Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa
File:                     3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          uUzT+UXnktmZgF4CxBWRBALTMXcWvPEvp43Wm4+8dkU=
Subject key identifier:   12:20:C1:B7:22:16:CE:36:DE:78:9A:0D:CE:26:86:63:01:38:14:99
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5AADE50264746ACF971E1ED572E95FCF92C59250
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:26 +0000
ROA not before:           Thu 04 Apr 2024 15:18:26 +0000
ROA not after:            Thu 03 Apr 2025 15:23:26 +0000
asID:                     262352
IP address blocks:        170.246.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ad:e5:02:64:74:6a:cf:97:1e:1e:d5:72:e9:5f:cf:92:c5:92:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:26 2024 GMT
            Not After : Apr  3 15:23:26 2025 GMT
        Subject: CN=1220C1B72216CE36DE789A0DCE26866301381499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:50:ca:a3:a0:cb:73:08:05:30:b5:48:50:
                    e0:66:fe:aa:f3:40:97:e5:b0:94:26:a3:af:32:b2:
                    51:99:e4:66:a6:1b:b4:5f:32:9f:43:54:68:62:44:
                    77:36:da:a2:63:60:c3:74:cc:b5:2b:96:fb:3d:5b:
                    49:1a:13:d6:ec:99:55:63:8c:a2:9e:dd:01:e3:74:
                    7a:95:f5:58:8e:e7:ac:09:70:9b:6e:c9:39:a8:ce:
                    c1:13:3b:1a:20:5e:ff:1c:e0:42:9c:90:49:cd:5e:
                    66:45:e5:17:8f:d3:12:69:57:27:8e:89:cb:23:fa:
                    73:19:22:78:dc:c0:22:bb:70:e1:6e:72:35:41:19:
                    a5:39:99:ad:ff:1c:38:cf:c1:80:b7:f5:2e:d6:97:
                    0c:7a:9f:57:df:7b:26:72:9a:d3:a2:16:43:6c:46:
                    b3:c1:a7:ce:77:c8:f2:a8:8c:a4:f7:c9:23:e2:57:
                    ab:d9:5b:bd:27:1b:53:10:7b:05:3c:d9:6f:1e:fc:
                    5c:47:47:de:0b:ba:7a:bd:a5:42:6b:40:46:fb:d7:
                    a3:50:d0:0f:e9:b2:bc:5d:71:b3:47:6d:f0:82:7f:
                    4d:69:db:e4:e4:d0:19:50:ce:0e:69:65:7b:7b:42:
                    4a:b8:06:bc:1d:4c:9c:74:1c:6b:8f:c5:d8:09:96:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:20:C1:B7:22:16:CE:36:DE:78:9A:0D:CE:26:86:63:01:38:14:99
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:96:a3:38:3d:ae:f6:bf:7f:52:d7:d8:aa:98:f1:32:cd:66:
         d0:1b:99:02:67:5d:16:96:94:72:d9:cc:d9:f9:ed:a4:3c:97:
         dd:89:ce:8a:2b:6c:63:fe:09:e9:0f:57:9a:12:87:f5:79:7b:
         18:0a:bf:7a:b5:81:b6:4e:fe:06:4b:30:97:ac:7c:59:f2:f6:
         7c:75:8e:b4:e0:2e:93:16:35:11:d8:81:5c:57:35:34:6e:99:
         7e:10:64:cf:5e:04:bd:bb:ec:c7:93:d0:2c:18:9b:70:b5:7a:
         b9:42:55:27:bd:7e:c0:3a:b2:95:d7:6e:db:f0:36:76:80:8e:
         5d:af:9e:3b:e8:fd:b4:58:a3:77:2c:bd:a9:36:89:de:6d:e5:
         50:fa:a0:bd:92:1b:cd:af:56:e2:a1:a2:cd:c7:90:9e:88:73:
         1e:d8:62:42:ce:68:56:eb:7a:9d:58:58:ed:e0:7a:a1:a5:99:
         d9:d0:5c:37:47:8c:b1:b0:58:51:4e:d6:09:76:38:41:25:9b:
         27:d6:42:37:9a:58:6c:12:7b:c0:c9:81:e9:1f:2a:93:2d:e6:
         a9:ab:ec:1b:78:0a:be:2d:fe:56:7e:6e:7c:de:5b:a3:17:0e:
         6e:ab:3b:f7:01:2a:27:cc:6e:d7:ca:ea:e9:22:dc:a5:ec:37:
         35:a3:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org