Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          w/o3AdrdK4KBAOgJb8IqQrFjpO9B5pDTtzBmyubLeog=
Subject key identifier:   EA:8A:23:96:96:A1:06:5E:FE:FE:12:85:B3:07:CB:5A:D8:7C:07:46
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       3858FAFB7E302ECB9F2884BCD4EF7BAFA0754E7A
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa
Signing time:             Thu 04 Apr 2024 13:08:44 +0000
ROA not before:           Thu 04 Apr 2024 13:03:44 +0000
ROA not after:            Thu 03 Apr 2025 13:08:44 +0000
asID:                     265078
IP address blocks:        170.233.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:58:fa:fb:7e:30:2e:cb:9f:28:84:bc:d4:ef:7b:af:a0:75:4e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Apr  4 13:03:44 2024 GMT
            Not After : Apr  3 13:08:44 2025 GMT
        Subject: CN=EA8A239696A1065EFEFE1285B307CB5AD87C0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:a6:80:93:69:e2:af:14:45:f7:3b:b0:a5:
                    72:39:c1:ea:6d:12:ce:4d:1d:aa:f5:0c:bc:5f:7f:
                    14:08:73:ff:4e:92:88:de:39:dc:17:69:46:ca:7c:
                    18:ba:49:47:66:fb:5d:f6:37:02:d9:ec:56:80:f7:
                    5f:d7:06:ed:02:95:ae:eb:70:97:7c:36:7c:8c:a8:
                    d8:43:b5:6c:6f:7a:54:a6:61:60:86:91:54:e3:10:
                    d1:49:33:aa:95:ed:89:2d:d0:70:31:51:14:ec:1f:
                    bc:01:55:17:48:95:d1:41:53:14:58:7a:32:ea:11:
                    2b:b9:4c:71:2a:09:2d:49:79:ea:21:71:9d:e8:79:
                    6a:36:03:d2:33:56:52:17:de:65:8d:06:ae:12:e4:
                    bc:48:b5:16:f7:9f:a7:07:69:e4:28:29:67:29:bd:
                    31:4d:e4:e9:d0:90:19:14:0f:6f:4b:f8:dd:b1:83:
                    ed:b3:ef:87:b1:14:9f:44:fb:5b:15:da:97:89:44:
                    10:e3:07:d8:d5:cc:9e:06:26:a4:49:c7:b6:f8:81:
                    47:1c:06:73:24:3b:ef:b6:63:ac:ff:1f:b4:5b:66:
                    72:f6:36:b3:4c:65:3b:c7:1d:a5:f9:85:c7:d4:c7:
                    ba:d2:1a:30:09:51:99:53:63:72:c1:2e:5b:43:4a:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:23:96:96:A1:06:5E:FE:FE:12:85:B3:07:CB:5A:D8:7C:07:46
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1c:a4:51:bd:f1:c2:78:af:83:43:9e:00:b7:b7:83:11:c0:
         61:dc:41:3a:20:51:c5:26:61:a7:31:d8:69:80:54:63:40:ca:
         fa:ff:a8:b9:31:f7:ea:31:63:05:25:3d:7c:c3:31:aa:59:0c:
         29:79:8c:41:0f:9b:9d:c5:a4:94:30:90:f4:9c:66:49:cc:e6:
         08:aa:c2:8a:e5:35:ce:3f:80:0a:ff:bb:0f:e9:a9:f5:c8:2a:
         04:62:7e:96:d7:45:f8:8f:fe:4d:c5:b1:3b:2d:e6:12:8d:62:
         f8:c7:ec:ef:b8:f0:5e:c0:b1:7f:06:4d:07:45:e3:dd:7a:68:
         90:98:e2:58:62:55:ae:53:42:b3:08:3d:39:bd:8c:ab:51:16:
         0c:04:b9:e2:20:f8:d9:ba:a7:8a:0c:87:4b:4a:16:34:75:e5:
         6b:34:2e:9c:11:4f:1c:a8:e0:0d:8a:f7:af:52:88:43:35:9a:
         9b:dd:52:91:f5:7c:1b:90:51:c7:90:e4:94:a7:c5:e8:4f:0e:
         7a:44:0d:ac:e4:02:58:ba:08:44:c8:08:60:f4:7a:3b:53:f2:
         bc:6f:b4:22:9f:8a:4e:a5:9a:db:9a:2a:7f:5b:4d:20:2c:fa:
         b4:b6:b9:d0:d0:f4:59:e9:e2:4a:33:9b:3e:a7:08:a7:dd:43:
         28:67:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:36 2024 by rpki-client on console-fra.rpki-client.org