca:49:9b:04:36:14:
         54:43:9a:bc:a5:d3:44:1b:5d:50:1a:06:70:74:fb:0f:50:e4:
         bf:0a:44:da:c8:43:4d:04:20:c5:d0:fd:b0:9a:13:7f:42:45:
         1b:d1:5d:da:5b:f4:c0:a4:5f:9a:d9:f0:af:e4:23:ce:c8:10:
         7b:b1:1b:7f:5e:c3:26:52:c5:84:6a:e8:47:60:6f:21:31:67:
         3c:58:4f:22:35:ce:86:a1:93:e4:4f:7e:4c:b4:70:0f:fa:96:
         82:b2:48:73:47:89:dc:08:ad:8f:67:de:2d:13:a0:59:fd:93:
         7d:0e:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:53 2024 by rpki-client on console-fra.rpki-client.org