Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33342e302f32332d3233203d3e20323634393532.roa
File:                     3137302e3234372e33342e302f32332d3233203d3e20323634393532.roa (raw, json)
Hash identifier:          OaCeqX8oLU/jZHHoMCyX3DUDgX2bzDreccUhsDFcg1s=
Subject key identifier:   75:3A:65:7B:FE:21:7D:1A:17:F3:4C:D9:73:B0:5E:27:7C:DE:55:D1
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       060A8494027F74546836970A164121B3256BF407
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33342e302f32332d3233203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:13:14 +0000
ROA not before:           Tue 30 Apr 2024 15:08:14 +0000
ROA not after:            Tue 29 Apr 2025 15:13:14 +0000
asID:                     264952
IP address blocks:        170.247.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Oct 2024 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0a:84:94:02:7f:74:54:68:36:97:0a:16:41:21:b3:25:6b:f4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:08:14 2024 GMT
            Not After : Apr 29 15:13:14 2025 GMT
        Subject: CN=753A657BFE217D1A17F34CD973B05E277CDE55D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:e3:95:d4:71:09:45:4c:51:8a:af:5e:cb:
                    ae:f1:26:36:06:ee:49:75:76:5d:49:ab:b3:e1:ec:
                    84:e8:92:c6:3f:f8:d1:58:61:fc:e3:fa:ff:ea:1c:
                    01:b2:58:50:1c:ba:1b:8d:b9:53:28:10:52:c8:f2:
                    25:fe:e7:69:81:29:1c:c0:86:4b:8e:9d:dd:95:d1:
                    53:04:35:8e:98:63:88:40:4e:b1:aa:30:7c:a6:13:
                    47:5c:56:a3:5c:97:90:3e:e2:d6:5f:51:78:dd:53:
                    45:1b:b0:c2:6c:61:69:8b:35:25:ee:73:d0:2c:10:
                    f4:a4:32:41:08:62:d2:32:0e:fe:61:3f:0f:57:02:
                    08:c5:cf:97:8e:da:72:e3:03:f6:3e:e4:eb:42:88:
                    fe:28:f7:ca:76:0d:f9:75:99:d7:7e:90:e8:4e:dc:
                    69:24:cb:2f:41:6e:42:6c:4b:d6:b4:e1:52:3b:1d:
                    2f:69:cb:ae:a0:0d:f7:91:b1:e6:d1:8d:ca:ba:d6:
                    5c:bb:a4:5a:21:ad:8e:2e:cc:7b:51:ad:61:91:53:
                    88:25:c0:12:a1:c4:2d:03:db:78:95:78:87:aa:b8:
                    e3:79:2b:31:c5:24:e2:a5:8d:b6:01:56:19:88:d5:
                    52:30:5b:84:b6:f0:da:77:1e:cd:e3:2a:7a:1a:7d:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3A:65:7B:FE:21:7D:1A:17:F3:4C:D9:73:B0:5E:27:7C:DE:55:D1
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33342e302f32332d3233203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:48:3b:67:75:10:12:84:b0:58:48:b0:f9:5e:af:4a:4e:51:
         cc:5e:e9:47:4a:d5:a9:c7:c4:5a:7f:49:34:b4:30:3b:1c:92:
         ac:7c:d3:f0:dc:e6:4d:73:b5:9c:13:e7:38:95:70:8b:6f:3a:
         a5:04:1b:06:53:cb:c3:73:8a:87:37:cd:9e:80:37:c7:46:22:
         a6:7e:f8:25:e1:af:e5:82:9b:c3:49:29:eb:a3:47:e8:3a:ac:
         22:47:cf:22:92:7a:8e:6d:17:c3:ee:d4:8b:fd:34:46:1a:be:
         87:5b:a2:19:86:88:e6:5d:e5:45:d7:3d:09:37:61:79:28:cb:
         02:3f:7d:7d:4d:cd:ab:a5:2f:f8:db:4d:9c:0f:cb:21:fd:08:
         3c:56:8d:ab:af:88:87:09:f8:7b:32:1b:2e:39:73:20:76:e4:
         bb:2b:4a:2a:03:af:77:e4:4e:da:84:27:22:e3:6f:91:d5:27:
         85:60:b0:ed:2d:f4:6b:54:af:3a:ce:a4:18:4b:19:a2:8c:a7:
         71:d8:7e:94:f0:0b:26:68:43:19:27:d6:90:db:99:2f:33:4c:
         8c:ce:71:94:d9:95:5c:b0:f8:47:b2:6a:c7:f9:0f:0f:40:0e:
         a3:7f:a1:6e:68:0c:8e:ee:7b:23:2d:c6:00:27:b4:6b:ab:b9:
         45:a1:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:42:38 2024 by rpki-client on console-ams.rpki-client.org