Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3137302e3234342e3130342e302f32322d3234203d3e20323632393532.roa
File:                     3137302e3234342e3130342e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          ohjzZgb1YGE5TqELXxPiDIC3GXjVpHeUD1iOGfAcOYw=
Subject key identifier:   DE:00:1C:C6:32:98:16:40:0B:7D:BC:A2:77:33:77:12:0D:79:DC:DD
Certificate issuer:       /CN=64E4B884F01FC9DC0000E111AE283F356C137547
Certificate serial:       447FB72C266EECFB22BF997455B6521039B01056
Authority key identifier: 64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3137302e3234342e3130342e302f32322d3234203d3e20323632393532.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     262952
IP address blocks:        170.244.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:b7:2c:26:6e:ec:fb:22:bf:99:74:55:b6:52:10:39:b0:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E4B884F01FC9DC0000E111AE283F356C137547
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=DE001CC6329816400B7DBCA2773377120D79DCDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:e7:f9:3e:af:f0:53:09:00:47:50:51:1c:
                    b7:cd:1d:08:ca:f9:bf:0a:d7:dc:de:46:5b:43:51:
                    71:e6:82:b7:94:65:a1:c6:46:82:79:ec:3c:25:6e:
                    36:c5:ba:0c:82:65:30:51:b9:1a:ec:c0:f0:ff:41:
                    dc:a0:2c:55:4f:5f:b5:7f:b6:46:65:af:88:ed:bc:
                    9c:11:eb:da:91:58:b6:77:3a:5b:f8:1a:6e:57:7a:
                    45:5e:9d:29:71:e5:76:43:58:24:22:70:b2:e6:cc:
                    1b:93:9a:c2:99:97:43:2b:93:a5:2f:ce:4d:4d:26:
                    31:74:34:5f:26:a5:a1:e1:47:e6:27:3e:f7:d9:40:
                    8e:d4:3c:20:37:8f:87:7a:04:17:b4:5b:aa:1a:dc:
                    91:4c:b7:99:3f:59:c0:6e:24:3c:99:e4:fa:80:5f:
                    8f:06:eb:7d:37:9a:50:08:2c:a2:4d:31:a4:72:fb:
                    5f:2b:82:51:87:c5:50:f8:c5:5e:60:1d:ce:2c:e2:
                    01:fe:6f:d6:54:8a:ea:0d:f9:82:fa:f1:98:97:2a:
                    9e:12:b1:8b:d2:08:0b:4e:a9:0f:03:d3:e3:ef:ef:
                    3b:f8:d5:27:fc:3f:5c:5b:78:d7:79:12:d6:e8:e3:
                    9f:3a:a4:99:57:75:b1:2c:f9:8e:2d:94:50:0c:dc:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:00:1C:C6:32:98:16:40:0B:7D:BC:A2:77:33:77:12:0D:79:DC:DD
            X509v3 Authority Key Identifier:
                keyid:64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3137302e3234342e3130342e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:2e:76:92:02:5b:bb:9d:ef:55:dd:5f:d2:a5:a7:3e:73:63:
         e1:cc:af:54:3f:1e:48:a3:bf:08:b0:0e:4f:b3:13:75:40:7c:
         14:81:c0:81:3a:b4:37:75:7c:09:61:96:f3:46:04:e3:e8:c2:
         b7:6c:ac:cf:0b:5d:22:fd:d7:fe:d2:c1:93:a4:14:08:4f:a0:
         06:a4:e0:0e:c8:c6:02:8d:ab:38:18:b2:45:e4:f5:c7:df:2f:
         c9:56:db:29:4d:b9:d3:96:27:19:f2:e2:ec:19:c5:ea:24:fa:
         5d:f1:58:a4:19:ab:f4:57:10:48:5b:77:19:66:65:2c:94:a3:
         a8:59:19:8d:ec:e5:7a:ac:20:5f:86:b6:61:8f:7d:02:38:fe:
         1f:57:52:52:6c:d1:2d:1e:0b:bb:34:79:8f:bb:95:71:69:b4:
         79:ad:45:f2:e8:4a:0e:a5:a4:86:1c:6b:b0:ac:0c:ea:0a:0a:
         83:cd:dd:99:e1:b7:38:4b:bb:e1:1d:0d:8c:4f:39:13:2c:9b:
         ea:20:1b:6f:3f:f7:87:7b:90:2c:24:29:6f:fc:f4:a1:5b:4a:
         15:09:31:b6:c4:3d:eb:37:08:8a:8c:ca:2f:f3:a9:b7:2f:10:
         80:e2:b7:77:ce:8d:cd:79:0e:bf:5a:bb:67:50:27:7e:d7:dd:
         0e:74:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:56 2024 by rpki-client on console-ams.rpki-client.org