Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa
File:                     3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa (raw, json)
Hash identifier:          xHR3UvW+Va3cFxy3F2amtEQZcu2+MKFmHyBSyz0N2Js=
Subject key identifier:   BB:3A:74:85:04:B5:97:17:14:85:4D:D3:CB:5E:75:69:E3:A6:89:3D
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       730D3D389DA43862B70BE4F13176EE7DA96B6458
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa
Signing time:             Wed 03 Apr 2024 20:16:14 +0000
ROA not before:           Wed 03 Apr 2024 20:11:14 +0000
ROA not after:            Wed 02 Apr 2025 20:16:14 +0000
asID:                     266506
IP address blocks:        170.244.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0d:3d:38:9d:a4:38:62:b7:0b:e4:f1:31:76:ee:7d:a9:6b:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Apr  3 20:11:14 2024 GMT
            Not After : Apr  2 20:16:14 2025 GMT
        Subject: CN=BB3A748504B5971714854DD3CB5E7569E3A6893D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:38:ac:cb:2f:82:0d:b7:40:09:d1:12:92:
                    f2:2c:fc:df:78:71:7a:63:54:60:17:9a:38:06:a5:
                    b3:86:74:48:47:b3:39:a8:da:0c:87:1a:5d:2f:07:
                    59:4d:84:99:74:2b:98:14:6f:42:13:da:24:5d:9b:
                    b0:e9:7c:b0:b0:27:47:f2:67:3f:21:af:f1:16:d7:
                    8b:b3:2d:85:5b:e5:41:58:2c:c2:e4:ff:b3:13:5f:
                    aa:c1:60:64:33:2d:44:26:ad:f3:44:94:7c:91:fb:
                    27:26:5c:f8:5b:6f:d2:c5:6e:3e:94:d2:70:23:7e:
                    d9:7b:a7:a1:ca:d0:7c:71:4b:3d:e8:dd:91:2b:d1:
                    a0:e5:34:10:cf:ec:e3:f4:40:c6:f2:6d:b3:61:d9:
                    1a:e6:81:0e:25:8c:6d:2d:9f:63:ba:5f:8b:02:bf:
                    f2:03:b4:94:95:ac:83:d7:92:61:9b:d0:c8:df:e8:
                    78:85:92:a0:fb:cc:98:c2:56:65:79:28:47:a8:dd:
                    71:fd:52:c2:41:45:23:2b:1d:7e:49:12:cd:b7:7c:
                    3d:d4:3a:6f:c1:50:62:f6:b2:5d:8b:b6:92:13:46:
                    91:cb:04:75:0b:75:a7:bd:9d:bb:3c:17:14:91:0a:
                    6e:24:9a:2a:76:93:de:2c:e7:ed:f7:df:e0:dd:48:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3A:74:85:04:B5:97:17:14:85:4D:D3:CB:5E:75:69:E3:A6:89:3D
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:d0:35:12:39:ac:ab:b6:00:48:52:3b:46:a5:0e:77:40:
         45:9f:25:aa:49:a0:50:97:7e:d9:2a:f1:23:4c:5a:b0:13:95:
         5f:d7:09:bd:09:2f:b1:4c:04:a9:02:80:19:97:b5:bb:ea:0c:
         b7:49:f5:b0:a5:6c:dc:dd:22:bf:06:4a:df:e4:e8:38:0f:dc:
         69:93:de:6b:ea:cd:11:76:1c:d4:2a:11:21:bd:e0:98:47:13:
         2a:7a:91:43:0f:f1:f2:4d:73:25:ab:b0:f7:f7:cf:d5:12:9b:
         16:0a:4c:e6:bb:43:1b:a0:e2:b0:52:3a:fd:97:0d:b2:aa:7c:
         83:7c:cf:9a:45:21:c2:1a:63:cf:20:d9:40:1c:1c:b6:fe:93:
         b5:54:18:ef:60:bd:b6:c5:0c:12:2a:b3:1e:91:87:44:b5:89:
         70:74:df:70:98:19:5a:9c:94:3d:78:69:8e:7a:7e:94:13:7d:
         ba:a2:04:63:70:4d:f9:58:62:08:9b:82:11:61:15:6b:ab:11:
         01:01:8b:2e:49:d7:6a:8b:ba:1b:c9:47:26:52:f4:b0:fa:0f:
         2a:c6:fd:19:2a:39:96:66:ea:3e:87:d6:7c:59:9d:b9:74:93:
         50:18:b2:66:3f:c8:68:e3:5c:b6:09:11:23:f5:af:f6:de:79:
         78:66:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:20 2024 by rpki-client on console-fra.rpki-client.org