Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa
File:                     3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa (raw, json)
Hash identifier:          X4lylvIK0Ss6TuqhG0pXrpWeeJKgTzk0HysorB0ZvRM=
Subject key identifier:   8A:19:95:57:A2:5B:DB:4E:E9:C0:FB:5D:26:44:67:7C:49:42:63:3C
Certificate issuer:       /CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
Certificate serial:       714018078334A43D4A6EBC787FB61D0BAC67860D
Authority key identifier: DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa
Signing time:             Fri 26 Apr 2024 19:34:24 +0000
ROA not before:           Fri 26 Apr 2024 19:29:24 +0000
ROA not after:            Fri 25 Apr 2025 19:34:24 +0000
asID:                     265017
IP address blocks:        170.84.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl
                          rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 06:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:18:07:83:34:a4:3d:4a:6e:bc:78:7f:b6:1d:0b:ac:67:86:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
        Validity
            Not Before: Apr 26 19:29:24 2024 GMT
            Not After : Apr 25 19:34:24 2025 GMT
        Subject: CN=8A199557A25BDB4EE9C0FB5D2644677C4942633C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:4b:54:57:64:47:6e:fa:fe:b3:b6:50:cb:
                    2b:d5:07:1d:21:aa:fc:08:07:7b:80:0e:82:b3:25:
                    62:15:30:49:08:9e:b4:84:93:e9:8c:b5:7e:e8:84:
                    f0:6a:36:e7:c7:6e:da:57:9e:92:10:79:14:70:96:
                    d8:b8:99:d8:c5:e4:aa:3d:d1:a3:5d:85:21:46:a5:
                    2a:79:b6:b6:13:f2:7a:f2:6d:4f:e5:dc:f9:d8:20:
                    da:4d:ee:2e:9a:52:db:cf:37:1a:0a:67:ec:4f:92:
                    d6:e8:dd:3b:ef:23:8f:da:11:65:3b:97:b7:c8:76:
                    4a:50:53:f5:d1:30:81:32:40:ce:70:e0:5c:7b:50:
                    4a:01:5b:6f:23:7c:dc:fd:1f:53:ad:dc:20:d3:80:
                    5f:46:f9:f4:a4:32:8b:ae:c7:b3:22:f1:72:a8:40:
                    4c:77:ea:fe:a3:3f:36:7e:dd:18:97:cd:1d:44:bb:
                    e2:83:74:99:54:30:d9:63:2e:3a:6c:1f:6c:6f:83:
                    a1:42:db:ca:2b:24:3e:42:bd:6f:05:ff:9e:9e:3a:
                    fb:9a:39:53:8d:30:f7:9b:c5:b2:1f:f0:21:5a:22:
                    d1:25:ea:58:03:98:34:d7:1b:2c:b6:aa:4e:99:bd:
                    78:8c:86:0e:fd:fb:cf:a8:86:6d:65:4a:23:81:c2:
                    d2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:19:95:57:A2:5B:DB:4E:E9:C0:FB:5D:26:44:67:7C:49:42:63:3C
            X509v3 Authority Key Identifier:
                keyid:DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:c1:0a:4a:f0:b0:49:59:f8:35:85:5b:89:ac:70:e1:e1:
         eb:d0:90:f7:9f:e0:33:35:6f:0a:39:74:ac:87:af:65:5e:f4:
         6b:ad:3c:62:02:03:4c:db:49:d6:34:26:e2:d9:c5:a4:28:3d:
         10:c9:87:1a:fc:9c:95:0d:e5:ab:76:9f:33:7f:98:62:46:a5:
         02:b7:02:8a:11:16:bf:e1:53:01:76:6d:58:99:f3:59:20:1d:
         52:3b:36:3c:d5:36:fd:64:9a:d2:9b:b4:25:6f:4a:fb:3c:f5:
         8f:b7:9d:bc:82:64:6a:51:2c:06:42:31:3b:75:77:b0:46:26:
         c3:f8:2c:d9:3f:84:78:5d:28:08:66:52:d3:d2:de:85:18:47:
         be:8e:22:af:77:0c:6f:32:ec:fc:92:44:65:74:ef:4b:0b:36:
         a4:fa:cf:41:b8:83:c0:15:1a:56:02:d9:85:66:3d:43:e9:92:
         65:bb:b8:d0:a7:aa:b7:af:b2:31:56:34:00:ee:71:a5:dd:00:
         a1:1f:92:4f:8f:e3:31:09:57:3c:ff:34:1f:08:dc:73:12:ba:
         57:23:79:f5:7a:54:8a:5f:f2:78:38:d2:9f:2f:93:43:a8:86:
         a1:df:64:e5:6b:46:f7:c3:17:41:33:83:b4:b7:f3:fa:d9:b9:
         60:b5:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:40:07 2024 by rpki-client on console-fra.rpki-client.org