Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e38312e38342e302f32322d3332203d3e203631353838.roa
File:                     3137302e38312e38342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          FZ1AgdFC1ye5HbwrTnu6en/JyN3Yg86l8K0upASEWMM=
Subject key identifier:   39:E6:AF:34:6E:99:F8:C1:06:C5:13:9C:58:3E:31:49:B1:B0:AD:E7
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       30E6ACACB25EEAF2B43B2C51AFFD3D8B4B56D2E1
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e38312e38342e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 04 Apr 2024 09:00:26 +0000
ROA not before:           Thu 04 Apr 2024 08:55:26 +0000
ROA not after:            Thu 03 Apr 2025 09:00:26 +0000
asID:                     61588
IP address blocks:        170.81.84.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e6:ac:ac:b2:5e:ea:f2:b4:3b:2c:51:af:fd:3d:8b:4b:56:d2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Apr  4 08:55:26 2024 GMT
            Not After : Apr  3 09:00:26 2025 GMT
        Subject: CN=39E6AF346E99F8C106C5139C583E3149B1B0ADE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:fa:10:57:94:58:24:1e:65:3d:46:70:0d:
                    44:f1:0b:4e:bf:96:b5:be:84:83:43:03:28:c7:52:
                    fb:21:8d:16:8a:94:f6:ee:01:8e:88:bd:8e:0e:03:
                    3e:af:c9:23:ed:73:90:3c:27:05:8c:96:7d:a9:4c:
                    61:db:0d:2f:92:34:d7:02:90:02:53:e8:f1:75:1f:
                    6d:b7:b8:6d:6c:6c:ea:42:75:30:c8:da:97:92:17:
                    e2:58:4b:39:dd:e6:19:be:ba:52:f1:6d:52:2d:ef:
                    fa:ff:16:19:62:db:f3:2c:1b:f5:e5:08:b3:e6:3b:
                    0c:03:63:fb:f2:b4:bd:d1:f5:0a:9c:66:17:da:c7:
                    e7:ae:62:3b:51:45:ad:42:5c:85:b1:47:30:a5:4b:
                    bf:9b:ec:9d:9f:66:33:ec:51:85:69:a8:99:0c:f3:
                    b6:d1:5f:ab:27:d0:39:90:80:27:a7:20:04:f4:75:
                    24:5a:ff:c3:50:a7:c7:a9:55:b1:c7:67:d3:c1:ee:
                    cd:f9:e2:6c:6a:72:25:fb:d3:d6:00:19:66:02:7e:
                    0e:58:31:12:27:0c:d5:8f:98:30:9d:e2:76:a9:8f:
                    d4:0b:b5:87:17:9e:81:f7:95:d7:f5:bc:2a:84:1e:
                    79:5d:7e:5d:c1:c0:be:da:a1:55:22:4d:e4:71:99:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E6:AF:34:6E:99:F8:C1:06:C5:13:9C:58:3E:31:49:B1:B0:AD:E7
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e38312e38342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:7e:37:47:80:5f:2a:70:b5:73:fe:ea:77:1a:4a:5f:38:d5:
         71:c6:76:5e:d2:a5:3b:9e:6d:f9:47:17:e2:b8:0c:b9:10:64:
         69:52:28:05:38:27:d8:8c:25:e9:9e:67:9a:c6:99:c7:7e:5b:
         22:70:56:ee:e8:6b:bb:62:21:bd:8d:82:27:56:7c:62:cf:40:
         a2:b4:67:73:98:f6:6a:6b:72:dc:3f:d3:a4:43:19:d6:a5:1d:
         64:4b:7f:fd:a2:5f:47:35:1f:d2:3c:b7:e0:67:09:44:79:41:
         34:35:85:06:8c:66:51:ce:fb:63:d0:05:38:64:8e:89:58:06:
         64:d6:6b:37:6f:2f:20:4f:c6:af:da:7a:25:0f:8d:da:a2:a1:
         ac:3d:f5:51:70:60:82:62:1a:56:93:5c:e0:20:72:c7:bc:77:
         29:51:7e:a5:0c:d5:ba:06:82:2c:e1:6f:ad:eb:43:a7:a8:fe:
         09:df:f0:81:ec:4e:f9:6b:3e:78:4d:14:e1:cc:ef:2a:6c:b6:
         77:02:31:ba:6b:59:4c:bf:72:db:71:d4:0d:a9:f7:ef:ed:da:
         28:63:64:6c:70:87:d5:5d:94:5e:01:2f:c2:a4:b0:3c:08:01:
         04:eb:ec:b4:85:74:9c:07:62:80:83:49:60:25:0a:31:3c:02:
         52:74:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org