Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa
File:                     3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa (raw, json)
Hash identifier:          BxjzwlMDEAg+rYTTURR0hzhfDNkE5vBBISFrCsIqwHY=
Subject key identifier:   57:55:4F:26:7E:61:06:43:53:E3:E6:10:76:61:04:20:18:B7:65:A7
Certificate issuer:       /CN=FB16D49E1AC4BE9524150A7FB2C98D0147D2757C
Certificate serial:       2163D22551D6EF644ECB618A1E7918ED27DBEDBE
Authority key identifier: FB:16:D4:9E:1A:C4:BE:95:24:15:0A:7F:B2:C9:8D:01:47:D2:75:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa
Signing time:             Tue 06 Aug 2024 18:41:32 +0000
ROA not before:           Tue 06 Aug 2024 18:36:32 +0000
ROA not after:            Tue 05 Aug 2025 18:41:32 +0000
asID:                     265085
IP address blocks:        170.233.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.crl
                          rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:63:d2:25:51:d6:ef:64:4e:cb:61:8a:1e:79:18:ed:27:db:ed:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB16D49E1AC4BE9524150A7FB2C98D0147D2757C
        Validity
            Not Before: Aug  6 18:36:32 2024 GMT
            Not After : Aug  5 18:41:32 2025 GMT
        Subject: CN=57554F267E61064353E3E6107661042018B765A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:57:ed:f2:62:bd:ba:8c:a3:90:b1:47:5a:
                    c0:96:86:4e:e4:24:2f:66:dc:bb:3a:a1:56:ff:63:
                    f9:cb:cc:53:73:f9:aa:d2:08:d0:d1:36:56:1f:0d:
                    ca:87:d3:24:c3:a0:87:22:3f:fd:93:5e:e5:3b:ae:
                    ea:dd:aa:b3:8e:d1:bd:2c:39:96:94:8e:37:9a:ff:
                    3d:8a:6f:71:2d:17:77:9b:cf:d8:75:f7:8c:e8:54:
                    b6:a8:5f:cb:ec:1e:37:ae:b6:fb:3e:b5:b8:4c:67:
                    81:09:73:75:97:07:ba:bb:f3:e6:25:cc:0f:09:ab:
                    ab:7a:96:4f:bd:d7:87:32:8c:91:c1:94:a8:2b:b2:
                    94:4b:24:6b:b6:95:c9:39:5c:14:16:92:ac:9d:9b:
                    52:93:33:1b:06:3e:3a:1f:96:ae:fc:b7:16:f6:74:
                    f4:98:83:03:bc:cb:3b:52:be:16:bd:c3:da:f6:95:
                    dd:6e:06:95:83:1d:6e:4e:e4:2e:d4:5b:73:eb:4f:
                    4a:c5:37:9b:78:1b:cc:67:b0:44:f3:0d:08:7b:40:
                    52:ec:1f:35:1b:dd:d9:9d:c7:23:03:50:36:09:0e:
                    0d:7f:6b:75:02:0e:2b:62:0d:9a:4c:b0:dc:05:67:
                    7b:b9:74:36:5d:19:68:59:e0:1d:14:0f:f8:0e:ea:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:55:4F:26:7E:61:06:43:53:E3:E6:10:76:61:04:20:18:B7:65:A7
            X509v3 Authority Key Identifier:
                keyid:FB:16:D4:9E:1A:C4:BE:95:24:15:0A:7F:B2:C9:8D:01:47:D2:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:65:0b:1c:38:3f:d5:1c:9b:98:2b:43:03:fb:46:77:07:
         82:d3:fd:be:8c:cb:ba:f0:86:a1:4b:06:68:f2:d1:7b:78:69:
         b3:74:81:98:fb:9f:0e:50:6c:28:9f:c7:81:33:a9:c1:7b:fd:
         bc:75:88:61:53:cc:91:42:4f:b9:96:0f:40:fb:c7:de:cb:2d:
         cf:92:71:42:e6:cb:de:27:a1:f4:fa:ef:3d:48:0d:41:f7:d2:
         d5:cc:77:28:2b:ad:42:28:f1:f8:87:3c:47:56:22:18:b3:fe:
         34:69:22:30:d5:5d:86:ba:e7:d1:cc:93:f0:0a:4c:67:12:a9:
         23:51:b6:9e:d3:43:74:8e:eb:19:51:a4:02:1f:c7:fe:2a:80:
         96:8e:b4:9a:62:76:34:6a:05:8b:e0:b2:83:26:94:53:2c:3c:
         39:79:45:c4:43:06:4a:e5:39:0c:41:bc:15:71:f0:66:ac:1e:
         91:de:1e:0b:05:f2:7e:83:39:41:d0:10:9b:4b:54:45:88:42:
         29:db:af:08:6f:ac:fb:6f:80:49:c5:ca:13:e1:45:c6:e4:87:
         9f:78:3f:14:c7:23:74:c2:ab:e2:9c:2a:e3:7b:05:14:d7:e9:
         cf:68:4c:fc:44:05:2f:11:80:ce:c3:7d:9f:35:27:c8:20:fc:
         e1:2b:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:49 2024 by rpki-client on console-fra.rpki-client.org