Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa
File:                     3137302e38342e3234302e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          cjYULC01OQRiWTOC/ZdDRJbIf6GPD+wEUNW+w9I91vo=
Subject key identifier:   A8:F0:0D:6C:F1:4C:00:FE:48:39:F9:81:0C:A8:7C:49:C8:D1:C2:D3
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       513539054A5FDB155E4366C2CDE8A319BA8E2F49
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 03 Apr 2024 18:38:56 +0000
ROA not before:           Wed 03 Apr 2024 18:33:56 +0000
ROA not after:            Wed 02 Apr 2025 18:38:56 +0000
asID:                     52637
IP address blocks:        170.84.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:35:39:05:4a:5f:db:15:5e:43:66:c2:cd:e8:a3:19:ba:8e:2f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Apr  3 18:33:56 2024 GMT
            Not After : Apr  2 18:38:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:11:d5:6e:87:27:3c:5e:4a:e8:a4:4b:64:
                    7e:8d:bf:0d:57:b2:d8:5b:71:11:77:6e:ce:d7:86:
                    58:13:53:52:18:fb:80:d2:40:e7:b8:a2:fa:47:8f:
                    4e:bc:a3:99:20:df:e7:6a:92:82:32:24:5a:07:88:
                    89:08:aa:80:f7:0f:f9:6d:e4:4d:d2:92:53:89:95:
                    cb:5b:7a:a3:ad:f1:d7:df:04:0f:eb:d7:2a:cd:42:
                    e7:c8:d0:6a:36:fd:de:e0:00:a8:80:d1:3c:34:6e:
                    2d:fc:c2:76:6f:28:9a:87:db:d2:3e:98:6f:b2:31:
                    61:3f:8a:ed:25:27:16:f5:5b:5a:33:58:e1:c2:cb:
                    3e:c0:60:10:03:88:5a:08:06:6e:1d:6d:13:9a:87:
                    ff:0e:7d:19:b1:91:4b:41:eb:7d:c2:60:3f:32:2d:
                    55:77:72:66:af:dc:c8:0a:98:97:31:74:cf:c6:08:
                    09:07:6d:a1:b0:1c:ac:89:fd:a3:87:d5:7d:71:ad:
                    c4:0e:0a:f5:0b:26:26:16:a8:fc:0c:56:58:18:1b:
                    5b:e7:f3:1d:08:fd:1e:7c:8b:ad:ee:ab:31:b8:6b:
                    8a:ea:fd:dc:df:09:4f:d7:b7:d6:93:06:8d:c0:8e:
                    8c:c6:09:0d:c8:c6:57:33:04:c5:12:66:f0:de:b6:
                    46:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:0D:6C:F1:4C:00:FE:48:39:F9:81:0C:A8:7C:49:C8:D1:C2:D3
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:e0:6f:c9:31:96:65:41:e4:22:00:7b:27:3b:cd:30:9d:97:
         39:4f:17:41:93:5d:2f:33:61:14:51:33:f4:16:b4:48:84:d0:
         41:64:2b:df:7d:99:36:22:84:ca:0f:8c:59:c7:2c:71:2f:5d:
         13:84:70:a8:43:c8:f1:2a:f5:f3:d5:3a:0d:a2:6b:4c:9c:41:
         79:35:ba:2e:f7:1a:25:f5:cc:a9:50:39:9c:bc:35:b2:82:1a:
         11:15:55:35:c7:b2:77:2c:16:35:88:58:79:4a:78:3f:4a:0e:
         84:6a:8e:18:f1:0c:e6:64:2a:7d:47:78:23:ac:3c:e6:3a:18:
         1e:8f:48:e9:56:d0:5c:dc:b7:aa:0b:59:3f:66:6a:2f:9f:49:
         21:28:b3:7e:37:e7:cf:f3:c3:d2:ee:7b:4c:4c:5e:07:81:0e:
         ce:d1:dc:89:4b:dd:b4:1e:ce:da:16:ed:71:29:a9:88:37:16:
         02:3d:f2:1a:b1:d4:27:54:11:ab:c2:9e:cf:9f:8b:aa:0f:20:
         8f:96:38:97:1e:4f:2e:8d:94:a8:9b:d1:06:79:3b:34:aa:de:
         42:25:1b:7f:93:8e:64:7c:60:3e:fd:a5:2c:8b:e4:cd:68:ba:
         8f:17:bc:2c:c6:a9:21:ce:71:78:48:d7:00:b8:1e:d8:2f:ac:
         d0:cd:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org