Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa
File:                     3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa (raw, json)
Hash identifier:          KlNLJlB4CSOf2nChu2+7BMonzUqADiAtMmbBhB7OHD0=
Subject key identifier:   32:9D:42:95:11:9B:E8:4A:89:CC:1C:4D:3E:27:53:CF:15:9F:1F:B5
Certificate issuer:       /CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
Certificate serial:       317008F17FD82F14DAA74F6765146F8CC8188C1B
Authority key identifier: DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa
Signing time:             Fri 26 Apr 2024 19:34:21 +0000
ROA not before:           Fri 26 Apr 2024 19:29:21 +0000
ROA not after:            Fri 25 Apr 2025 19:34:21 +0000
asID:                     265017
IP address blocks:        170.84.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl
                          rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 01:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:08:f1:7f:d8:2f:14:da:a7:4f:67:65:14:6f:8c:c8:18:8c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
        Validity
            Not Before: Apr 26 19:29:21 2024 GMT
            Not After : Apr 25 19:34:21 2025 GMT
        Subject: CN=329D4295119BE84A89CC1C4D3E2753CF159F1FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:85:b5:b7:32:30:e0:fe:20:8f:58:4d:97:b9:
                    19:98:05:cd:cc:c5:0d:3e:21:42:9e:5b:78:14:fa:
                    fb:18:8a:e9:d6:07:c7:ac:48:e1:f1:e2:d9:95:0b:
                    2c:89:dc:79:24:4a:ed:a2:6c:e3:88:ff:ee:5e:3d:
                    19:d9:59:01:2c:8a:33:8b:ff:84:8e:ae:11:8d:ce:
                    d6:3b:58:40:34:65:ee:db:a2:83:d0:b6:cb:47:7c:
                    cb:94:53:50:37:96:27:c2:d3:c7:19:02:5d:4e:a8:
                    07:d5:4a:49:fe:43:0e:00:30:67:6c:9f:53:4e:a4:
                    6e:9c:71:36:b6:3c:cb:71:77:50:93:15:71:1c:e0:
                    b7:a8:48:c7:41:56:a7:fe:03:0b:a3:f5:9c:27:9c:
                    41:8b:5f:89:0d:7f:ff:67:8c:45:85:d9:e2:63:93:
                    d4:66:1e:a6:79:78:31:2b:e8:9f:ac:f7:48:cb:15:
                    8a:78:50:bc:cf:86:15:9a:93:1b:58:bf:cc:31:35:
                    93:5b:30:54:58:ce:cc:2b:fd:44:cc:69:4d:c3:2b:
                    3b:e0:35:ea:e0:78:9d:c5:37:42:a6:1b:1f:56:59:
                    f7:2c:73:d5:b4:48:95:84:a5:b5:e0:a3:df:3d:0a:
                    a1:2d:8b:b8:54:c1:88:c8:1c:6b:8d:d9:21:c9:d7:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9D:42:95:11:9B:E8:4A:89:CC:1C:4D:3E:27:53:CF:15:9F:1F:B5
            X509v3 Authority Key Identifier:
                keyid:DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:7c:5f:bd:70:23:c8:33:56:cf:0c:d1:eb:72:9e:38:25:
         ed:5b:b7:29:60:65:4a:13:2e:75:88:b5:8c:be:05:f5:6b:bc:
         8b:eb:c9:0c:2f:ee:09:03:0f:25:d7:04:1b:86:85:31:d1:43:
         3a:75:bf:31:bf:af:d2:d3:b6:28:2e:3f:40:24:21:b6:de:0c:
         e5:5e:76:d9:0f:73:7c:61:5c:02:05:bc:6e:34:f7:cf:1c:bc:
         7a:4d:fb:81:be:50:5e:23:9c:a5:31:78:74:64:8a:42:83:ad:
         31:22:56:80:d5:5c:10:3f:ea:9e:5d:a1:da:ea:20:0b:57:52:
         5f:a6:35:53:97:cb:ce:d9:0e:32:45:10:bf:cf:d0:e4:6b:f7:
         69:24:4e:e0:25:cd:e8:40:18:22:2e:3c:bf:25:29:29:cb:62:
         ca:0b:79:b1:e4:4f:b2:e3:f6:06:d9:e7:fa:81:d5:68:63:85:
         cd:95:36:22:69:3b:6c:9a:c8:37:4e:52:0d:44:25:fe:c7:c4:
         66:13:a8:78:50:0b:d2:45:cf:29:a6:fd:96:17:80:3d:fa:6b:
         62:05:a4:1e:e9:79:e0:65:d3:bb:9c:9c:34:96:bc:5f:2c:3f:
         02:44:eb:5e:49:0d:bd:d3:64:64:b6:dd:2f:b4:46:35:0d:15:
         ed:9c:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:10:06 2024 by rpki-client on console-ams.rpki-client.org