Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa
File:                     3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          /6Glw/ENdhjYlwCFDiwVsnBKwzmD8pRtlx/t74e5L2I=
Subject key identifier:   3A:96:57:BE:BA:BC:C3:D7:EE:51:68:DD:D2:50:AD:96:EC:30:D7:69
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       4ED542DD219136C4E3880D02CECE3C79558CE084
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:18 +0000
ROA not before:           Thu 04 Apr 2024 09:13:18 +0000
ROA not after:            Thu 03 Apr 2025 09:18:18 +0000
asID:                     52613
IP address blocks:        170.231.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d5:42:dd:21:91:36:c4:e3:88:0d:02:ce:ce:3c:79:55:8c:e0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:18 2024 GMT
            Not After : Apr  3 09:18:18 2025 GMT
        Subject: CN=3A9657BEBABCC3D7EE5168DDD250AD96EC30D769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:39:e7:0f:78:0d:9d:77:c5:b9:03:d9:e4:51:
                    28:ab:4d:8f:4f:45:4d:6e:77:da:e6:ae:19:09:09:
                    e8:9e:f1:83:90:c3:92:99:59:81:9f:d1:8b:92:ec:
                    70:f7:b9:d9:02:db:6b:ca:02:a7:3e:e1:3c:1d:7d:
                    20:8b:34:b7:99:e7:f8:7a:4c:17:b1:9c:12:dc:86:
                    ce:bc:d1:fd:d5:f9:86:2a:ef:17:3e:3c:2c:90:05:
                    7b:a6:90:28:c0:4e:cb:92:ae:18:7a:c0:57:e3:71:
                    a4:b0:ba:04:dd:7c:82:f6:93:e3:ce:6e:e6:cc:1e:
                    89:8f:da:9a:44:b4:7f:7f:1d:c4:85:e7:36:f2:c7:
                    77:c6:16:af:8e:2b:32:fb:2a:fc:9a:07:cd:cf:31:
                    0d:ce:94:9f:4e:58:3d:4e:6c:58:c3:7e:b8:9c:74:
                    50:b5:e9:21:cb:45:f0:fa:1e:82:5d:5e:c6:e2:e2:
                    0a:3b:8c:6c:2c:70:95:a7:5d:13:63:a3:af:5c:55:
                    2e:2e:47:ca:0c:83:9c:cc:de:6a:05:31:8d:9c:5e:
                    3d:1b:6e:2c:39:c2:7e:64:00:f2:58:77:f1:cc:39:
                    00:42:e0:17:0f:99:58:b8:28:70:f1:3b:09:67:ec:
                    af:05:8f:77:66:ba:df:d4:37:42:f4:c3:dd:ba:14:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:57:BE:BA:BC:C3:D7:EE:51:68:DD:D2:50:AD:96:EC:30:D7:69
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:df:36:e1:38:10:b1:09:f1:1e:dc:35:c0:d6:b3:44:dd:
         49:e7:33:26:8e:1b:63:37:e9:09:38:b2:cb:2e:20:88:90:d5:
         6e:c6:01:7a:84:3c:9b:1b:24:6b:47:f5:bb:a6:2a:7b:43:c6:
         00:59:ee:40:9c:bd:6b:ed:2c:50:aa:a6:60:d7:6f:b3:8c:f3:
         91:11:1b:22:0a:cf:1e:6d:c6:69:31:20:4f:c9:f1:e2:04:2d:
         84:d3:c6:f9:37:b9:f6:e8:5b:a3:5e:9c:be:5e:a0:b4:51:25:
         21:b3:1d:7b:a3:59:7a:6a:26:3f:2c:1d:50:e7:50:47:58:5c:
         7b:2c:7d:a5:4b:cb:fb:3a:6a:17:6f:13:65:99:a8:52:bf:27:
         da:f8:54:89:f0:2d:2e:a6:23:5b:e4:13:82:8d:8e:48:ee:0a:
         9f:9f:ed:fe:64:12:e9:98:1a:0a:58:7b:2c:42:5a:15:bf:d9:
         70:95:4d:11:7a:94:9b:d2:cc:50:c2:c2:2e:96:88:fc:eb:f3:
         17:30:da:d6:68:96:66:2e:9a:aa:db:9e:a3:7a:45:42:ed:80:
         d9:5d:ea:f1:27:34:ed:4e:7d:5f:ee:da:0b:19:ef:87:a8:ee:
         b0:30:ff:2f:73:69:c1:e1:d0:92:06:33:80:91:1e:6b:86:62:
         99:d5:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:36 2024 by rpki-client on console-fra.rpki-client.org