Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa
File:                     3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa (raw, json)
Hash identifier:          z8y/gi8CG1qQ/sJ9hLIWOICrAV/gLkuDxinPnt1QIig=
Subject key identifier:   1A:15:72:DF:5C:06:F5:D4:93:16:71:E1:6A:29:C9:39:D5:9A:A6:28
Certificate issuer:       /CN=A524FE3F2C38E55657BE6FF4933831B625A9332B
Certificate serial:       6AA2F1B4F1C7D5B9D8F0BDC226EC064ED16122BB
Authority key identifier: A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa
Signing time:             Thu 04 Apr 2024 05:14:44 +0000
ROA not before:           Thu 04 Apr 2024 05:09:44 +0000
ROA not after:            Thu 03 Apr 2025 05:14:44 +0000
asID:                     264429
IP address blocks:        170.245.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl
                          rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a2:f1:b4:f1:c7:d5:b9:d8:f0:bd:c2:26:ec:06:4e:d1:61:22:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A524FE3F2C38E55657BE6FF4933831B625A9332B
        Validity
            Not Before: Apr  4 05:09:44 2024 GMT
            Not After : Apr  3 05:14:44 2025 GMT
        Subject: CN=1A1572DF5C06F5D4931671E16A29C939D59AA628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:7d:fd:b9:22:a6:18:8f:f0:79:89:6f:d2:
                    7c:7a:fb:ee:a5:72:65:7f:74:ff:44:c6:85:8b:3c:
                    b2:22:ce:9c:f5:0b:19:7b:6e:41:17:dd:2a:f1:76:
                    a3:34:fe:11:8e:34:3c:05:e4:01:dc:e7:cb:f7:01:
                    c3:ff:a8:9b:ab:fa:e9:f4:46:6d:4a:1d:9f:e2:cd:
                    61:a8:b8:07:5d:0a:ef:c9:64:9f:56:4d:b1:2d:38:
                    e9:7f:24:82:71:49:2b:f0:ff:1c:3c:d0:34:70:ea:
                    38:a3:21:2a:df:46:31:36:a4:8c:8c:fb:4b:f6:38:
                    6c:b5:f9:7d:e0:0b:ca:a2:c6:07:3e:e1:29:e3:df:
                    15:c9:1e:e9:e6:7a:eb:3c:8b:f5:48:4e:0f:6f:4d:
                    3e:34:cc:7c:8c:05:18:10:fc:ea:7c:91:3e:94:97:
                    7d:3e:b1:48:78:70:d7:46:6d:b3:c2:ff:68:03:79:
                    ad:97:db:70:a9:ac:40:ca:fd:83:56:2d:cb:7f:e8:
                    88:69:7d:87:b4:06:a8:3a:cb:a9:51:ca:c2:06:0e:
                    b0:dd:7f:c6:69:99:96:75:50:b2:33:aa:b8:4d:d4:
                    bc:93:45:7e:f9:e7:7c:1f:d2:3c:f9:49:f5:90:9e:
                    ca:86:c3:94:09:b6:9f:00:69:2a:8b:d1:80:c2:b4:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:72:DF:5C:06:F5:D4:93:16:71:E1:6A:29:C9:39:D5:9A:A6:28
            X509v3 Authority Key Identifier:
                keyid:A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:d9:b2:f8:a8:47:62:93:6b:b0:20:c2:a5:a9:a5:2f:61:d6:
         63:b8:49:e6:c8:1d:c6:91:71:25:c9:af:9c:8b:55:1b:f7:63:
         50:24:e6:1a:5e:67:05:37:51:8c:ff:fd:59:e3:63:b7:89:ed:
         92:74:4a:c0:83:ce:b7:12:dc:7d:9c:53:f4:fa:9b:58:d7:10:
         6d:25:15:93:8a:21:c2:c2:ef:8e:12:1f:d4:a1:67:32:ea:10:
         7c:2c:d3:0e:a0:60:92:3f:5a:0d:8c:c6:49:a9:65:cd:ca:3e:
         46:b4:d3:8c:c4:99:da:0f:cf:0b:76:c1:90:7c:f4:56:1a:64:
         59:84:fd:64:fd:a6:90:33:ee:64:bf:7c:71:7c:98:73:ce:43:
         ba:50:51:f4:d8:5b:64:f6:de:13:63:bc:1d:ad:3c:4b:90:14:
         a2:9c:03:7d:36:ae:30:d4:ee:4f:e8:de:07:4c:76:e2:63:41:
         41:0f:2b:1e:59:d2:ff:be:39:9d:00:52:aa:e9:16:ee:ad:3c:
         9b:24:b7:3f:f4:ea:6a:37:65:f9:d7:49:21:b2:28:66:63:3f:
         46:73:15:65:47:81:6d:de:b5:c3:d4:47:94:81:ff:e8:84:b9:
         5a:d0:ef:f3:b3:89:57:bc:67:27:d5:22:39:11:c4:35:c0:5b:
         ec:fd:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org