Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          lYftVevm0eCfOJqXd7ALOK7TMvC5c4nnt+aU92+ThFs=
Subject key identifier:   02:ED:7C:6B:4A:6E:AB:EB:63:38:F8:C4:2A:B6:8F:17:4D:13:60:03
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       1468B0C32CCE2EC7887F4718760E32FA2DB45965
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:18 +0000
ROA not before:           Mon 27 May 2024 21:46:18 +0000
ROA not after:            Mon 26 May 2025 21:51:18 +0000
asID:                     265010
IP address blocks:        170.84.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:68:b0:c3:2c:ce:2e:c7:88:7f:47:18:76:0e:32:fa:2d:b4:59:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:18 2024 GMT
            Not After : May 26 21:51:18 2025 GMT
        Subject: CN=02ED7C6B4A6EABEB6338F8C42AB68F174D136003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:cb:92:6a:27:4c:5c:5b:07:2d:68:c6:3a:
                    dc:63:d5:55:32:3c:1b:fe:aa:6b:a8:29:17:d2:96:
                    ff:b5:46:e0:ef:62:d3:a1:47:ee:1e:61:a2:6d:d9:
                    52:3a:7a:1d:7c:b5:b3:1a:ac:48:e1:0f:7d:c9:85:
                    3e:da:97:5c:40:6e:a5:1c:ca:f4:da:a8:d9:37:4e:
                    c9:ca:0f:4d:09:13:81:ff:8b:e0:ea:42:80:b7:46:
                    3e:9f:9d:aa:10:a1:e7:fb:ea:03:88:82:56:8e:a4:
                    4b:5c:76:b5:75:99:d4:b3:61:2b:70:3a:69:aa:a9:
                    46:9e:3b:b1:94:97:0d:f9:c1:b3:50:8a:d6:88:f7:
                    83:55:84:7b:17:0a:13:5a:eb:af:61:04:50:fd:03:
                    0c:62:2b:b6:a4:f4:17:3d:8a:aa:1c:ce:ad:75:cd:
                    65:17:22:16:bf:67:fb:8e:6c:d4:0b:30:40:5b:05:
                    52:68:85:c2:9e:b5:18:10:1f:e1:42:1a:67:33:77:
                    88:a7:62:8e:5f:0e:ca:54:06:ee:80:fd:0b:28:20:
                    8e:33:af:fc:a5:90:36:0d:39:d7:59:4c:de:ec:c2:
                    31:80:2a:f0:19:0a:c5:82:06:25:dd:e7:e3:be:54:
                    99:d4:66:28:04:46:3f:cb:12:7b:f4:d7:f6:14:52:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:ED:7C:6B:4A:6E:AB:EB:63:38:F8:C4:2A:B6:8F:17:4D:13:60:03
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:a9:f5:64:f2:19:ca:53:58:f6:34:63:fa:47:95:a2:b3:
         24:e3:74:93:9f:22:ef:eb:df:da:96:37:e4:2f:da:71:5d:97:
         4e:70:25:e2:d4:74:70:fe:c1:7f:4c:67:95:20:c1:06:73:fa:
         47:63:01:57:cd:1b:e4:63:8a:f8:e4:93:09:4c:e1:21:8f:ff:
         ee:36:37:da:58:9f:62:5f:13:9b:79:49:a2:eb:47:fe:0c:f6:
         65:0f:f5:b4:8c:12:86:df:e7:28:3f:9d:4c:c9:7a:55:ad:4d:
         82:d2:f6:d6:9c:92:67:eb:37:cc:cc:13:67:70:35:fd:46:56:
         67:dd:4f:b3:4f:e6:2e:bf:ca:b6:94:5f:00:1b:f3:a7:c0:3a:
         ae:8c:36:38:b7:53:04:48:c4:e6:9c:39:d4:8f:82:4e:78:91:
         8d:f0:08:bb:6a:12:f5:6d:ce:05:31:88:27:7a:f5:2e:4f:43:
         9b:f0:37:af:64:05:7e:1e:4e:87:41:96:2c:4d:69:ac:bc:b7:
         64:c1:a1:36:9b:15:f8:31:cf:06:d3:23:58:ba:a7:20:ca:af:
         49:06:d3:0b:78:93:c6:9e:ac:28:43:94:19:44:33:55:43:7b:
         6e:a0:70:5b:94:be:ff:a3:08:6e:4b:cc:d7:41:10:69:27:28:
         6d:8d:01:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org