Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          Qs4dPQ4zU0kJvBlMvX4PvOM4GHrHOpC71bUP8hI6+XI=
Subject key identifier:   07:2C:09:6A:F9:49:77:99:4B:FB:65:EA:0C:DE:11:10:B5:3D:BD:8A
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       38C31959C2CEE34018620FFBE98E1E1005D317CC
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa
Signing time:             Wed 03 Apr 2024 23:43:45 +0000
ROA not before:           Wed 03 Apr 2024 23:38:45 +0000
ROA not after:            Wed 02 Apr 2025 23:43:45 +0000
asID:                     264491
IP address blocks:        170.247.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c3:19:59:c2:ce:e3:40:18:62:0f:fb:e9:8e:1e:10:05:d3:17:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Apr  3 23:38:45 2024 GMT
            Not After : Apr  2 23:43:45 2025 GMT
        Subject: CN=072C096AF94977994BFB65EA0CDE1110B53DBD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:a6:f2:a7:4d:8a:48:21:88:d4:fd:70:2b:
                    af:c4:d5:0d:85:95:ab:e9:2e:b7:5a:70:09:5c:29:
                    ac:ff:22:96:e4:ee:a3:e0:41:f2:bb:60:9f:1e:68:
                    43:65:bb:fc:48:c1:39:fd:17:02:e1:5c:97:bb:4a:
                    d0:43:f8:ac:7c:b0:ee:39:b1:fe:bc:88:7c:3a:36:
                    af:77:e7:f6:b2:a3:e9:e3:3c:6c:93:07:a2:c1:0a:
                    94:8a:51:2e:88:58:c4:50:c5:fa:d7:48:80:ce:ae:
                    61:10:a5:0d:0a:d5:93:9f:db:ff:70:47:37:fa:9a:
                    26:f6:e3:43:cd:64:76:b2:3d:fa:d1:76:a6:5f:f3:
                    25:71:b4:a6:7b:6b:2a:a9:49:e5:ad:99:da:b6:78:
                    a9:b0:cd:a1:52:26:8e:a1:2f:09:f5:b1:af:33:a5:
                    c9:60:63:93:31:59:a0:e5:c9:0c:75:44:4c:f9:32:
                    81:82:07:71:c7:fd:b9:04:8a:c8:72:b1:88:03:07:
                    af:38:db:04:f1:22:35:79:09:5f:b2:81:cf:a4:3c:
                    6d:ab:28:e4:e1:81:86:71:cf:74:da:74:cd:2b:b3:
                    e3:20:dc:b7:d3:7d:0e:7b:f5:98:65:75:a7:aa:17:
                    6f:5d:5e:98:3d:1b:8f:b5:7d:3b:3d:8d:c8:19:cd:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:09:6A:F9:49:77:99:4B:FB:65:EA:0C:DE:11:10:B5:3D:BD:8A
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:33:7d:95:bd:bd:a3:2f:8c:17:cd:ec:6d:db:a5:6f:85:13:
         e1:11:72:65:4b:bb:60:46:9b:ce:01:ad:7e:e3:db:5f:7c:44:
         e0:04:6a:5a:7e:ea:87:fd:94:e9:18:c8:36:4b:6e:68:76:18:
         99:2c:fe:31:45:e6:6c:6a:91:39:61:58:34:7e:07:dc:91:79:
         8c:88:92:43:6e:9f:b7:1a:10:b7:4a:09:70:d5:c7:17:72:cf:
         81:7c:3a:64:41:3f:91:65:8f:5e:c9:a0:d9:92:2d:12:83:98:
         89:b2:bb:df:0c:d5:4d:5e:10:4f:57:24:eb:d7:c0:9c:c7:2b:
         3e:e2:e2:d6:5a:c8:c7:54:94:c5:4c:12:38:d9:8c:24:53:66:
         7a:5f:84:a1:9e:06:5b:de:0c:d0:01:5b:a6:78:54:1c:3b:b8:
         92:11:0a:0e:13:c2:be:7d:97:04:a3:e0:cc:5d:1e:9f:40:9a:
         b7:86:52:26:60:b9:59:d1:a1:85:7e:7e:fc:89:de:30:82:53:
         9b:af:a0:68:5f:83:77:19:bb:a6:4d:26:48:f2:a9:24:3e:18:
         15:11:ba:fb:31:40:d9:21:eb:23:97:f8:1d:92:fa:f1:81:47:
         08:51:a3:11:2b:6d:a1:19:e4:41:e2:17:e5:76:d5:4c:40:d6:
         15:df:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:36 2024 by rpki-client on console-fra.rpki-client.org