Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234312e302f32342d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234312e302f32342d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          7rW1ynFiWJZIKQd6+2kvxTSn4QEz724T6KRuEcTBGdM=
Subject key identifier:   84:F2:09:9D:78:E7:30:94:9D:27:00:DE:88:24:3D:DA:16:4A:10:DC
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       598D1FCF6603CD202CD6D87C880BD29F1C29414E
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234312e302f32342d3332203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:53:31 +0000
ROA not before:           Tue 21 May 2024 16:48:31 +0000
ROA not after:            Tue 20 May 2025 16:53:31 +0000
asID:                     271293
IP address blocks:        170.233.241.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8d:1f:cf:66:03:cd:20:2c:d6:d8:7c:88:0b:d2:9f:1c:29:41:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:48:31 2024 GMT
            Not After : May 20 16:53:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:28:32:0e:f6:2d:99:1f:1d:dc:1c:f5:26:
                    b5:68:a4:4a:b2:2c:72:07:61:50:90:1f:c0:24:c4:
                    6a:56:d9:06:69:9f:20:e1:d6:96:f9:18:8d:82:c8:
                    ae:36:61:d5:7c:0a:80:e8:58:37:00:8e:ed:1d:ca:
                    e5:a1:e4:dd:c8:04:49:d1:49:1d:7a:7c:e6:e2:ea:
                    1c:fd:58:d4:57:85:06:75:97:05:fb:f9:20:d7:a7:
                    e4:5a:b5:ab:c7:ec:f5:58:d7:33:0d:9d:48:bd:27:
                    1f:43:1c:ed:22:e2:06:13:76:04:cb:da:07:2b:4e:
                    52:d5:f5:d5:e0:28:bc:0d:4e:13:d4:e2:e6:92:66:
                    b0:33:c6:1b:fb:3d:5a:3b:ad:fd:d5:11:77:c0:be:
                    ee:c5:d5:d3:7b:b9:01:e1:9d:eb:41:fb:3b:38:28:
                    68:37:7a:19:55:52:11:7a:da:97:02:4f:dd:3f:bc:
                    18:0e:f0:8b:85:86:b1:44:6c:ed:78:b1:c4:5e:ff:
                    88:49:e1:86:87:eb:fc:21:71:6c:9b:71:e3:7f:73:
                    ca:f5:74:9b:93:3b:75:23:6f:a4:c3:c1:89:ea:0b:
                    ad:13:ee:6f:1b:a9:67:94:90:4a:33:4e:cb:8b:5b:
                    b0:0d:2c:39:58:07:94:48:10:f6:bf:7b:4e:e4:ea:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:09:9D:78:E7:30:94:9D:27:00:DE:88:24:3D:DA:16:4A:10:DC
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234312e302f32342d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:15:8c:1c:36:10:a5:2e:1b:78:a0:4b:55:22:3a:e1:cc:7d:
         97:ab:de:a1:87:a9:d8:bd:2f:38:e1:b2:0f:9b:8c:ff:99:4a:
         e4:2c:f4:bc:a5:39:60:52:fb:7d:fb:6b:fb:2b:47:22:57:3f:
         ff:58:bd:c9:7c:60:76:0f:f4:96:29:06:76:c0:af:d6:d1:cd:
         99:e9:44:da:82:fe:6a:3b:a3:9b:c6:db:7d:db:a4:d1:69:7b:
         4a:1f:ed:0a:31:e2:ca:0f:96:16:dc:55:b4:1c:6e:5d:e9:42:
         4e:e1:ca:66:e1:7d:f7:93:a8:d7:e4:69:5a:b7:8c:e1:78:30:
         46:27:87:45:1e:7f:5e:2f:35:f9:4f:dc:65:22:4d:e2:4a:7f:
         c4:dc:76:dc:f4:1a:14:00:e6:17:98:b2:19:9b:1e:2b:e8:47:
         13:93:05:94:bb:48:cd:51:8d:43:29:7a:0d:3e:46:f7:91:ae:
         ac:90:fb:88:90:4d:9a:4a:c9:fb:3a:2b:4c:b0:cf:81:1a:9c:
         00:04:e9:d1:bc:ce:32:db:13:ce:3c:fa:b1:d1:1f:66:c9:96:
         ef:f8:00:4c:e9:a6:d9:36:02:d3:bf:ed:17:6a:ad:fc:b7:56:
         d6:6f:17:16:4c:bb:39:b0:48:65:92:6f:c9:b5:b1:49:19:30:
         7d:8a:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:56:53 2024 by rpki-client on console-ams.rpki-client.org