Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          IDIOEjsL0wa6yS5KYlNlaXr5bkGQV6suQ/yVIK2q0lo=
Subject key identifier:   17:B6:CF:40:9E:32:53:FA:A2:74:88:EA:24:FF:AE:EE:DB:E2:FB:D2
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       52FD5DDBB80C26AFC933F2B1F3E7820979D035F4
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:50 +0000
ROA not before:           Wed 03 Apr 2024 18:25:50 +0000
ROA not after:            Wed 02 Apr 2025 18:30:50 +0000
asID:                     52977
IP address blocks:        170.231.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fd:5d:db:b8:0c:26:af:c9:33:f2:b1:f3:e7:82:09:79:d0:35:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=17B6CF409E3253FAA27488EA24FFAEEEDBE2FBD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:0f:00:27:c8:a0:06:a5:85:3b:77:d7:08:
                    3b:fc:85:dc:06:39:65:3d:f4:e1:d4:ac:43:13:db:
                    be:0f:98:36:de:95:ce:6c:04:b5:39:fc:6e:48:0f:
                    fc:43:a0:7f:fe:f4:33:9e:87:aa:9c:4c:bd:72:e8:
                    5a:7b:3e:5e:c7:1f:9b:b7:3a:57:ee:86:91:87:4b:
                    41:f3:31:2b:64:e7:cb:b9:bd:91:02:8d:ab:90:e5:
                    56:3e:81:db:b0:41:4e:72:ed:c7:83:ec:1d:cd:c6:
                    67:23:83:86:9c:f0:6c:f1:d1:e1:16:66:18:b9:c3:
                    fd:c5:d7:07:b1:4d:8d:2c:a0:2b:cb:67:f3:b5:52:
                    e1:77:52:f1:1b:8d:c8:79:31:b8:b9:8f:d1:80:6d:
                    6e:8a:1d:1e:59:00:38:f0:65:09:47:d9:2a:3e:1c:
                    d1:d4:14:a3:90:36:66:b0:3b:64:08:c6:92:0f:e3:
                    74:34:a0:cd:89:45:3b:c8:4c:f4:65:d6:28:4b:6c:
                    5f:eb:3e:f2:23:9b:e1:ee:4f:16:86:e2:04:af:85:
                    e4:2e:cb:5e:78:5d:b5:05:39:f6:ff:c1:19:f5:55:
                    cb:c3:16:18:4f:bf:ea:71:d5:62:b2:32:30:c6:8a:
                    f9:94:5c:0f:a1:17:a4:bd:97:c6:0f:13:3d:d9:27:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:CF:40:9E:32:53:FA:A2:74:88:EA:24:FF:AE:EE:DB:E2:FB:D2
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0b:61:1c:f6:34:39:bf:21:29:5f:5f:b1:bc:0d:6f:a4:43:
         94:fe:fb:71:fa:4c:1e:9a:60:8e:26:25:89:40:fb:36:00:36:
         76:18:84:c3:44:bb:b9:56:44:15:45:9d:63:e7:1c:28:d0:e5:
         53:5f:94:0d:f8:f4:c3:88:70:af:45:0b:c5:03:b8:a8:9c:88:
         b1:10:4e:41:58:6d:70:7e:da:67:27:15:f5:86:7d:b2:95:35:
         b1:66:19:a4:e1:bb:30:7e:db:7a:57:c3:25:0b:86:c9:a3:07:
         76:12:70:e4:dd:ba:d6:51:c5:21:89:5a:ac:07:1b:0e:6a:e1:
         14:47:c3:94:b4:30:52:ca:60:19:ee:95:83:a1:f0:88:3a:ed:
         3c:f7:ba:e4:62:c1:9b:f3:99:b4:45:bb:13:ee:8c:e6:17:39:
         1b:d7:b4:c7:94:7e:20:60:57:ff:aa:f6:1a:48:08:90:2b:a1:
         35:8c:8d:ab:f6:58:32:e9:6b:a0:7d:c3:64:32:6f:13:fb:8c:
         95:fb:d3:58:2f:69:8f:69:7c:0c:00:ca:07:d4:c1:46:53:9f:
         f6:3b:48:01:a9:13:0b:d6:a4:6c:bf:9c:71:94:77:8d:75:d7:
         9f:60:4b:06:47:14:2b:9b:a0:41:52:9d:99:ac:9e:09:20:eb:
         8c:f0:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org