Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          oisfmSPSr+7ApOMWXzexUI0dRRfkqpLyBhCgG1B5/sU=
Subject key identifier:   83:31:54:15:A2:A6:14:58:3C:16:B8:C1:AC:CE:71:55:29:1D:5A:2D
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       4C26475B7662163042ED7428F44A352082943DEE
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:42 +0000
ROA not before:           Wed 03 Apr 2024 18:25:42 +0000
ROA not after:            Wed 02 Apr 2025 18:30:42 +0000
asID:                     53236
IP address blocks:        170.150.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:26:47:5b:76:62:16:30:42:ed:74:28:f4:4a:35:20:82:94:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:42 2024 GMT
            Not After : Apr  2 18:30:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:ce:41:62:d3:36:b4:a3:93:99:52:b8:82:
                    4b:49:fb:14:78:8c:4b:f2:47:50:83:90:83:62:4b:
                    b7:85:78:6b:22:f8:e9:c7:97:66:a9:31:a7:b6:53:
                    24:18:e9:08:45:d1:40:10:6e:db:86:40:e1:bb:06:
                    d8:bc:38:14:27:0d:9c:f0:05:9c:1b:97:d1:0d:ff:
                    e0:c8:30:44:fb:b8:63:02:3c:ef:d8:c7:62:b2:a9:
                    ea:ee:0f:1a:69:92:4e:35:fb:73:f8:71:0f:ca:7e:
                    74:de:22:f7:b5:58:4b:ac:f3:e2:3b:62:fb:b7:02:
                    ad:31:37:13:52:d6:df:4c:72:2b:26:bc:9b:e5:42:
                    31:8e:c8:de:21:89:ce:ee:44:1f:6c:78:25:aa:9c:
                    be:ee:0b:d6:2e:53:4b:26:bd:48:6f:89:e0:ba:7a:
                    8f:bf:a8:a9:0c:bd:43:55:3c:ef:29:ce:e3:a5:c3:
                    85:42:5f:f6:99:90:76:9f:4e:f9:8f:2c:9c:21:55:
                    e8:f5:43:f3:e7:65:d9:fc:36:03:29:c2:6b:57:d4:
                    49:82:4d:d1:9c:bf:c8:de:6a:86:34:82:4e:06:4b:
                    6a:28:b1:00:3f:a3:20:f2:1c:02:b7:b0:d8:46:d7:
                    3c:90:c9:be:a4:03:75:5a:7b:09:34:60:cb:43:52:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:31:54:15:A2:A6:14:58:3C:16:B8:C1:AC:CE:71:55:29:1D:5A:2D
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:93:fe:0a:37:27:b0:6a:61:10:77:53:02:c2:92:6b:72:
         f1:ea:54:bc:b5:d6:ce:ed:2b:63:ef:76:8f:75:2f:fa:61:a5:
         fb:de:8c:89:82:62:79:4b:38:df:de:4a:95:ff:7e:fb:a8:54:
         5b:da:3f:73:7f:67:44:7e:d7:1e:58:55:89:42:9d:5f:5b:93:
         5f:af:33:e8:90:c6:71:2b:11:5e:64:31:e3:b4:e2:49:1b:9c:
         40:a0:46:ee:54:04:90:1f:24:0d:e0:20:fd:6a:58:f3:d5:10:
         4a:6b:01:be:b5:30:0e:68:d5:24:55:50:90:cf:fc:9e:28:dc:
         06:5f:b2:64:92:66:1f:25:6c:ed:6e:07:62:89:8d:d6:1b:39:
         13:b2:4e:17:fe:55:2a:17:26:44:da:95:71:53:9f:75:e8:eb:
         bc:1c:82:20:65:f5:51:99:7d:62:07:df:46:15:da:5d:b6:38:
         4e:8c:63:d1:e8:71:eb:7f:81:d7:98:25:71:de:ca:fc:2c:a7:
         b6:88:86:39:c9:fa:6b:f3:bc:83:73:37:78:08:ef:c5:30:fd:
         1a:3b:3e:6d:c3:b1:8d:48:b4:a6:67:c7:38:1b:f4:0e:db:e1:
         59:e6:b5:63:b3:d2:8d:f7:04:66:4e:50:7e:5b:9e:d5:09:bc:
         da:c2:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:29:42 2024 by rpki-client on console-fra.rpki-client.org