Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/3137302e37382e3230342e302f32322d3234203d3e203238323430.roa
File:                     3137302e37382e3230342e302f32322d3234203d3e203238323430.roa (raw, json)
Hash identifier:          5W8EiFlBt+nKdlZeGlBuTrTgsQG07Thsj5A+UUXSzHg=
Subject key identifier:   A2:FA:05:A5:F7:21:DA:02:67:E9:3D:4D:E0:D6:BA:6B:01:52:C7:72
Certificate issuer:       /CN=5B97AFF236F65B7267ED145B798C19E124850546
Certificate serial:       0B080AB70F72AA507F8A817331545E6B10855E22
Authority key identifier: 5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/3137302e37382e3230342e302f32322d3234203d3e203238323430.roa
Signing time:             Thu 04 Apr 2024 08:54:33 +0000
ROA not before:           Thu 04 Apr 2024 08:49:33 +0000
ROA not after:            Thu 03 Apr 2025 08:54:33 +0000
asID:                     28240
IP address blocks:        170.78.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.crl
                          rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:08:0a:b7:0f:72:aa:50:7f:8a:81:73:31:54:5e:6b:10:85:5e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B97AFF236F65B7267ED145B798C19E124850546
        Validity
            Not Before: Apr  4 08:49:33 2024 GMT
            Not After : Apr  3 08:54:33 2025 GMT
        Subject: CN=A2FA05A5F721DA0267E93D4DE0D6BA6B0152C772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:df:56:6b:da:5e:c1:a5:ca:14:1a:f5:36:
                    d9:00:cc:7c:0d:fd:9f:9c:f1:5c:ac:bb:07:52:06:
                    97:1b:a2:35:cf:4f:60:64:e1:db:13:53:c5:5f:e1:
                    53:b1:3e:4c:12:98:c9:89:77:8d:13:92:1f:e2:a1:
                    0d:30:85:36:79:c8:15:7a:1c:4c:1c:f9:4f:6d:cf:
                    f1:68:b7:91:e2:75:8e:d1:98:07:c4:3b:ed:1d:42:
                    b2:f9:4e:83:28:db:3e:0d:9c:28:a9:3c:cf:d9:e7:
                    e8:d2:b7:0e:b6:e3:68:10:2f:c9:98:5a:42:dc:2d:
                    d0:4b:97:a1:97:db:72:d4:cd:3d:af:91:5a:e4:36:
                    5e:8d:2e:86:b9:55:6c:b2:93:13:11:7e:c9:56:06:
                    83:21:61:4d:05:41:b6:77:4f:1e:01:84:fb:e0:a7:
                    c3:03:28:54:7d:91:cc:8a:2e:7c:3e:c5:1b:8c:c9:
                    cc:c8:ec:71:27:11:63:d5:14:97:51:c1:2c:02:34:
                    21:82:be:fc:54:6e:bd:b6:20:f0:cd:db:cd:59:46:
                    5a:f6:a1:93:c3:15:e4:14:07:85:14:a9:fc:0c:58:
                    c8:7c:8c:fd:f7:29:89:ba:17:58:ea:c0:30:3a:96:
                    cf:da:98:02:27:70:06:d7:e4:17:c8:b2:42:80:7a:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FA:05:A5:F7:21:DA:02:67:E9:3D:4D:E0:D6:BA:6B:01:52:C7:72
            X509v3 Authority Key Identifier:
                keyid:5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/3137302e37382e3230342e302f32322d3234203d3e203238323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:ec:27:d3:56:77:36:73:3f:51:d7:d1:4c:12:c4:2b:72:
         21:6e:63:a9:3c:5a:7f:63:f7:44:2f:ef:60:f0:f1:25:aa:d3:
         84:08:b3:76:a1:be:f7:8b:24:18:5a:09:8a:b1:c5:9b:51:ca:
         55:33:0a:bc:d6:ea:2a:5e:25:7a:47:d7:09:07:43:8c:8b:3d:
         c2:32:06:96:76:04:4b:67:75:fc:96:e6:15:36:11:27:5a:9f:
         0a:41:bc:b8:64:bc:e2:ec:1c:ae:e7:db:cd:14:48:f9:59:1e:
         f9:d9:fb:f5:64:b0:e4:61:eb:7f:f7:cd:86:4e:5c:7e:3e:8f:
         65:78:f2:fd:a9:c4:5f:dd:63:9c:be:a0:63:66:ce:57:53:b1:
         7f:b6:19:41:6c:45:34:90:2c:e3:84:08:0d:cb:e6:f9:bd:df:
         0c:0e:9f:f7:e9:bf:f4:58:a8:a1:0a:b4:dc:fa:34:a4:6d:37:
         d0:a4:20:b4:11:8f:b9:75:90:4a:20:9c:d6:dd:94:9d:b9:f2:
         5b:27:4f:00:fc:e4:d9:59:31:29:fb:14:29:29:f0:a0:8b:90:
         08:a2:1c:93:18:a0:ec:a0:27:37:41:d0:65:12:0b:3d:e7:e1:
         d3:8b:8e:27:44:82:ed:64:06:02:3b:9e:b3:13:51:f1:df:9f:
         a5:e0:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org