Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa
File:                     3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (raw, json)
Hash identifier:          UiGspnmzc4IpJQgEarPSgb2toNSnksgjBh+JN4EgY3c=
Subject key identifier:   BC:26:CE:2B:8C:4A:C5:6D:AA:02:8C:F9:58:D5:8D:12:13:CC:37:98
Certificate issuer:       /CN=43B19C9E57D3EDADD315DF0E16760E303285E640
Certificate serial:       3C73287860AC7848CAADAECB5B7381CC396FBFB1
Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa
Signing time:             Thu 04 Apr 2024 20:46:34 +0000
ROA not before:           Thu 04 Apr 2024 20:41:34 +0000
ROA not after:            Thu 03 Apr 2025 20:46:34 +0000
asID:                     265113
IP address blocks:        170.254.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl
                          rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:28:78:60:ac:78:48:ca:ad:ae:cb:5b:73:81:cc:39:6f:bf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640
        Validity
            Not Before: Apr  4 20:41:34 2024 GMT
            Not After : Apr  3 20:46:34 2025 GMT
        Subject: CN=BC26CE2B8C4AC56DAA028CF958D58D1213CC3798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:43:b7:41:22:a8:7e:65:0f:22:4a:6d:38:
                    aa:85:a1:86:31:67:50:06:ae:fc:15:3f:5b:4f:79:
                    aa:0e:23:67:72:4f:db:37:51:2d:d3:a6:75:73:a2:
                    80:0a:34:7a:fa:1e:05:62:96:5a:18:3c:44:ea:7c:
                    bd:c7:f7:55:56:4a:61:04:66:85:ee:ae:af:bf:60:
                    64:0a:7e:ab:60:75:78:31:48:c1:55:e6:f7:68:1b:
                    a7:b8:97:db:e0:e6:8a:14:fa:1d:60:c1:8d:b3:2e:
                    de:58:9f:c6:64:10:de:fc:4b:b0:49:dd:d2:b3:66:
                    4e:8e:70:2b:90:93:61:e6:71:bc:2e:2c:d9:c4:11:
                    f2:7d:de:b5:31:17:a7:fe:b6:0c:e7:d1:1a:80:5f:
                    49:99:63:6c:3a:f8:a8:7e:77:25:d4:6a:41:ae:95:
                    7b:9b:c8:5b:7f:b8:0c:86:27:58:d3:ee:3b:c3:64:
                    35:0d:9c:69:90:8c:f1:e1:80:83:1d:15:d1:89:16:
                    51:68:c7:8a:b7:fa:1a:b8:16:47:fe:fe:58:ff:2e:
                    8c:31:d7:3c:28:d1:a4:7e:04:65:40:ac:1a:bc:9c:
                    fc:ef:0b:1c:f2:a0:cc:7a:86:0c:9f:c6:b2:76:bf:
                    08:ed:ec:7f:0c:d5:4b:38:a6:63:9e:76:22:a4:d6:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:26:CE:2B:8C:4A:C5:6D:AA:02:8C:F9:58:D5:8D:12:13:CC:37:98
            X509v3 Authority Key Identifier:
                keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:58:3b:c3:f9:0c:31:b1:73:82:62:76:34:e7:00:06:f4:84:
         88:b4:ca:49:7a:d9:67:2f:6e:91:ce:86:b8:ae:9e:3e:87:14:
         b0:34:f8:51:c0:04:41:d0:9f:2c:37:ea:6a:0b:ae:ee:c2:9a:
         ca:fd:b2:8b:22:b7:b6:24:07:47:98:4c:aa:c3:6e:1c:f8:3f:
         00:ec:f0:97:4f:cb:71:25:3e:a0:ab:33:5d:e4:2a:c7:cb:5c:
         d3:0f:7d:0e:d5:c2:94:a9:58:12:9d:cf:d7:e0:8a:cd:6a:70:
         b4:ab:b4:2c:d0:4d:b2:49:53:1e:d1:ef:c6:6e:0b:2c:e6:28:
         9b:3e:8a:8c:8a:24:ad:85:2c:84:25:1b:1f:5b:f2:ad:09:d2:
         32:3d:3a:81:ae:b1:8f:c1:67:2d:8c:d8:74:20:d6:ee:17:eb:
         58:37:f3:07:26:6a:d9:ac:7d:74:6c:89:4e:0d:ea:64:7b:2c:
         ef:b8:92:9f:3d:d9:86:e0:fb:2d:4f:21:d2:b9:53:79:26:d0:
         56:00:80:cc:2f:83:b0:5c:86:36:c4:a6:5b:8d:ee:d6:32:2b:
         13:1a:d1:85:ec:f5:36:23:bb:40:03:b7:d2:07:5e:12:41:d2:
         7c:8c:6a:ad:b2:a3:59:e5:b5:94:be:ed:27:ee:d5:34:8d:53:
         f1:08:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:35 2024 by rpki-client on console-fra.rpki-client.org