Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232372e302f32342d3234203d3e20323731363737.roa
File:                     3137302e3233312e3232372e302f32342d3234203d3e20323731363737.roa (raw, json)
Hash identifier:          7jWV3m3EkHVnVJfRrVnMn1S6DuwZrOSbPGdSnql8lag=
Subject key identifier:   CF:53:A7:5B:54:EF:B4:F8:8C:06:4C:B2:E7:39:62:B2:2D:EF:E9:A5
Certificate issuer:       /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
Certificate serial:       668DDECDE6609BE24E3571A0FF85C18702E2872B
Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232372e302f32342d3234203d3e20323731363737.roa
Signing time:             Tue 07 May 2024 19:23:24 +0000
ROA not before:           Tue 07 May 2024 19:18:24 +0000
ROA not after:            Tue 06 May 2025 19:23:24 +0000
asID:                     271677
IP address blocks:        170.231.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl
                          rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8d:de:cd:e6:60:9b:e2:4e:35:71:a0:ff:85:c1:87:02:e2:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Validity
            Not Before: May  7 19:18:24 2024 GMT
            Not After : May  6 19:23:24 2025 GMT
        Subject: CN=CF53A75B54EFB4F88C064CB2E73962B22DEFE9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:36:4f:14:20:8d:c2:f1:00:8b:3d:e7:6f:
                    75:f9:b5:b1:73:7b:70:a9:ee:a1:ae:c6:00:54:4a:
                    5c:36:0e:0b:a6:37:c7:f0:6c:92:ed:9d:a7:6c:b8:
                    81:09:48:1a:04:a1:48:49:74:27:6f:23:6b:a6:75:
                    0a:71:8c:57:83:3e:ca:6f:ea:2d:0f:bc:09:29:f1:
                    dc:a4:86:b9:6d:7c:27:b4:5e:cc:88:4d:dd:2f:2a:
                    f8:00:a3:45:5b:86:b1:1a:7e:c0:8b:55:13:7b:5f:
                    bb:55:ed:ce:37:0c:ef:19:58:22:6e:f0:5e:b4:1d:
                    c7:08:65:8e:21:b8:03:5d:1d:b8:a0:27:91:d0:7e:
                    f5:d5:07:10:0d:6a:fa:81:5c:51:7f:14:45:61:76:
                    2f:9a:ea:ee:67:36:6d:9c:5a:85:b4:76:27:96:e1:
                    ba:de:eb:90:a9:88:76:22:1a:9f:77:72:fb:b9:f4:
                    8b:ac:5c:ba:6b:da:28:b6:6a:08:58:57:e2:e0:dd:
                    2c:ff:50:e0:05:2e:79:1e:51:e2:3b:fe:a3:76:e4:
                    57:df:a9:64:76:39:84:f1:3e:fb:2b:a1:50:12:38:
                    b4:57:57:37:d7:65:8c:82:36:f3:c0:ee:16:f4:63:
                    d0:21:06:9e:b3:dd:61:e0:8a:5b:e5:cf:b7:1b:ea:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:A7:5B:54:EF:B4:F8:8C:06:4C:B2:E7:39:62:B2:2D:EF:E9:A5
            X509v3 Authority Key Identifier:
                keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/3137302e3233312e3232372e302f32342d3234203d3e20323731363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:c6:5c:9a:73:73:89:45:b5:62:ca:a8:fe:e3:69:1a:56:
         34:77:1f:4e:a0:5b:6d:cb:e4:39:2c:2d:9c:8c:47:ef:fd:43:
         06:a8:eb:24:ef:f6:15:77:b0:65:a4:d7:21:17:17:ae:7e:c9:
         0e:0b:1a:ff:2e:8e:f8:21:fb:11:59:3f:fd:18:d5:a7:0f:a9:
         02:ce:58:41:5e:be:71:78:d2:51:2f:de:6b:f6:fe:7d:f5:2a:
         25:f2:2b:30:77:9e:12:e5:1d:f8:e3:dd:30:8d:fb:0a:9a:98:
         45:6d:49:ad:b0:d8:a9:c0:7d:62:e8:6e:f9:b5:f5:80:71:34:
         30:b4:33:ea:13:16:9f:a3:0b:93:8a:71:66:08:69:eb:3a:69:
         12:c6:a8:53:7d:48:72:4f:99:fb:c7:e6:d0:9e:2c:98:0a:3d:
         8f:d8:b7:36:55:eb:64:7f:0b:9b:f9:40:83:73:de:bb:6b:66:
         a8:4c:52:19:b0:ec:39:7d:57:91:30:38:6b:d1:03:2e:86:01:
         b8:2f:04:1f:d9:60:0a:27:5f:8e:4f:05:d6:54:a9:88:87:86:
         6c:1d:86:a5:3b:b4:df:9e:60:f9:8a:af:e0:c1:54:75:f7:78:
         0f:91:f0:14:79:5b:94:0b:db:5c:9a:81:54:c0:6f:0f:a2:6c:
         bc:8b:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org