Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232312e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          t9oLZBm3U5DIoEZpZXsGSzlOlxBrFPX5Mnv/+6x+gfw=
Subject key identifier:   61:EA:75:BD:16:99:C5:79:31:F5:43:73:85:E8:71:7C:BA:6D:CB:DD
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       09FC3F10799108A6E7DC4594348F9766097E8DED
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa
Signing time:             Thu 04 Apr 2024 08:08:36 +0000
ROA not before:           Thu 04 Apr 2024 08:03:36 +0000
ROA not after:            Thu 03 Apr 2025 08:08:36 +0000
asID:                     264137
IP address blocks:        170.0.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:3f:10:79:91:08:a6:e7:dc:45:94:34:8f:97:66:09:7e:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Apr  4 08:03:36 2024 GMT
            Not After : Apr  3 08:08:36 2025 GMT
        Subject: CN=61EA75BD1699C57931F5437385E8717CBA6DCBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:56:29:b8:c4:40:03:fd:a2:c8:03:f5:2a:
                    30:0c:66:0a:a2:c4:a1:37:a0:6a:49:2b:be:a2:47:
                    ce:ce:54:50:d0:de:a1:ad:be:77:ab:fc:98:0d:4a:
                    03:ee:23:eb:a0:a9:a4:b4:0d:6c:1e:23:22:5a:f7:
                    67:d2:cd:56:7a:0e:6f:42:ee:09:9e:c6:50:6f:a0:
                    2e:6d:a9:a7:d4:bb:d8:d1:98:fd:61:34:85:c3:66:
                    14:80:de:a9:f0:7f:83:c7:c0:05:8c:79:1f:c5:18:
                    64:c4:2f:d3:0b:45:23:45:db:b1:89:52:39:01:ab:
                    a4:a1:b7:bd:eb:92:6a:d0:f4:c8:8b:6c:1c:c9:83:
                    24:e3:40:33:d5:fd:07:9f:7f:ea:e5:23:05:31:31:
                    1a:a8:d5:b5:8a:53:7c:33:1c:7b:1c:e8:80:d6:8d:
                    08:10:9d:73:bc:4f:66:8a:70:83:23:3c:e5:fc:2e:
                    63:86:86:7b:ea:7d:9b:3a:9d:e9:4d:ac:ea:69:1c:
                    29:94:25:b5:4f:26:16:39:94:db:ed:73:56:8b:13:
                    d0:5b:d8:fe:56:55:ad:fc:ae:d7:4b:a9:a3:16:d1:
                    84:64:aa:65:99:df:7d:bd:2c:42:51:89:32:82:a1:
                    f1:5c:b0:ac:94:34:03:67:40:52:bc:91:f1:13:ad:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:75:BD:16:99:C5:79:31:F5:43:73:85:E8:71:7C:BA:6D:CB:DD
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:79:24:cf:4a:a3:4f:bd:1e:af:62:a4:da:e8:86:29:3e:53:
         ae:07:e7:ff:b4:d9:59:2b:5a:c4:44:00:f1:f5:6b:5e:44:10:
         5c:f5:05:32:99:aa:b7:7c:98:75:5e:1e:25:37:23:bf:9c:d7:
         00:5b:9a:71:bd:6d:1b:bd:bb:81:af:c0:95:0c:2b:4c:98:b1:
         de:9f:b3:1a:f9:a8:6b:60:62:74:6e:df:4b:e0:95:58:09:7d:
         a1:ea:aa:23:14:ee:e9:5d:ba:c6:6c:fd:04:4c:0a:5d:fe:1a:
         12:32:52:01:09:da:6f:6f:06:93:71:77:9e:db:1f:f6:20:e7:
         c6:7d:7f:80:6f:7c:11:59:83:55:e0:a4:1a:4c:8e:67:65:81:
         f3:2a:e9:e9:e5:d1:19:24:04:ab:c0:ad:94:7e:3f:a6:93:3a:
         54:c8:d1:f7:47:2d:27:3f:ab:5d:22:3d:da:cf:8c:e3:32:e4:
         b5:cf:6b:c0:fa:30:38:a5:ef:73:25:25:b3:f5:c8:95:0c:99:
         56:53:45:22:68:23:8d:a3:61:31:4c:11:51:3a:08:fa:49:f1:
         e8:a4:7c:b1:71:06:77:6e:1d:a5:41:a0:b0:76:46:e0:2e:dc:
         dd:16:f8:e0:71:4b:a0:8e:50:1e:f4:d4:71:dd:43:a9:d2:eb:
         8b:ca:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:15 2024 by rpki-client on console-ams.rpki-client.org