Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137302e3135302e34302e302f32322d3234203d3e203533323436.roa
File:                     3137302e3135302e34302e302f32322d3234203d3e203533323436.roa (raw, json)
Hash identifier:          HNKXg2bLHu31vSCZuq1SyuGVFgV6pi11o8CKaRop3gE=
Subject key identifier:   61:E8:57:1C:F7:2A:2D:C7:9D:47:92:F3:C1:B8:34:2D:C6:23:C3:4D
Certificate issuer:       /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial:       7A89CC44FD98907C0081620A650E77A26EDE0848
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137302e3135302e34302e302f32322d3234203d3e203533323436.roa
Signing time:             Thu 04 Apr 2024 18:39:41 +0000
ROA not before:           Thu 04 Apr 2024 18:34:41 +0000
ROA not after:            Thu 03 Apr 2025 18:39:41 +0000
asID:                     53246
IP address blocks:        170.150.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl
                          rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:89:cc:44:fd:98:90:7c:00:81:62:0a:65:0e:77:a2:6e:de:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Validity
            Not Before: Apr  4 18:34:41 2024 GMT
            Not After : Apr  3 18:39:41 2025 GMT
        Subject: CN=61E8571CF72A2DC79D4792F3C1B8342DC623C34D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d0:0e:75:90:60:8e:d5:2e:52:0c:cd:b2:36:
                    0b:db:ff:9a:42:a8:09:1a:bc:a5:ef:4b:1b:d2:3b:
                    0f:1a:4c:c8:63:bc:b6:6b:a5:84:8b:e8:50:ca:b8:
                    2c:c9:fe:37:99:7f:d2:85:0c:b8:a2:0a:b7:a3:8f:
                    36:d5:a0:4b:ee:5e:6d:f8:1d:0a:2d:17:0a:f8:cd:
                    ba:9f:79:4a:31:d1:33:3b:b6:dc:84:e0:2c:40:da:
                    e6:14:92:8f:8f:c3:7e:51:f9:ac:cf:78:94:e5:ff:
                    4c:90:e8:05:5c:f3:da:ec:5a:4f:b5:9f:83:28:ba:
                    4e:4b:f7:27:1e:a5:93:ec:bb:b6:9a:71:a6:be:3d:
                    2e:3b:66:28:b3:7a:f4:e0:84:75:24:3b:1e:34:70:
                    58:e3:e5:f0:9f:e3:ec:7a:87:30:31:85:8d:4b:b4:
                    ec:5a:e2:cf:e6:18:73:33:40:be:c0:6a:d4:de:93:
                    83:14:56:e5:79:f7:fe:33:e2:4f:ff:55:64:bf:48:
                    1e:b3:74:b1:42:66:28:64:11:09:a4:0c:6f:50:07:
                    92:41:a4:0e:f9:aa:14:1a:87:5d:8d:cc:2b:77:f7:
                    e0:4e:e8:58:69:3c:30:ee:e1:63:8d:f9:a8:05:25:
                    6f:2b:9d:7e:9b:e7:06:b3:92:bf:41:da:be:fe:2a:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:57:1C:F7:2A:2D:C7:9D:47:92:F3:C1:B8:34:2D:C6:23:C3:4D
            X509v3 Authority Key Identifier:
                keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137302e3135302e34302e302f32322d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:a6:53:98:1a:5c:bc:1d:f5:65:52:f9:db:7a:52:4a:80:
         92:88:01:37:92:16:26:ab:2d:52:fa:8a:38:76:67:17:d5:f0:
         c6:82:df:41:e3:7d:cf:d7:be:b0:3e:d7:5f:27:3f:11:f0:2a:
         4a:f1:ad:4c:21:d8:6c:9b:08:13:46:8d:d9:99:42:89:ea:2b:
         8b:fb:17:c9:bb:0f:ff:f9:c7:e3:92:15:0e:5b:e8:10:73:88:
         ad:14:75:39:5f:fe:e8:a5:e4:52:59:1e:0d:21:77:3e:36:88:
         9c:cc:8c:22:f5:97:16:77:d3:52:2e:ba:32:d5:12:9a:32:67:
         44:70:d0:9d:bd:d5:b7:d9:1f:cd:24:b7:26:45:89:41:3b:4b:
         f5:bc:59:29:d7:ad:44:97:01:e9:c7:17:9f:b0:0d:25:8a:b8:
         31:05:7e:e8:de:6d:98:7a:b8:54:78:fe:14:ad:0d:1c:ee:96:
         34:78:23:a0:08:44:6e:6a:b0:02:eb:09:6c:36:c5:2c:2d:45:
         ab:a6:89:4a:54:3d:7f:cd:69:17:b0:40:f1:2b:7f:10:fe:4e:
         8b:9d:cf:3b:84:f8:b5:43:dc:32:12:46:17:f4:fe:67:f6:05:
         9b:5a:19:33:03:e4:c8:63:3c:a5:de:6c:03:3a:da:65:d9:2f:
         85:23:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org