Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e35312e302f32342d3234203d3e20323635303232.roa
File:                     3137302e38342e35312e302f32342d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          6ye6VRm8BT0UFt/FuJK6lcC8vj4UfBQNPdFakaE2aZ8=
Subject key identifier:   2B:B2:8E:FA:E0:80:5B:B8:1C:5A:53:73:49:C4:28:F4:F8:3F:B6:EA
Certificate issuer:       /CN=75730747EE0CCC4C66AB50829F21FF172F57999D
Certificate serial:       528BD878115986318EB5D425AC09B8072364A0FC
Authority key identifier: 75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e35312e302f32342d3234203d3e20323635303232.roa
Signing time:             Thu 04 Apr 2024 05:48:28 +0000
ROA not before:           Thu 04 Apr 2024 05:43:28 +0000
ROA not after:            Thu 03 Apr 2025 05:48:28 +0000
asID:                     265022
IP address blocks:        170.84.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl
                          rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8b:d8:78:11:59:86:31:8e:b5:d4:25:ac:09:b8:07:23:64:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730747EE0CCC4C66AB50829F21FF172F57999D
        Validity
            Not Before: Apr  4 05:43:28 2024 GMT
            Not After : Apr  3 05:48:28 2025 GMT
        Subject: CN=2BB28EFAE0805BB81C5A537349C428F4F83FB6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:12:be:d3:65:27:97:14:82:a9:35:0c:39:
                    a3:78:3a:d9:aa:7b:f5:33:09:18:46:af:f4:45:d8:
                    bf:ad:b2:0b:db:57:47:20:4c:71:5a:54:98:fe:a6:
                    7e:2e:e0:5a:a1:64:bb:d9:f8:26:ba:9b:fb:81:54:
                    f4:a9:23:c3:83:9a:69:cd:ff:e2:fe:38:f8:69:eb:
                    ae:ef:93:a5:f9:c7:22:15:ea:08:e7:84:64:35:92:
                    31:38:6d:43:d0:84:d4:73:cc:9c:69:a4:a7:9d:2c:
                    2c:f1:ca:27:33:14:0a:9e:a0:4a:b1:69:76:25:cb:
                    ab:16:a3:e4:3b:04:01:f1:fd:e5:a4:a3:a7:1f:c6:
                    03:9d:15:db:19:71:1c:3e:1d:c8:64:3c:ae:fe:5b:
                    b4:d6:b6:8d:6e:5f:d3:9d:14:ff:37:c4:6b:ed:c4:
                    01:20:dd:2d:5f:e7:7d:f6:30:21:d4:50:cc:17:8c:
                    a4:d1:96:4a:9c:ed:9e:64:83:4f:cb:51:43:5f:47:
                    e9:da:58:db:69:e7:b3:b0:38:79:d8:f8:15:fc:82:
                    bc:8d:59:28:20:36:26:4d:2d:39:14:fb:9a:36:73:
                    f4:ce:25:6e:53:cb:62:dd:41:76:4c:3b:df:33:b8:
                    0e:fc:42:79:b8:f7:4e:72:9b:34:fc:3b:db:61:8b:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B2:8E:FA:E0:80:5B:B8:1C:5A:53:73:49:C4:28:F4:F8:3F:B6:EA
            X509v3 Authority Key Identifier:
                keyid:75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e35312e302f32342d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:97:7c:31:dd:23:5f:44:f4:98:30:7a:e1:74:c1:27:d3:9d:
         f2:99:fe:be:87:98:76:8a:97:16:af:80:9e:fe:06:19:5e:18:
         79:9e:e2:1c:d4:a1:db:68:ec:82:a3:5b:f9:cb:60:c1:e4:45:
         1f:34:3c:db:51:5c:ef:a1:73:3a:80:be:79:2f:11:df:73:b8:
         1b:8e:5d:02:54:2b:14:7f:2d:35:43:b4:55:10:91:de:ad:91:
         11:15:c8:45:37:28:1e:cd:c9:bc:04:43:f2:91:21:d2:dd:85:
         2f:b3:b0:df:44:7b:ba:88:53:82:3e:d9:44:fe:7f:72:7e:48:
         f4:08:65:10:45:3f:82:b5:32:e9:04:22:cb:9d:30:40:d2:c5:
         20:38:88:ce:d4:e6:ef:96:e2:24:42:a9:36:60:a1:d0:d7:fc:
         c7:9f:81:06:18:70:83:c7:3b:a3:b7:3a:e7:24:1a:9d:ee:99:
         9b:d5:05:c8:f3:59:12:b0:12:1e:94:c4:fc:16:d1:10:2b:9e:
         b6:b5:f9:79:ac:10:3d:ef:e0:06:1d:59:a4:c6:05:c6:e2:63:
         cd:de:66:ea:ec:22:56:dd:07:24:39:c2:66:53:10:5c:b7:42:
         74:54:c1:2a:0d:57:44:6f:71:3a:c3:bc:03:76:40:87:02:7e:
         9f:25:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org