Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa
File:                     AS53170.roa (raw, json)
Hash identifier:          1/2D98PBw0ilNKzQ6ydQ6950ww5lvwgfrbBwOE4PxUk=
Subject key identifier:   81:0B:7B:8C:E9:A7:C6:00:CF:40:56:9E:95:0E:9A:BC:74:E2:2C:B8
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4918745E20EAD4CC5A64DCEA5552D016D9073579
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa
Signing time:             Wed 17 Jul 2024 14:48:34 +0000
ROA not before:           Wed 17 Jul 2024 14:43:34 +0000
ROA not after:            Wed 16 Jul 2025 14:48:34 +0000
asID:                     53170
IP address blocks:        186.224.55.0/24 maxlen: 24
                          2804:3838:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl
                          rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:18:74:5e:20:ea:d4:cc:5a:64:dc:ea:55:52:d0:16:d9:07:35:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Jul 17 14:43:34 2024 GMT
            Not After : Jul 16 14:48:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:1e:c9:1c:6a:ff:51:fe:69:e0:b4:5e:3b:
                    2c:1f:9d:e4:76:38:66:e1:d9:77:e9:74:f7:1b:32:
                    d7:80:f1:b1:26:47:63:df:04:ba:46:74:d8:34:67:
                    23:c2:63:54:a3:cf:a3:53:2f:5c:24:da:cf:d6:8e:
                    b4:b9:65:17:36:a4:d9:3b:58:6e:47:07:09:0a:16:
                    d7:ef:a6:37:eb:2a:eb:86:b6:f8:a3:41:bd:20:bb:
                    01:c7:41:e1:5d:a0:80:b9:93:b0:c4:e8:4b:3b:2c:
                    f3:11:02:ca:77:65:99:d2:7a:2b:8f:71:34:de:a2:
                    5e:f3:70:ce:e2:9e:a0:00:f0:68:54:f1:53:75:d2:
                    33:90:4a:c1:c0:37:7b:24:5f:dd:cc:20:4d:45:52:
                    fb:95:b5:1a:00:2b:03:0c:86:be:dd:35:11:29:a7:
                    c3:6f:f5:f9:81:d6:ca:2b:88:bc:94:e3:e6:da:b2:
                    27:99:68:27:b2:59:22:72:db:dc:8c:a2:d5:e5:3b:
                    cf:41:b9:b4:ff:82:a6:09:17:1f:6c:a1:01:9a:9f:
                    7e:fc:43:1f:02:d7:93:6f:7b:6a:90:36:a7:60:3e:
                    39:aa:d0:6c:15:eb:9a:df:b9:ab:02:db:fb:09:51:
                    c2:9d:fd:39:f7:32:ab:03:d7:9d:f8:e2:a8:23:c4:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:7B:8C:E9:A7:C6:00:CF:40:56:9E:95:0E:9A:BC:74:E2:2C:B8
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.55.0/24
                IPv6:
                  2804:3838:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:6e:1c:ac:79:38:e5:fb:8d:fc:de:59:e5:ac:73:fa:3d:
         23:ae:8d:d1:b0:bf:62:33:d2:7b:83:7b:17:09:72:fb:27:17:
         fe:27:48:7b:4c:75:2b:d2:14:1f:26:b8:b1:93:1a:fb:be:ca:
         ac:3a:ad:70:bc:92:9e:be:e6:8b:d8:b5:9b:68:7d:10:d2:f0:
         61:f7:3f:86:94:cb:ac:24:49:2f:08:03:c1:8d:c9:75:3b:ca:
         4e:45:b9:5a:ba:ce:1e:ec:41:6d:a5:c2:b4:72:6a:33:22:4c:
         7c:26:28:c7:92:23:80:32:07:e0:a0:b4:1e:d8:a1:7f:a2:f7:
         ac:28:35:4c:a0:3e:11:ea:9c:e6:1d:e5:03:e6:96:19:a9:74:
         1c:d7:b5:61:e2:9e:3b:ab:71:03:64:56:8a:49:c0:74:60:d9:
         ce:8e:c0:c4:81:ea:b2:1b:87:9a:0c:93:0c:85:41:d0:d5:a2:
         a0:91:d6:8a:e6:aa:f7:f7:26:6a:8f:d2:f3:4b:b4:4b:49:0e:
         b6:25:a3:8b:5e:69:17:9b:c5:08:48:bf:69:9d:c2:6e:08:6b:
         e5:6d:8f:9c:0c:a1:2d:39:cf:c0:3c:a4:93:fa:dd:d8:d5:4d:
         17:22:57:b4:ff:ff:75:56:1d:c7:eb:ea:13:68:43:89:ba:5d:
         63:87:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:47 2024 by rpki-client on console-fra.rpki-client.org