Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234322e302f32332d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234322e302f32332d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          74++SEo2YiFRPJ3Jh0yxkJS5MkpCpDNs4wTgu/yxH7M=
Subject key identifier:   0D:3E:42:BE:A7:D4:2C:C5:64:6C:4A:B7:15:09:61:8A:79:15:2E:B5
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       667B9DEE6119795209BDA76917B0831A3D1E9F9E
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234322e302f32332d3332203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:54:14 +0000
ROA not before:           Tue 21 May 2024 16:49:14 +0000
ROA not after:            Tue 20 May 2025 16:54:14 +0000
asID:                     271293
IP address blocks:        170.233.242.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7b:9d:ee:61:19:79:52:09:bd:a7:69:17:b0:83:1a:3d:1e:9f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:49:14 2024 GMT
            Not After : May 20 16:54:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:aa:49:4b:23:96:41:ab:39:e0:89:59:0f:a8:
                    27:21:e3:9c:ae:37:66:ad:09:3b:af:6b:5e:6e:2e:
                    54:a5:b3:84:c4:c8:77:91:1d:df:f4:c4:a5:3e:ac:
                    a4:3f:22:51:48:1b:c9:4d:67:bd:f8:ae:fd:de:cc:
                    42:69:34:29:31:fc:50:47:fd:71:ae:4a:f4:4a:9c:
                    02:d8:fd:df:db:d6:07:d3:65:bc:56:7e:50:69:cd:
                    d1:c8:49:d3:37:82:96:85:45:c2:f8:f7:87:df:6d:
                    24:c3:8e:c6:0e:b8:86:5d:04:14:3f:69:b2:24:17:
                    37:79:c9:32:64:b8:d5:df:ea:45:cb:fe:49:4f:0a:
                    6c:5b:b8:59:d1:29:49:00:c3:a2:78:1d:3d:a4:c7:
                    88:e4:4c:5f:ec:af:90:01:3c:68:f2:6f:93:a3:b5:
                    59:c8:dc:af:d4:22:62:a5:8a:10:97:67:ca:d3:c8:
                    79:fd:40:3a:45:0a:b9:e9:22:4e:c7:67:68:c1:92:
                    8c:98:4f:6c:7e:b4:99:86:99:08:59:2c:be:5b:59:
                    33:54:0c:60:fd:d9:ff:e6:b8:20:35:29:6e:e4:a1:
                    3c:1b:62:e8:46:f3:b6:e8:aa:dc:94:ad:f7:a5:f5:
                    ce:4f:2b:68:58:4d:de:7c:9c:8a:bb:9a:1a:4f:53:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3E:42:BE:A7:D4:2C:C5:64:6C:4A:B7:15:09:61:8A:79:15:2E:B5
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234322e302f32332d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:39:a9:81:b3:af:8e:83:19:28:db:8f:85:7c:ec:d1:5d:1f:
         fb:da:07:25:7f:14:43:30:41:41:ae:51:b5:63:f8:6f:01:2f:
         e6:cf:08:c7:ad:9e:61:68:b9:6b:17:6f:0e:ab:bf:4b:79:eb:
         15:e4:af:ed:ad:14:29:e4:d1:6a:09:b4:85:aa:36:e5:b9:83:
         1b:e8:eb:ec:9f:25:31:45:f8:6d:c2:f2:e0:ca:f8:88:03:ac:
         25:d4:a8:64:f6:9a:b6:cf:05:b9:98:66:e2:35:f4:7c:e3:bb:
         9c:56:73:f4:b4:14:1e:49:d9:a9:82:97:71:4c:b2:8c:0e:4e:
         fa:48:11:6d:51:f3:ee:d0:02:00:fe:4f:0e:0e:b3:c7:54:5a:
         48:5d:79:c7:46:ba:82:ff:25:07:b3:04:c1:42:e9:5a:75:03:
         63:c5:45:46:b0:bf:2b:b3:64:14:22:46:ad:32:40:02:df:c8:
         b1:68:ef:05:65:7e:68:8e:67:f8:83:8a:1e:56:58:40:c4:1a:
         1c:59:fb:da:80:99:6a:18:3c:80:5a:df:8e:b9:85:90:b3:b9:
         47:ec:5b:ea:60:30:55:14:cb:6f:ee:70:b7:7e:cf:a4:cc:16:
         61:fb:b7:88:74:58:2e:e7:ba:e6:84:d7:e3:74:52:2d:76:51:
         9a:ca:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:56:53 2024 by rpki-client on console-ams.rpki-client.org