Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3234203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32322d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          YkU4RLxnEnnGbADlppQzj9RU9u7tXkRYe3E6fYW3P8I=
Subject key identifier:   24:E8:DE:81:09:EF:8B:7E:A8:21:8A:84:7E:38:19:65:11:44:E5:08
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       1D7170AC17BE10C285D7F1907270B88F59F9B26A
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3234203d3e20323633353238.roa
Signing time:             Wed 05 Jun 2024 19:16:39 +0000
ROA not before:           Wed 05 Jun 2024 19:11:39 +0000
ROA not after:            Wed 04 Jun 2025 19:16:39 +0000
asID:                     263528
IP address blocks:        170.254.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:70:ac:17:be:10:c2:85:d7:f1:90:72:70:b8:8f:59:f9:b2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Jun  5 19:11:39 2024 GMT
            Not After : Jun  4 19:16:39 2025 GMT
        Subject: CN=24E8DE8109EF8B7EA8218A847E3819651144E508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:19:97:d3:59:d4:92:51:e6:03:29:f2:bc:
                    f0:31:1d:04:3f:eb:f8:a5:63:2b:74:50:f6:d6:2c:
                    0c:d0:9b:b9:a3:02:af:9c:c0:be:21:28:4e:ac:e7:
                    12:fb:8a:7c:82:54:73:a9:62:48:42:01:75:76:3d:
                    7b:a1:0a:da:2d:4d:cc:e8:a1:c5:59:c4:d0:48:e1:
                    08:71:22:ca:44:3d:44:e4:7e:4f:ea:87:31:93:02:
                    31:94:72:21:2a:26:8a:a7:f3:25:cf:99:02:64:79:
                    b3:d8:85:f5:bd:62:c1:8a:cc:36:78:0f:dd:d5:7e:
                    4c:a2:2a:5e:da:83:a5:14:ff:ca:a9:4a:8f:fd:14:
                    fc:fd:ec:f9:9d:42:06:b7:7a:8b:8a:4c:66:c7:3c:
                    8d:aa:38:19:d8:b8:0e:75:1c:1c:79:75:53:70:c2:
                    78:f0:1b:5c:14:1f:82:7c:f3:72:71:bb:dc:db:3a:
                    cd:ec:41:db:88:91:94:6b:f8:83:fd:00:b8:c9:70:
                    0c:34:c5:c6:d6:3c:4f:68:1f:ef:7a:2c:78:43:7b:
                    46:7b:7d:1c:9d:08:bd:9c:4d:b8:cc:71:89:45:5b:
                    d5:22:e5:69:5a:aa:87:75:17:69:d6:d9:85:2f:93:
                    6c:c2:f5:8f:4b:c2:b1:0c:0d:ef:bc:1a:ea:a4:a6:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:DE:81:09:EF:8B:7E:A8:21:8A:84:7E:38:19:65:11:44:E5:08
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:66:87:d4:27:1c:eb:92:8e:bf:f8:7d:ad:33:59:e6:85:23:
         17:d4:0b:f8:4e:42:33:de:ab:54:62:6c:52:1d:16:db:bc:45:
         f6:d1:8a:cb:56:6b:54:40:bd:90:2a:8b:11:41:70:9b:82:cc:
         23:52:34:05:a1:d0:56:22:91:a4:18:69:43:cd:10:d7:fb:69:
         f4:f2:2f:70:b8:2c:53:5b:e7:09:c7:77:02:80:37:3a:01:6e:
         e8:ba:a4:32:dc:f6:6e:56:91:87:cf:49:b5:66:ce:02:ab:57:
         62:b9:b5:4a:f4:58:45:01:75:6b:4f:7d:1a:35:71:f0:55:0b:
         52:60:1a:f1:a3:66:81:fe:f5:1e:bf:20:1d:f0:13:9e:2b:17:
         0c:ab:65:98:22:3b:18:be:a5:db:ad:17:5f:5d:79:3f:e3:b5:
         56:e1:cb:0b:3a:2e:c2:ea:77:b7:9c:38:b3:ef:8d:fa:06:4f:
         a5:5c:63:76:51:62:25:0d:ef:44:af:36:5d:58:b2:80:e8:99:
         67:a2:ab:16:a4:11:20:ae:de:9b:73:c3:5a:01:50:34:ea:49:
         25:63:da:b8:f9:d0:0b:ff:af:6b:22:6f:8d:29:2a:87:68:ab:
         56:57:07:77:b1:ec:8c:c7:bc:46:2e:8d:fd:24:6a:83:7a:26:
         a3:13:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:10:08 2024 by rpki-client on console-ams.rpki-client.org