Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136352e302f32342d3234203d3e20323635303136.roa
File:                     3137302e38342e3136352e302f32342d3234203d3e20323635303136.roa (raw, json)
Hash identifier:          NckOouyTXOeVI8txFvWNaow7crBe3kqd+f90d5lrPW8=
Subject key identifier:   C9:60:D4:27:81:AF:6C:4A:47:79:AB:12:41:95:E5:46:66:0F:2A:9F
Certificate issuer:       /CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
Certificate serial:       2E8C5CFEE1E1A1968656698874807EB579EC57E4
Authority key identifier: EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136352e302f32342d3234203d3e20323635303136.roa
Signing time:             Wed 03 Apr 2024 18:32:27 +0000
ROA not before:           Wed 03 Apr 2024 18:27:27 +0000
ROA not after:            Wed 02 Apr 2025 18:32:27 +0000
asID:                     265016
IP address blocks:        170.84.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8c:5c:fe:e1:e1:a1:96:86:56:69:88:74:80:7e:b5:79:ec:57:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
        Validity
            Not Before: Apr  3 18:27:27 2024 GMT
            Not After : Apr  2 18:32:27 2025 GMT
        Subject: CN=C960D42781AF6C4A4779AB124195E546660F2A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:89:91:6b:59:62:00:97:b5:81:b5:6d:00:
                    42:35:9e:da:eb:79:a5:76:a7:a5:c3:22:63:28:ac:
                    08:96:31:62:35:d7:f8:1e:ec:6e:56:61:68:00:c1:
                    12:17:83:ef:1e:af:14:93:55:b7:dc:ca:36:05:5d:
                    76:7d:2f:c7:3d:17:24:f5:28:27:6c:cc:5c:a9:23:
                    14:d4:1a:b9:34:3e:a1:f9:86:a7:5c:8a:a4:29:13:
                    4c:ce:9d:31:3f:8d:ba:3a:6e:b8:e4:65:b2:2b:23:
                    8d:a1:f6:57:b4:ba:ed:a4:fa:e1:45:c1:4e:31:b5:
                    4a:1d:d0:34:39:0d:67:ed:fd:f4:a6:49:1a:4b:31:
                    70:a1:9f:b8:0e:63:ea:25:84:ed:6f:d2:9e:36:6e:
                    f4:1e:6f:48:9c:3d:7b:79:4f:d2:96:f2:5b:98:bb:
                    87:5f:0f:74:d2:b2:32:c5:44:ac:ea:2a:e1:ed:27:
                    05:c0:82:2e:33:6b:f6:92:d0:0b:8b:eb:67:38:b6:
                    11:76:ad:a8:a3:b3:c4:86:77:a8:4a:72:49:72:28:
                    d1:e7:b0:8c:09:4d:c2:e8:61:2e:60:6f:7d:a4:36:
                    80:2a:f8:c7:ec:65:6d:6c:d4:82:24:49:ad:e6:ed:
                    31:e1:31:4a:69:7b:8e:e0:6a:8e:d0:39:9c:d2:fc:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:D4:27:81:AF:6C:4A:47:79:AB:12:41:95:E5:46:66:0F:2A:9F
            X509v3 Authority Key Identifier:
                keyid:EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136352e302f32342d3234203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:77:24:5f:84:ce:bd:3c:f3:41:09:39:fa:d9:d0:c1:a3:
         a1:19:ee:fe:4c:5a:e7:a8:e5:05:1d:b4:33:d3:02:2d:92:4b:
         78:82:47:12:06:14:6f:f3:39:12:40:b6:66:0f:a5:dc:71:31:
         42:eb:a7:47:79:48:9c:38:41:de:6a:48:53:3e:57:ef:0d:ad:
         3c:1f:07:fa:e7:73:ff:b9:fd:72:d7:31:14:f5:d5:14:04:01:
         e6:3f:59:2d:52:75:b8:41:47:f5:17:40:85:57:87:b2:cc:48:
         f8:fe:ab:6e:dc:ac:67:16:bf:59:fd:c3:01:8e:7b:3a:67:05:
         56:38:99:ce:f0:0d:dd:8d:70:c8:3f:83:b4:be:06:29:df:46:
         fe:17:da:e9:bc:67:f2:97:0b:c9:fc:28:c2:9b:f0:09:8e:94:
         cc:74:fe:b9:1d:55:21:02:4b:5d:ac:ed:6e:ba:77:fb:f3:80:
         7b:e2:1b:6e:0e:d4:3c:2b:1e:6e:c1:1e:6d:f4:b1:70:81:ba:
         74:ab:b5:18:ab:e4:27:c7:ca:16:19:0a:3e:6b:0e:6e:7e:4d:
         51:88:8b:e2:f6:83:e0:a0:35:28:19:7d:fb:71:97:1b:8e:ce:
         e6:bc:30:28:73:17:46:db:79:4e:04:3a:3d:25:d1:6f:a4:70:
         0e:91:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org