Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31382e302f32332d3233203d3e203631373137.roa
File:                     3137302e3233332e31382e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          wVrsZ/q3cF4tNvN0ATbU4e4X0tROerDeUR64SfAvxjs=
Subject key identifier:   45:81:77:AA:4C:B4:41:BC:21:A3:0A:AA:3A:33:62:BA:0B:F8:6B:E0
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       4FC037FD773413838E8FE762F0EB5A5247126970
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31382e302f32332d3233203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:50 +0000
ROA not before:           Thu 04 Apr 2024 15:32:50 +0000
ROA not after:            Thu 03 Apr 2025 15:37:50 +0000
asID:                     61717
IP address blocks:        170.233.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c0:37:fd:77:34:13:83:8e:8f:e7:62:f0:eb:5a:52:47:12:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:50 2024 GMT
            Not After : Apr  3 15:37:50 2025 GMT
        Subject: CN=458177AA4CB441BC21A30AAA3A3362BA0BF86BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:c8:47:27:77:c2:ec:08:57:d9:9e:d8:97:
                    bc:30:33:f7:78:55:bf:89:22:a7:37:ee:ec:5c:2e:
                    28:19:f0:0d:cd:e8:e4:41:3e:ba:a9:df:68:0b:39:
                    59:21:d0:6e:d1:5a:4c:a5:96:9e:9b:3d:95:f8:b5:
                    8c:ac:ef:f6:f4:46:1c:b5:63:01:bf:79:28:5f:4f:
                    9a:34:2c:0c:7b:d0:cc:ed:18:cd:81:45:cc:1d:82:
                    3c:3f:42:01:dc:58:74:99:c8:6b:76:b4:9c:5d:6d:
                    1d:6f:72:7b:d2:f5:9c:7d:30:e5:c5:76:05:52:0a:
                    ad:86:44:38:ca:0c:23:7e:34:4b:b9:7b:84:22:54:
                    37:8f:c8:c2:40:71:cf:cf:4f:b0:1c:12:e8:8d:6a:
                    81:13:43:2d:50:e7:49:c9:0e:a0:6e:b9:3a:14:d3:
                    f0:13:84:5e:94:44:1f:da:b5:f1:e0:da:29:34:8a:
                    be:96:dc:20:e1:e0:da:27:98:84:04:d1:53:bb:20:
                    9b:28:84:7d:26:47:a6:8e:de:d4:0b:d7:cb:92:b6:
                    f7:de:96:94:52:8f:35:d7:40:44:a3:ce:13:8e:b1:
                    b2:8b:0a:89:54:bc:59:53:9f:2e:3a:fe:bf:49:18:
                    21:6b:5d:8e:6a:db:f8:a7:b9:63:fd:b3:27:2c:b4:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:77:AA:4C:B4:41:BC:21:A3:0A:AA:3A:33:62:BA:0B:F8:6B:E0
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31382e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:04:39:2a:70:4c:62:1a:d1:53:24:10:93:30:d0:cd:75:
         84:94:e6:76:4e:27:15:78:62:d1:92:46:77:dc:ee:67:e7:22:
         13:03:a0:19:c6:53:2f:f9:86:a1:ab:ef:93:53:35:b6:cd:f5:
         07:e0:b1:af:b7:f9:2f:6c:0b:50:16:59:42:8d:7c:d1:71:0c:
         5a:9b:89:e5:cb:83:03:e9:8f:db:1c:2f:10:49:fa:1e:05:28:
         ee:23:b5:32:b0:ed:c8:c9:4b:47:9c:4e:c8:c2:25:0f:36:0c:
         25:ee:94:d2:9c:37:d5:7e:44:af:55:dc:50:af:96:53:b1:3d:
         40:7b:61:8b:ca:03:5b:3f:59:19:51:ff:db:f8:ef:41:cd:20:
         29:7e:2f:c4:dd:d0:1b:8f:04:8e:b8:c3:dd:8b:41:68:69:68:
         83:af:97:56:3c:ec:4e:82:62:27:f4:63:c1:58:6b:ae:b5:12:
         d4:fe:6a:19:5c:77:21:aa:d1:24:62:ca:04:47:01:37:dd:2b:
         36:c5:fb:5b:20:52:1b:53:78:b4:cc:7d:df:cf:40:c0:fe:e8:
         d1:d2:aa:48:dd:54:f6:fb:0f:21:b0:d4:4b:b1:df:8a:32:3f:
         df:e3:7f:db:5a:0d:0d:c9:71:b5:5f:27:da:8a:ce:72:6a:5d:
         b9:71:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:33 2024 by rpki-client on console-fra.rpki-client.org