Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31372e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31372e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          qo/Z76LBaV0NTYIxn6MQPpccqCOpGqwzySz7llGIb1I=
Subject key identifier:   BB:BB:B1:6C:5E:84:95:41:07:08:3F:4A:6F:8E:FA:0C:42:FA:1B:7E
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       1FFA13B4EBA4EB60EB29AC9188EF217DC73BCC65
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31372e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:51 +0000
ROA not before:           Thu 04 Apr 2024 15:32:51 +0000
ROA not after:            Thu 03 Apr 2025 15:37:51 +0000
asID:                     61717
IP address blocks:        170.233.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:13:b4:eb:a4:eb:60:eb:29:ac:91:88:ef:21:7d:c7:3b:cc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:51 2024 GMT
            Not After : Apr  3 15:37:51 2025 GMT
        Subject: CN=BBBBB16C5E84954107083F4A6F8EFA0C42FA1B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:17:95:60:40:8b:0d:fc:90:c4:5d:10:8c:
                    09:23:bf:0a:9c:ba:80:70:39:90:3c:b1:cf:67:6d:
                    bb:70:bd:8a:e8:a9:bb:30:45:41:97:b2:ba:f9:02:
                    86:d8:2e:fb:bd:10:da:49:91:92:ab:08:7b:7c:8e:
                    ea:67:86:b5:41:2f:be:ef:f1:47:89:e7:5b:82:d0:
                    3d:98:8b:68:60:c9:e6:bc:fa:ff:f0:3e:cb:ec:ed:
                    43:0f:6a:1e:a3:17:18:29:b5:03:4b:c8:51:56:af:
                    16:8c:8a:66:06:52:25:d1:43:c8:76:1f:50:fa:58:
                    64:c3:bc:2c:a0:d2:62:19:a5:8a:8e:1d:ca:cb:d8:
                    de:ba:9d:f2:05:f1:fc:47:b1:1a:8d:f2:c4:59:55:
                    65:57:37:17:ad:68:04:35:67:9f:64:eb:57:38:24:
                    42:5e:59:3d:6a:ad:65:fd:cb:41:9b:01:06:a4:6d:
                    f3:72:c1:9d:88:1d:32:87:0c:9c:13:2e:1d:96:d2:
                    86:17:85:06:be:47:6e:d5:47:e0:ac:89:d9:97:53:
                    19:91:d4:ec:5c:4a:e3:12:f3:da:b3:8e:93:21:4e:
                    ba:79:98:26:f2:24:6a:0f:8f:1a:e4:a6:76:dc:7a:
                    92:b7:0c:8c:cd:2f:50:e0:9e:7c:3f:0c:5b:da:17:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BB:B1:6C:5E:84:95:41:07:08:3F:4A:6F:8E:FA:0C:42:FA:1B:7E
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31372e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:f1:e6:b0:8e:4a:99:c9:26:de:79:05:8c:dd:c4:19:e2:
         7c:3c:c9:ed:d5:7c:84:a6:0e:5a:e5:bf:bd:2d:8d:c3:0b:c3:
         f0:2d:5c:43:5c:08:f9:78:2c:a0:d9:78:52:27:94:06:d2:1d:
         ba:0a:e9:c1:07:56:91:fb:15:f8:83:78:3f:b0:bf:91:28:56:
         dc:b7:d0:ea:44:5f:5a:64:4e:2c:e8:72:cb:0c:60:72:ec:73:
         63:10:97:52:e9:00:8a:54:81:bf:36:4a:19:c6:6d:43:6d:40:
         42:e4:a8:bd:a6:8a:ba:35:ce:7f:08:e9:3c:63:61:a1:34:b5:
         6d:91:9a:70:aa:0c:68:d0:a2:2c:64:1d:80:ee:e1:d6:69:80:
         bc:8d:4a:2e:12:50:56:fe:9d:a0:40:a1:c4:3d:e3:51:05:be:
         df:42:6e:3c:83:6c:07:bd:69:75:91:d9:37:f9:14:fd:b4:c7:
         c5:40:50:2c:b6:64:66:37:85:d5:4b:3f:46:c7:4d:12:7c:75:
         f2:c9:94:90:b0:6a:37:67:3e:0b:f8:9c:6d:a6:c1:a4:1f:43:
         ce:32:81:19:8b:ea:91:74:ab:e2:8b:09:72:60:79:82:79:ad:
         8d:9f:21:28:61:57:d0:4b:3c:16:a9:1c:7f:ed:4d:b0:ef:53:
         3d:71:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:33 2024 by rpki-client on console-fra.rpki-client.org