Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          BMzJoV7T7X0tf4s92Ke1SIO5cPMJQmn5TugZOe7Nxsw=
Subject key identifier:   DE:DC:7C:68:9C:B3:52:9B:DA:A2:2F:C2:27:9F:54:E2:B7:82:E1:C5
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       08408DD0683EA957B42FC8B3959A0F9E5F26DEE4
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa
Signing time:             Wed 03 Apr 2024 20:16:12 +0000
ROA not before:           Wed 03 Apr 2024 20:11:12 +0000
ROA not after:            Wed 02 Apr 2025 20:16:12 +0000
asID:                     266506
IP address blocks:        170.244.181.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:40:8d:d0:68:3e:a9:57:b4:2f:c8:b3:95:9a:0f:9e:5f:26:de:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Apr  3 20:11:12 2024 GMT
            Not After : Apr  2 20:16:12 2025 GMT
        Subject: CN=DEDC7C689CB3529BDAA22FC2279F54E2B782E1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:f2:19:dd:5d:0b:bc:a1:c2:3e:49:cd:63:
                    3a:3b:68:c5:9b:f1:52:76:41:e8:b0:21:2b:8a:3c:
                    12:4a:45:3a:f7:56:4b:eb:36:62:24:e9:55:9d:a2:
                    2c:24:0a:ba:a5:53:c1:73:0d:1d:48:ab:0a:d2:8d:
                    4f:2f:07:e0:94:31:74:58:80:ff:1c:3f:0a:a5:64:
                    85:d6:4f:d6:22:4a:d5:e2:c8:77:e6:42:c9:7f:c4:
                    66:4b:16:5f:6b:32:46:20:d3:8e:99:3c:c0:42:72:
                    02:50:78:ac:88:7b:e8:f7:9c:dc:52:3c:cc:1b:ca:
                    61:4a:5b:a1:af:48:38:64:c9:fe:ac:86:31:10:91:
                    1d:61:2d:ce:ae:c3:f3:f4:cb:1c:2a:bf:0f:a1:90:
                    a6:5d:96:bb:af:1f:b1:c2:30:48:a4:58:98:e8:b5:
                    67:b6:a7:c6:4c:e3:fb:8e:7c:b5:3e:e4:54:71:e0:
                    b4:17:e5:4a:17:8a:8f:8a:9c:bc:92:f7:17:84:01:
                    b2:c3:28:5a:55:14:cc:8d:b8:66:34:9e:00:55:8e:
                    98:b2:39:de:1a:aa:8b:e0:40:a5:3b:11:b8:a2:0e:
                    01:96:85:0f:2f:b6:9a:67:28:56:f3:0c:a1:f4:c9:
                    35:40:7a:61:e6:a7:b5:e1:ac:3a:35:b2:bb:ca:d6:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DC:7C:68:9C:B3:52:9B:DA:A2:2F:C2:27:9F:54:E2:B7:82:E1:C5
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.181.0/25

    Signature Algorithm: sha256WithRSAEncryption
         ce:14:7c:83:7b:8f:ae:bd:6b:7f:64:19:54:90:ec:fd:5b:ad:
         af:a7:93:a7:85:4e:76:bf:10:be:ac:f8:b2:0f:46:ce:5f:cd:
         83:82:a0:92:9f:e5:37:a9:5f:65:37:66:de:b3:93:8f:b1:b1:
         b8:5a:e9:61:ed:7d:07:f9:73:d4:e4:ca:9d:c3:38:ca:9f:9b:
         1d:75:27:4e:2d:00:e7:91:e9:05:38:1e:ee:06:07:ef:4f:52:
         f4:5d:9c:14:f9:8f:3c:bd:4b:a6:46:9c:ee:63:9d:01:4d:81:
         ee:82:07:3a:95:13:2e:8a:dc:b7:c8:b6:ee:bf:12:7e:71:8a:
         12:a8:73:c1:ff:de:18:68:12:0c:a3:4e:4a:fd:53:74:2c:19:
         58:1e:f7:fa:9f:c1:65:24:3b:d3:40:d8:8d:d8:a8:f6:e9:2d:
         0b:6b:f7:09:dc:f4:c4:3b:50:ff:c4:51:5c:56:2c:a5:b2:35:
         28:0a:c3:83:4f:b3:bb:bd:18:95:87:32:b4:61:c1:dd:8e:f6:
         ce:ad:54:6b:75:f3:f9:53:fe:45:19:1f:cf:1e:19:6d:11:0b:
         e8:8d:f3:9a:73:64:b0:72:26:63:23:0f:1c:25:17:40:5a:97:
         c8:ff:1f:57:08:93:76:7b:a0:88:83:4f:20:e1:30:5f:b7:ed:
         56:bf:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:44 2024 by rpki-client on console-ams.rpki-client.org