Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32332d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32332d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          etr37I9f/UlNR5Qlw14fJezuO6Qg4qji74uXat7KlwI=
Subject key identifier:   0C:9A:E0:35:87:E9:5D:B2:25:EA:02:F9:EA:B9:5C:60:95:72:CA:5E
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       6F0977E4884DA06D7437D9819DFE112E69C84D6D
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32332d3332203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:54:00 +0000
ROA not before:           Tue 21 May 2024 16:49:00 +0000
ROA not after:            Tue 20 May 2025 16:54:00 +0000
asID:                     271293
IP address blocks:        170.233.240.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:09:77:e4:88:4d:a0:6d:74:37:d9:81:9d:fe:11:2e:69:c8:4d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:49:00 2024 GMT
            Not After : May 20 16:54:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:07:5f:9e:25:26:0b:5b:9d:01:a2:17:64:
                    31:73:9f:05:d7:3e:05:20:bf:fc:bf:f0:7d:39:aa:
                    f4:12:fb:a5:30:5b:c7:3f:77:8f:06:7e:4e:ef:d1:
                    62:30:48:7c:87:a8:0e:2d:4e:08:fc:3d:d8:62:2f:
                    8f:b0:78:2c:12:7c:c9:4a:97:7a:b4:90:0a:94:6b:
                    dc:6e:58:8a:c2:30:01:58:2e:92:ff:f2:1c:eb:7d:
                    fe:b3:28:6a:c8:82:94:53:80:9c:c6:ec:30:ae:27:
                    11:e3:fa:43:5f:56:84:c6:b9:67:9d:dd:e1:02:7e:
                    b1:ac:30:a1:b7:9e:76:2d:68:57:f8:a7:94:22:fa:
                    2b:fb:f9:6d:40:a0:c1:cb:5f:c4:06:16:a5:6b:52:
                    94:a6:7f:c6:9b:51:75:75:9c:c7:e1:a0:8f:6d:31:
                    b0:ca:a6:b6:2e:a2:f0:69:fb:13:9f:2d:f9:bc:51:
                    4b:aa:4c:f6:3f:7e:a5:1c:a1:fd:eb:79:80:17:66:
                    2d:e8:ec:36:10:56:bd:de:e9:b4:29:e0:ce:b9:42:
                    df:51:6b:d4:f8:d2:dc:42:d3:e7:13:76:d0:ee:f7:
                    85:6a:1f:d0:f4:9f:5d:23:c9:c2:de:97:2d:fd:b8:
                    b5:09:ac:be:b8:73:60:25:6d:f8:d3:bd:b2:d3:84:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:E0:35:87:E9:5D:B2:25:EA:02:F9:EA:B9:5C:60:95:72:CA:5E
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32332d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:05:37:92:7e:0f:bc:0e:b9:f6:70:96:6c:3e:77:28:65:
         25:d3:d7:f8:bb:d1:d5:82:2e:b4:58:2f:7b:a2:fc:54:c5:8f:
         b0:a1:ef:32:01:32:f3:e0:af:b0:89:0d:60:df:24:54:49:b5:
         db:f1:5c:46:f9:51:c5:cb:c0:15:6e:45:5e:71:a6:8d:ef:31:
         cb:7b:00:55:ce:d0:e3:96:42:b0:e3:77:b8:d0:c2:0d:12:b2:
         aa:5c:58:a1:0c:c9:57:30:f3:99:fb:5f:a2:81:29:da:80:3d:
         9a:c5:12:69:0f:bd:74:58:31:d4:52:2c:5d:ac:7c:a4:41:b6:
         3e:6a:c5:b9:2c:e1:89:b9:7b:a6:a3:12:77:9b:d9:82:00:58:
         71:3a:9d:50:70:00:64:bc:a4:ad:ac:12:e9:30:e4:45:bb:96:
         a4:8a:80:6a:a5:0b:15:df:16:72:88:96:ef:b9:75:2f:b8:f3:
         a8:91:d2:8d:dc:04:b4:82:1a:9d:11:bd:d6:64:93:b2:84:89:
         32:1d:81:32:63:25:2e:30:45:91:e2:b9:5a:8d:fe:96:39:ac:
         1d:5b:77:ae:e8:2b:86:7e:ed:87:7c:07:ef:2e:6a:4b:f0:c9:
         96:58:b8:53:bd:1f:f8:bb:c8:0b:7a:02:cf:b1:e6:76:b0:33:
         52:b2:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:44:31 2024 by rpki-client on console-fra.rpki-client.org