Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa
File:                     3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa (raw, json)
Hash identifier:          xYd8n/otxARtozYnWSiM4yf6nuBczsoiA3ayD4QnVmw=
Subject key identifier:   75:E6:39:1C:A9:EC:F5:90:CE:35:A8:AC:C5:36:E9:EA:E2:BC:F7:52
Certificate issuer:       /CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
Certificate serial:       154F8E33CB7B7C5210DE48C18D387DCB2E1D733A
Authority key identifier: AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa
Signing time:             Wed 03 Apr 2024 18:30:34 +0000
ROA not before:           Wed 03 Apr 2024 18:25:34 +0000
ROA not after:            Wed 02 Apr 2025 18:30:34 +0000
asID:                     265037
IP address blocks:        170.84.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl
                          rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4f:8e:33:cb:7b:7c:52:10:de:48:c1:8d:38:7d:cb:2e:1d:73:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
        Validity
            Not Before: Apr  3 18:25:34 2024 GMT
            Not After : Apr  2 18:30:34 2025 GMT
        Subject: CN=3082010A0282010100EB4ACBB8C08C548C2BAAAB06A2045C06B75D4FE10588716613DADA47CF94DEA194AF7FE560B1B9F41DCECAE2E3E7F0BDC82166F90F85E639554D7BCA5E7D0F9D278E23BC55FB9850D977B45C3FA1D7F8115191AE1D216DBEC67A7E5CC61C4231F303EFA98002A1CFCF9A5305C6C647B5169DE1E0CBB7113B3B788AD63BC3B5CF30619158F1AB70D9679C54A95ADD982FB868DF3E1348E27A194320347616611FD4E3CD811B0C50FEBAF2AB386F3431CF515EF085B569AB7FC8DFDC3BC4F7E234A8A2AAFF437D644726D55AD79A8CFE2BCA3A77D4976E057BBBDA33B219A197FE4F5F8B89FC754AE518E3533C78A2404E0CA840B436F1368FD7F6FEA989B826850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:cb:b8:c0:8c:54:8c:2b:aa:ab:06:a2:04:
                    5c:06:b7:5d:4f:e1:05:88:71:66:13:da:da:47:cf:
                    94:de:a1:94:af:7f:e5:60:b1:b9:f4:1d:ce:ca:e2:
                    e3:e7:f0:bd:c8:21:66:f9:0f:85:e6:39:55:4d:7b:
                    ca:5e:7d:0f:9d:27:8e:23:bc:55:fb:98:50:d9:77:
                    b4:5c:3f:a1:d7:f8:11:51:91:ae:1d:21:6d:be:c6:
                    7a:7e:5c:c6:1c:42:31:f3:03:ef:a9:80:02:a1:cf:
                    cf:9a:53:05:c6:c6:47:b5:16:9d:e1:e0:cb:b7:11:
                    3b:3b:78:8a:d6:3b:c3:b5:cf:30:61:91:58:f1:ab:
                    70:d9:67:9c:54:a9:5a:dd:98:2f:b8:68:df:3e:13:
                    48:e2:7a:19:43:20:34:76:16:61:1f:d4:e3:cd:81:
                    1b:0c:50:fe:ba:f2:ab:38:6f:34:31:cf:51:5e:f0:
                    85:b5:69:ab:7f:c8:df:dc:3b:c4:f7:e2:34:a8:a2:
                    aa:ff:43:7d:64:47:26:d5:5a:d7:9a:8c:fe:2b:ca:
                    3a:77:d4:97:6e:05:7b:bb:da:33:b2:19:a1:97:fe:
                    4f:5f:8b:89:fc:75:4a:e5:18:e3:53:3c:78:a2:40:
                    4e:0c:a8:40:b4:36:f1:36:8f:d7:f6:fe:a9:89:b8:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E6:39:1C:A9:EC:F5:90:CE:35:A8:AC:C5:36:E9:EA:E2:BC:F7:52
            X509v3 Authority Key Identifier:
                keyid:AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:71:ba:c0:60:6f:a7:13:98:05:dc:30:dc:a1:e8:2c:29:b9:
         46:51:f0:2f:fa:dc:70:80:20:61:0e:ae:a2:73:16:a7:fb:c1:
         77:12:f5:94:1a:14:ed:31:8c:f9:d1:f8:5f:12:8f:2e:27:7b:
         ac:86:58:59:42:b5:10:70:e8:cc:c6:af:67:63:ad:85:f4:49:
         62:b0:82:09:3e:ab:de:17:12:7d:d5:a8:f3:d8:a6:cf:9b:34:
         3e:da:f1:87:86:da:c4:6a:d6:7a:b4:63:3c:68:c7:5e:1c:75:
         b0:35:99:5f:8f:5f:1e:39:10:c8:14:ea:ef:6b:6d:fd:e6:81:
         53:6f:7d:d2:83:42:d7:1c:9c:b4:29:67:9f:d3:25:a3:60:d7:
         d5:87:a8:19:c1:5a:2c:4a:7b:50:15:f3:06:52:55:1a:25:42:
         eb:54:db:c8:d5:fd:09:e9:db:da:b6:03:8f:5f:76:c5:8a:c0:
         91:88:9b:49:bd:af:56:52:5f:7e:62:34:5f:b4:d1:52:b4:08:
         41:7d:ab:fa:9d:47:f8:18:82:d6:5e:99:5d:71:da:b2:82:70:
         f8:63:62:fd:54:ef:c8:66:48:bb:c0:8a:49:35:d9:8e:64:c7:
         33:0b:36:f5:22:1a:ec:06:a9:d7:fb:fa:e9:89:db:e9:02:02:
         14:cb:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:06 2024 by rpki-client on console-fra.rpki-client.org