Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230352e302f32342d3234203d3e203533323336.roa
File:                     3137302e38332e3230352e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          DIk1NVB7wjdK85QuwJgU50oxUCOLp39PQsneDzwq1BI=
Subject key identifier:   23:88:10:F6:7F:B3:E1:CE:C6:DF:53:58:83:8B:8F:BE:0A:11:F8:4F
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       54CBCC5FEFE3FE3E8E8AFB4367A4BB26E6CED50F
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230352e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:44 +0000
ROA not before:           Wed 03 Apr 2024 18:25:44 +0000
ROA not after:            Wed 02 Apr 2025 18:30:44 +0000
asID:                     53236
IP address blocks:        170.83.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:cc:5f:ef:e3:fe:3e:8e:8a:fb:43:67:a4:bb:26:e6:ce:d5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:15:c3:d3:5e:c8:37:05:8a:85:26:5c:41:
                    16:65:96:0e:e2:fc:34:05:1e:71:9e:1b:3e:57:e2:
                    e0:4f:12:5e:a2:ce:c4:98:3c:73:e1:f1:cc:92:b1:
                    b1:a6:5e:01:17:6c:05:45:cd:b5:50:23:dc:0f:c1:
                    c7:82:5c:c0:8b:4a:68:88:c6:8c:b6:d6:9f:03:68:
                    03:fe:15:28:53:7e:96:4f:fa:f0:71:77:ee:8f:49:
                    e5:40:d5:6d:13:44:07:58:b5:c0:83:51:a2:0b:f0:
                    2f:06:bb:fd:e8:49:14:50:15:f2:76:cb:2b:60:9c:
                    25:83:0a:04:c6:26:57:ac:06:a7:b2:2f:fc:da:bb:
                    65:6e:04:01:45:2c:ae:6b:a1:38:50:63:7e:56:0a:
                    dc:90:03:b8:9c:df:7b:4c:0a:cb:df:b2:97:55:a2:
                    ef:b7:47:1a:d3:83:35:d8:c5:c7:ec:30:a4:24:c4:
                    a6:29:56:1b:4f:64:a3:eb:85:6a:11:ce:3d:3a:0a:
                    fd:9b:c4:10:c1:7c:fa:66:e8:dd:62:34:42:62:fb:
                    77:85:bd:37:6a:de:5c:9c:27:42:d2:fb:13:93:d6:
                    be:17:b2:55:b2:a1:f1:1a:88:56:b5:c3:ab:90:99:
                    93:52:ed:d1:22:b8:ff:d8:18:2f:cf:72:28:7a:22:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:88:10:F6:7F:B3:E1:CE:C6:DF:53:58:83:8B:8F:BE:0A:11:F8:4F
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230352e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:10:64:a2:54:7a:75:d9:46:f2:24:ba:1a:ab:43:77:21:a3:
         cd:14:78:55:43:0e:b8:cd:44:b5:10:3e:b0:96:1c:0a:ef:81:
         ec:91:d8:b3:af:54:55:4c:97:c9:4c:82:5e:08:97:65:a2:b6:
         c6:66:6c:fa:bd:03:2c:f3:09:2c:0b:06:5f:bb:87:ed:d1:b9:
         c4:a8:80:58:7a:32:52:ca:39:0d:cd:a9:df:e9:ac:b5:9b:1e:
         5c:41:3b:0e:a9:c6:5c:8a:72:45:a3:e5:d2:99:62:b7:48:08:
         35:fd:da:7f:ff:da:41:dc:9d:b3:62:62:94:7f:13:b2:8a:50:
         7a:71:98:36:86:85:11:f3:08:05:c8:41:a8:9a:db:ee:f5:20:
         43:21:8c:ea:c9:91:a6:1e:ce:d5:45:64:77:c6:53:15:24:4b:
         ca:24:34:a4:2a:ce:da:c7:64:d6:ed:0f:33:7b:cf:cc:3c:f5:
         a1:6a:0d:63:e8:5f:1c:24:50:fc:af:a5:74:2f:a4:40:d9:6e:
         75:b8:c2:a7:b0:44:2e:47:b3:eb:f3:62:d3:ac:49:58:dc:92:
         86:f4:e2:28:f3:ee:3e:0f:e3:43:23:87:47:73:9a:c9:6f:76:
         b5:eb:39:e8:6a:3a:4e:8f:19:e4:67:77:43:fb:0f:a6:9d:58:
         f7:b1:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:45 2024 by rpki-client on console-ams.rpki-client.org