Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38312e38382e302f32322d3234203d3e203532363337.roa
File:                     3137302e38312e38382e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          9Fr4vCYFnXsbsPgWYfWw3bCaUOCs3avYhgtSweAFJdc=
Subject key identifier:   6F:F2:BF:36:8E:60:BB:8D:4E:58:E3:30:B1:0F:33:FD:B1:F6:A3:71
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       4954563CC90269A21A068350420C8BD3A58D68A2
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38312e38382e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 03 Apr 2024 18:38:56 +0000
ROA not before:           Wed 03 Apr 2024 18:33:56 +0000
ROA not after:            Wed 02 Apr 2025 18:38:56 +0000
asID:                     52637
IP address blocks:        170.81.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:56:3c:c9:02:69:a2:1a:06:83:50:42:0c:8b:d3:a5:8d:68:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Apr  3 18:33:56 2024 GMT
            Not After : Apr  2 18:38:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d3:4a:84:59:f1:1b:ba:68:ec:5b:65:aa:ad:
                    04:e1:7b:4a:86:b9:6c:11:06:3f:a8:34:62:99:0c:
                    2e:be:f9:fd:c2:0b:2d:b6:2f:de:94:8d:40:31:e6:
                    c1:3f:28:a9:01:56:0d:10:15:0a:82:c5:f8:51:81:
                    03:b0:73:9d:2e:6f:32:09:67:ce:46:75:bf:e2:67:
                    fd:1d:bf:c9:47:8a:dd:7e:6c:a7:8a:62:87:56:32:
                    06:db:78:24:bf:57:6e:48:c0:00:da:26:58:d9:13:
                    1c:a8:72:57:10:5f:0e:b8:69:84:f8:5c:d6:d1:21:
                    4e:d8:cc:81:a2:cf:f8:43:5c:2f:e9:85:3d:6d:78:
                    07:c1:71:11:c9:f1:e6:91:74:4d:02:2d:ec:45:08:
                    ac:d6:cc:cb:0e:d0:7a:6d:86:7e:1a:b8:e8:86:0a:
                    fa:2f:70:4d:fe:de:f6:f9:0d:e9:50:a7:63:6b:52:
                    8e:82:70:fc:e8:dd:3d:0a:3b:db:2f:bf:7e:13:09:
                    30:4e:e4:ca:fe:60:5a:f1:68:06:6a:5b:5a:bd:74:
                    c8:a4:df:38:73:c9:5d:e5:bf:e1:0a:60:06:b3:ec:
                    a9:b6:df:be:6b:1d:01:df:d1:44:df:ed:84:06:ac:
                    5c:03:f2:4b:0f:51:98:4c:8d:4d:6d:b2:87:e0:4e:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F2:BF:36:8E:60:BB:8D:4E:58:E3:30:B1:0F:33:FD:B1:F6:A3:71
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38312e38382e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:c0:96:2c:a3:e1:9b:ec:41:b9:0a:a6:d0:58:e4:1e:ff:
         7a:68:a5:92:8e:51:ee:f9:11:e5:c0:14:ba:d9:8a:f3:02:3f:
         67:09:8e:37:d2:b8:cf:61:ed:c6:9a:46:dc:3a:a0:b0:8c:8f:
         eb:98:3d:49:6f:3f:71:03:31:ee:97:d6:af:01:10:fd:c9:9b:
         91:8c:55:b4:5b:de:6f:a2:57:ba:e6:9b:28:b2:cf:ce:3e:d8:
         f7:f6:c8:63:39:c8:d1:a0:7f:e0:9c:2e:75:3c:e3:ca:e4:1f:
         fa:a4:76:97:b1:42:43:fd:f4:f9:a7:ec:f0:11:f1:5c:39:78:
         eb:17:0d:11:75:4a:f5:8c:db:37:ac:a8:a5:e4:50:e4:49:d0:
         bf:97:c4:fb:ac:f4:89:72:ee:2e:82:2c:47:af:44:aa:30:40:
         59:49:77:ec:84:ba:8e:01:04:a9:c8:df:95:42:1f:b9:19:33:
         a7:79:17:62:b6:b6:90:c7:1c:e0:55:bf:0f:0f:63:44:94:f1:
         82:d4:3a:a4:51:b2:4d:85:8d:58:f6:6b:37:01:4f:08:5d:0a:
         db:5d:d7:80:98:7b:f2:aa:6e:fc:8f:8f:16:c7:dc:98:b0:72:
         40:23:6c:7b:a5:3a:8a:2b:c6:6b:c4:d1:66:8f:8e:55:0b:3f:
         e8:23:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org