Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa
File:                     3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier:          hwjZGGiJgcuwsmOuvKGhGW/4czt5r3VpfZeGNe1eQRU=
Subject key identifier:   30:7D:D8:D2:1E:9D:A9:08:AB:B7:20:65:36:16:C1:F7:A0:35:96:A1
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       0AC7AE7D224C5AA4F42907E66082444B507B9916
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:36:54 +0000
ROA not before:           Wed 22 May 2024 17:31:54 +0000
ROA not after:            Wed 21 May 2025 17:36:54 +0000
asID:                     263087
IP address blocks:        179.109.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 21:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c7:ae:7d:22:4c:5a:a4:f4:29:07:e6:60:82:44:4b:50:7b:99:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:31:54 2024 GMT
            Not After : May 21 17:36:54 2025 GMT
        Subject: CN=307DD8D21E9DA908ABB720653616C1F7A03596A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:44:b2:32:f6:73:75:14:1f:8f:47:86:c4:
                    53:e3:18:64:60:7b:73:e4:2e:c9:7d:b5:52:3c:f1:
                    7b:0c:1d:1f:5a:14:6e:ab:95:c7:b4:0e:77:c3:a5:
                    b1:06:4f:0f:a6:fb:2f:87:3b:56:c5:c1:f4:0e:10:
                    93:14:19:23:52:2e:61:20:24:81:fb:74:14:04:a8:
                    7e:9f:9b:88:9e:a7:56:77:d4:a6:bc:65:14:82:87:
                    51:c5:6e:bd:67:1b:9c:0f:34:81:a7:9a:23:95:a4:
                    bf:78:13:a8:54:98:7d:a7:da:d2:be:be:c7:cb:69:
                    8d:b5:d1:23:43:1a:6e:f7:3b:b8:92:c0:f1:fd:e1:
                    41:d0:8e:3b:14:88:64:81:5d:b3:33:13:6e:5e:fc:
                    7c:cb:02:1d:c7:c7:f1:06:ac:65:aa:c1:b3:b3:17:
                    33:fc:6f:18:56:ab:98:81:85:18:b8:24:cb:19:1b:
                    97:b2:65:3b:5f:fb:f9:3b:a3:bb:61:c5:d2:38:c3:
                    4b:1e:3f:68:bf:46:d1:78:e3:df:e1:3c:f8:30:b5:
                    c6:50:49:b1:8c:7c:e8:a3:b0:8b:df:63:01:8a:5a:
                    af:5c:a6:70:08:d4:f4:ea:1c:e4:f8:d2:6b:1e:46:
                    a0:f0:1c:cc:ce:23:e9:35:92:85:65:18:5b:0c:f3:
                    e9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7D:D8:D2:1E:9D:A9:08:AB:B7:20:65:36:16:C1:F7:A0:35:96:A1
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32322d3232203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:93:23:db:2a:f6:03:24:0b:b6:fa:84:7a:b3:4f:bf:4b:ca:
         39:7a:11:68:95:b4:1d:48:0a:6f:aa:24:4a:57:9a:28:c9:23:
         f2:0a:5c:d3:96:1f:29:8e:40:35:99:d9:57:8e:41:db:c2:11:
         72:79:a9:74:df:36:fc:91:3e:dd:9b:00:fe:42:9b:bd:09:3b:
         42:28:60:37:ef:8e:25:5d:5f:95:bc:50:c7:92:8f:29:a9:ad:
         dc:f0:e2:c7:3e:81:28:e3:06:1c:ac:8f:57:f0:5d:21:64:da:
         e7:53:f8:c7:4a:79:58:40:0e:1d:c8:92:48:4c:a8:2d:e4:3e:
         7f:e7:65:c7:86:bd:15:38:a1:01:5c:88:95:af:94:60:a2:60:
         20:3a:8a:21:d8:d1:ff:39:cf:42:75:25:08:16:4d:3c:2d:0b:
         26:61:19:cd:9a:c0:4b:44:0a:a9:4d:2b:b7:2d:7b:0c:f5:56:
         f1:56:21:af:3f:51:04:98:6a:25:82:1b:76:ec:4f:41:62:ab:
         fd:22:04:42:83:07:67:fd:20:98:9d:5a:f8:d0:2e:47:6f:60:
         fd:4c:2e:9f:ee:a8:87:9e:20:36:aa:bd:b1:d0:a1:9a:26:79:
         b6:e7:30:98:4c:e6:e0:69:7d:b8:81:75:1e:a0:91:97:2f:21:
         26:b7:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:13:40 2024 by rpki-client on console-ams.rpki-client.org