Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa
File:                     3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          dkRM611k+faztNis4vGG0xItRz7zbmgKbKxaXNSbfO8=
Subject key identifier:   4C:A4:52:C1:D7:73:E1:49:5C:46:C0:BC:EC:4F:E8:7F:31:FE:27:D8
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       4923EE87B9F39598BF54868B143B390735CEE5D5
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:18 +0000
ROA not before:           Thu 04 Apr 2024 09:13:18 +0000
ROA not after:            Thu 03 Apr 2025 09:18:18 +0000
asID:                     52613
IP address blocks:        170.231.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:23:ee:87:b9:f3:95:98:bf:54:86:8b:14:3b:39:07:35:ce:e5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:18 2024 GMT
            Not After : Apr  3 09:18:18 2025 GMT
        Subject: CN=4CA452C1D773E1495C46C0BCEC4FE87F31FE27D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:79:ef:30:97:fc:05:91:59:77:7f:21:89:
                    06:b4:23:d1:52:eb:db:cc:3e:e5:e2:bd:5e:e6:29:
                    dc:69:00:67:a7:a0:5f:26:fa:27:2b:3a:b0:9a:1d:
                    9e:2a:ca:6a:e4:6b:24:dd:bb:58:fe:34:55:41:a8:
                    6f:ac:0f:84:0d:89:b3:eb:34:b4:e9:41:9d:72:22:
                    bd:0c:95:86:41:63:82:2b:9c:d2:46:52:e0:a2:b7:
                    2e:09:09:aa:2c:1a:5c:d7:3a:9e:52:10:52:8a:7f:
                    7a:e7:d9:83:99:62:3d:70:50:ea:37:6d:7e:01:88:
                    c7:cf:38:a1:d3:fe:27:f3:4a:7d:2e:81:ae:5d:60:
                    32:1c:62:1e:2d:68:b8:8a:99:00:d2:cb:c7:45:e1:
                    c9:ce:30:10:6a:02:dd:63:4f:90:19:f4:21:3a:91:
                    a0:29:14:c2:c9:9d:33:47:a7:d1:aa:59:97:08:8e:
                    9a:79:e3:a5:1b:f2:47:b9:ab:b9:bf:0e:54:95:d8:
                    5c:ad:74:ee:ae:46:2f:be:3d:c1:7d:c0:a5:1a:76:
                    e8:a8:fd:39:40:50:49:b4:2b:ba:6d:8b:e0:47:f2:
                    a4:b1:03:8d:e8:30:ee:28:f5:94:b4:ef:ad:0b:da:
                    9c:87:4c:eb:4d:d5:35:3a:fa:cc:1f:9f:77:5c:4e:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A4:52:C1:D7:73:E1:49:5C:46:C0:BC:EC:4F:E8:7F:31:FE:27:D8
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:f1:bf:15:57:68:04:ac:36:a1:44:35:7f:20:71:44:fd:
         ee:e6:4f:95:50:a3:fb:60:2f:50:d1:e1:6f:26:05:6b:d5:5a:
         1c:c9:5c:6c:0e:d0:25:7b:47:0e:b0:16:3c:c6:72:a3:40:5c:
         87:99:a2:d7:9b:9c:28:d3:f0:92:31:3a:e7:e1:b7:8b:eb:d5:
         7d:75:9a:66:b3:ee:7e:14:51:1a:8c:3a:02:c3:33:9a:bd:06:
         56:6b:27:b7:2c:c9:77:af:89:40:aa:e3:15:c7:81:ae:92:9f:
         44:03:cf:03:bf:b0:fa:59:28:03:c1:25:75:e0:6e:fc:82:bb:
         9b:80:14:0f:86:13:90:47:8b:79:4c:cf:74:e0:e0:6a:26:97:
         88:51:f7:e9:3b:14:bd:7d:a4:af:1d:b3:2c:19:5e:55:a6:de:
         76:19:4e:bd:8d:76:4b:ff:16:15:76:16:d8:4b:e9:79:c7:4a:
         11:4f:46:75:42:db:45:bc:c0:01:35:80:18:71:e2:64:ec:39:
         bb:50:52:2c:0c:7b:6a:2f:71:25:c7:d9:f4:41:cb:24:2b:fd:
         37:8e:f8:83:ab:14:ae:ce:da:56:c4:a4:24:3a:f8:94:5c:b5:
         a0:2b:9b:1a:9c:85:33:0c:f1:18:b3:11:18:9c:89:0f:32:e7:
         57:c3:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:36 2024 by rpki-client on console-fra.rpki-client.org