Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137302e38332e3231312e302f32342d3234203d3e203532353933.roa
File:                     3137302e38332e3231312e302f32342d3234203d3e203532353933.roa (raw, json)
Hash identifier:          NxbfYL68z61iaRUe644o5n488fHMmQ6/PQt8AFPMw+k=
Subject key identifier:   E7:91:46:DE:05:B0:30:D9:E1:2B:49:FA:07:DD:C3:11:7B:B8:29:25
Certificate issuer:       /CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
Certificate serial:       78B6364BCA7570BF81B02DC81F2EBA05CC395229
Authority key identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137302e38332e3231312e302f32342d3234203d3e203532353933.roa
Signing time:             Wed 03 Apr 2024 22:00:33 +0000
ROA not before:           Wed 03 Apr 2024 21:55:33 +0000
ROA not after:            Wed 02 Apr 2025 22:00:33 +0000
asID:                     52593
IP address blocks:        170.83.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b6:36:4b:ca:75:70:bf:81:b0:2d:c8:1f:2e:ba:05:cc:39:52:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
        Validity
            Not Before: Apr  3 21:55:33 2024 GMT
            Not After : Apr  2 22:00:33 2025 GMT
        Subject: CN=E79146DE05B030D9E12B49FA07DDC3117BB82925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:fd:f4:70:00:2d:18:df:74:fb:2e:5b:1d:
                    4b:6d:4d:07:8b:21:4d:e4:c1:ab:92:52:17:d7:cc:
                    bb:15:51:25:df:15:95:b3:d0:1c:a0:57:a8:f9:c2:
                    de:89:65:bf:37:12:6b:08:d4:fd:0f:1f:44:f7:38:
                    87:4a:c0:e6:72:d5:26:a0:c1:1c:44:b9:c7:0d:38:
                    b2:0a:32:ce:a9:07:f7:49:64:70:1c:84:dd:d8:e9:
                    13:1d:b7:92:cd:bb:ec:aa:33:6f:93:a3:cf:47:e8:
                    10:a0:05:6e:5c:0e:d5:21:65:3a:b0:9b:9c:87:a8:
                    90:75:f1:d9:31:ec:c1:33:85:10:2c:c8:71:4f:09:
                    92:aa:09:d4:fd:66:3f:b5:42:2d:2b:8d:6f:15:5f:
                    36:f9:67:3f:4c:d1:80:4f:d1:80:28:61:f2:0f:48:
                    8d:f9:07:db:fa:90:54:e1:39:0f:20:af:76:a6:d9:
                    e9:0c:d1:ea:3e:5c:e5:c3:dc:ca:21:d9:4a:5a:55:
                    9f:6b:03:5c:e0:27:69:86:f0:73:df:a2:30:4a:42:
                    a9:5c:f0:ee:03:54:18:74:ec:64:e7:8c:12:5d:d4:
                    7b:ae:fe:38:75:ef:7b:fe:29:0f:05:52:50:b7:33:
                    5a:16:77:5d:bc:67:66:bf:75:0d:b5:fe:e2:9e:f4:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:46:DE:05:B0:30:D9:E1:2B:49:FA:07:DD:C3:11:7B:B8:29:25
            X509v3 Authority Key Identifier:
                keyid:71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137302e38332e3231312e302f32342d3234203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:80:02:0b:45:91:af:19:a3:4e:3f:5c:eb:19:62:e3:94:bd:
         81:a2:f9:0f:3a:27:b8:d7:aa:a8:89:c7:fe:7f:f7:e5:b9:73:
         6e:30:57:12:62:9f:b1:85:bf:1e:e1:3f:52:01:77:95:47:60:
         fe:70:6f:05:48:b2:94:3c:6d:fd:62:f8:33:13:db:fb:8a:7d:
         4d:cf:f1:8c:16:d0:98:59:ba:ab:30:d7:be:98:33:22:dd:8a:
         75:a9:39:81:45:1e:1f:59:34:92:86:06:11:5c:2a:f1:f0:b7:
         c9:5b:1f:d4:66:09:57:31:11:c1:3d:f1:52:01:4e:98:d7:de:
         f9:8a:5b:50:21:fe:a3:12:68:2e:a9:29:4d:52:24:49:37:d9:
         32:34:c9:c4:ce:ab:fc:0c:3c:ec:4e:a3:2c:50:51:28:4b:11:
         53:53:b4:da:9f:66:23:be:f7:7f:eb:a2:32:38:20:ee:03:42:
         52:17:66:fa:ed:2b:9a:8c:75:ff:a9:74:33:27:66:a9:bd:26:
         8f:e0:fb:ce:34:b7:02:c6:e2:1b:e6:31:db:65:1a:0b:12:ef:
         cd:40:39:e9:c0:df:ce:59:ec:f8:1e:fc:a4:82:b3:e1:e6:0d:
         87:46:21:80:a0:08:b5:e9:13:33:ba:f7:26:ed:40:c5:c3:57:
         3c:23:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org