Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa
File:                     3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          esXB7aI3JDoKkXNxjFU4FyJPd0Adn463xGYVYXjwdzY=
Subject key identifier:   97:2D:9B:DD:5E:05:9D:BA:46:56:A6:9F:71:A7:3C:A2:B5:B3:1C:40
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       63337E5892551A70F8BA52DC68834524432DE8B8
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 17 Apr 2024 23:11:45 +0000
ROA not before:           Wed 17 Apr 2024 23:06:45 +0000
ROA not after:            Wed 16 Apr 2025 23:11:45 +0000
asID:                     266312
IP address blocks:        170.238.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 05:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:33:7e:58:92:55:1a:70:f8:ba:52:dc:68:83:45:24:43:2d:e8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Apr 17 23:06:45 2024 GMT
            Not After : Apr 16 23:11:45 2025 GMT
        Subject: CN=972D9BDD5E059DBA4656A69F71A73CA2B5B31C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:b7:1c:ac:bb:56:96:ee:30:0b:79:4e:f6:
                    73:31:c5:2b:33:80:66:bf:11:39:5f:9e:6f:19:b9:
                    8b:cd:92:d3:fd:b6:3e:33:8c:df:7a:bd:3e:17:b9:
                    5a:dc:43:48:01:0e:d3:42:bb:92:d5:6d:e3:5f:88:
                    c7:ca:85:8e:8f:c2:bc:65:d3:30:e1:6b:64:90:c1:
                    58:3b:3d:d2:b1:37:98:14:d0:86:a9:96:0c:1f:94:
                    e0:81:11:a3:60:04:22:80:06:21:5c:b7:55:17:87:
                    17:f9:e4:79:05:45:8a:65:36:c9:b7:be:c3:4c:d0:
                    41:96:de:96:7e:66:44:18:a0:33:37:a4:7e:12:e8:
                    af:fb:54:e4:16:71:6c:13:28:a2:be:ee:49:4c:c3:
                    8f:f6:8a:39:67:e1:ab:4e:8f:bf:b6:94:bc:5b:f7:
                    6e:00:cd:3d:8f:d1:19:bc:27:18:7c:86:d7:38:57:
                    4f:30:83:ac:7f:d4:51:96:9a:da:13:18:14:aa:e5:
                    80:00:e5:d3:04:22:b4:b4:2b:15:ff:ee:37:ec:ed:
                    cb:be:0b:f6:a0:6a:36:28:29:f7:90:c8:99:65:30:
                    6c:cd:12:2b:4e:b4:ab:ed:65:f3:ca:49:d3:49:66:
                    56:0f:c4:de:50:fd:d3:19:08:cd:68:3c:60:4e:d6:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:9B:DD:5E:05:9D:BA:46:56:A6:9F:71:A7:3C:A2:B5:B3:1C:40
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:60:a4:d6:74:e8:6e:94:61:ce:e3:67:10:1c:22:53:db:
         4a:fd:44:e1:95:f4:7d:ae:19:43:10:91:8d:bc:d3:07:ce:2e:
         73:5d:31:ca:b0:24:a1:80:3d:fc:03:e2:4c:66:36:c7:e7:ac:
         42:b0:5a:e3:08:d6:16:3a:5a:99:da:57:64:85:67:d8:cb:1c:
         d5:47:a9:31:81:b7:50:af:8a:e4:e3:26:73:55:a4:31:e8:99:
         f0:f0:dd:aa:67:e5:75:9d:9f:5f:80:82:e3:09:23:cb:6d:e3:
         1b:4a:9a:3b:6b:25:06:c9:1c:b1:27:b8:7a:6f:99:ca:b4:ea:
         b4:d8:38:06:62:87:5b:e6:56:bb:5e:03:b7:a0:2a:3f:3f:85:
         a3:db:f5:28:5a:6b:15:89:03:66:06:f0:a7:61:f5:1d:31:98:
         4b:52:c0:c4:67:33:e0:c3:ed:99:ac:02:c7:1a:0a:d0:4a:0d:
         27:6c:47:da:9e:c1:ea:a3:96:23:88:d4:18:c0:94:50:0b:f3:
         9d:b4:97:08:2e:1a:90:bb:77:d6:0a:70:01:66:b2:67:21:af:
         3b:6f:03:f8:e5:51:2c:c0:25:c2:58:4a:9e:11:f6:8a:ef:9f:
         54:8d:9a:d3:98:b6:52:f9:ba:5d:58:ae:e8:4e:3a:f2:7f:2f:
         20:38:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:06 2024 by rpki-client on console-ams.rpki-client.org