Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa
File:                     3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa (raw, json)
Hash identifier:          jdwkcQQ5sTr+LMLAj0XaP71BITw0sMZxKUzWNihjjEc=
Subject key identifier:   69:A8:A1:0B:99:3A:2C:D7:35:0B:7E:1F:C6:26:01:68:58:1E:4F:07
Certificate issuer:       /CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
Certificate serial:       0EA3D78F87274FB5E960190C089641F735F79751
Authority key identifier: DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa
Signing time:             Tue 12 Nov 2024 14:14:39 +0000
ROA not before:           Tue 12 Nov 2024 14:09:39 +0000
ROA not after:            Tue 11 Nov 2025 14:14:39 +0000
asID:                     265017
IP address blocks:        170.84.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.crl
                          rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a3:d7:8f:87:27:4f:b5:e9:60:19:0c:08:96:41:f7:35:f7:97:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
        Validity
            Not Before: Nov 12 14:09:39 2024 GMT
            Not After : Nov 11 14:14:39 2025 GMT
        Subject: CN=69A8A10B993A2CD7350B7E1FC6260168581E4F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:c8:e9:52:66:a9:a4:01:6b:9e:2f:1b:6a:
                    dd:ff:2f:ca:d8:97:b8:1f:48:a7:27:fa:1d:92:76:
                    98:02:7b:14:2c:6c:87:61:47:6e:03:8d:b8:5a:ec:
                    62:a3:c5:cf:a7:81:1c:fb:64:05:1e:57:b5:93:e9:
                    d8:d9:5a:b6:84:c1:d9:bf:c3:e0:43:a1:8b:6d:c8:
                    04:9f:8f:bb:fa:ed:3e:de:b5:cb:a9:c9:22:25:1f:
                    9d:a6:ce:8a:3b:1f:e2:73:de:25:3d:9b:e8:bd:2c:
                    30:c9:44:4b:3e:d4:51:f9:dc:19:af:f1:aa:a8:f0:
                    47:0f:6b:03:e8:34:bb:09:63:52:9a:d9:f1:84:25:
                    7f:80:81:d9:48:9d:4d:1c:64:47:58:af:bd:e7:a5:
                    79:ca:cd:4b:96:a6:fb:fd:48:2d:e8:95:bf:17:94:
                    64:a8:d5:1e:ee:67:74:f2:65:8a:4e:2a:f3:af:43:
                    50:dc:93:0e:be:3a:b8:ff:84:5a:1b:2b:d6:4e:0d:
                    eb:18:0d:b8:e3:b8:91:93:ed:0e:01:5b:ea:bd:68:
                    c6:5e:d2:83:58:30:aa:17:bc:fc:a1:15:3f:a0:2d:
                    fe:34:61:35:d7:5a:a0:7f:05:08:2d:d4:8e:97:20:
                    85:27:9a:7c:97:d6:d2:c8:7c:de:66:57:ca:13:b4:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:A1:0B:99:3A:2C:D7:35:0B:7E:1F:C6:26:01:68:58:1E:4F:07
            X509v3 Authority Key Identifier:
                keyid:DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134322e302f32332d3233203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:0b:c3:a2:59:d1:89:26:a1:5f:35:d1:3e:3f:5f:fb:89:a8:
         12:d3:85:02:c0:6c:27:e0:97:40:f5:38:2f:e4:73:15:9b:2e:
         e5:47:dd:9f:ec:f7:b6:62:77:e8:c1:4c:8b:62:1a:ff:7a:25:
         98:31:4f:4d:75:e8:be:58:c8:4a:50:e2:8e:ea:33:4a:8e:b1:
         38:a3:c2:a9:5c:de:23:04:8c:29:fe:e8:a2:9c:fc:d6:56:29:
         8c:0f:17:8a:43:fa:46:3f:a7:a2:f5:67:ce:a5:62:d9:da:72:
         2d:49:9f:2c:1b:bc:7d:bf:ac:33:5d:f6:1c:ff:69:82:5f:14:
         b9:96:df:a3:3d:a6:7c:54:48:9e:16:58:dd:ad:fb:5d:d1:3b:
         21:af:ef:b8:db:48:11:4a:6b:39:7a:80:28:37:93:1e:59:69:
         b0:25:38:ad:92:9e:f2:1b:c5:79:41:d1:c1:69:fd:68:43:7a:
         79:df:ec:71:51:f2:6a:24:ab:c8:7b:2d:0e:ed:cb:11:d3:a1:
         0d:61:ab:3e:45:83:35:8f:9e:dc:c0:62:15:f9:21:7a:cc:c7:
         b8:07:a9:c5:db:3b:9e:01:4e:34:75:16:72:fc:ef:73:f9:ac:
         73:f8:ac:12:5f:bd:a8:c5:05:6a:0d:c1:cd:85:a6:46:a8:8b:
         da:81:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org