Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31392e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31392e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          RlwwTUCHND1Rh3lyd5Kv8CT+k04W6vwODaZPidMXGnk=
Subject key identifier:   BD:FD:3D:42:5B:70:16:F3:56:3D:25:EC:13:53:98:76:2C:9F:BC:27
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       294BE4ACB6D49358DC769990E78D5D024679CF7D
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31392e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:46 +0000
ROA not before:           Thu 04 Apr 2024 15:32:46 +0000
ROA not after:            Thu 03 Apr 2025 15:37:46 +0000
asID:                     61717
IP address blocks:        170.233.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4b:e4:ac:b6:d4:93:58:dc:76:99:90:e7:8d:5d:02:46:79:cf:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:46 2024 GMT
            Not After : Apr  3 15:37:46 2025 GMT
        Subject: CN=BDFD3D425B7016F3563D25EC135398762C9FBC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:e7:c5:b7:da:bd:78:59:16:a5:b5:07:97:
                    04:c5:1a:bf:99:58:c9:5a:95:72:40:f3:d7:1e:33:
                    aa:74:61:ca:83:06:30:b5:b5:71:b3:34:3d:11:9b:
                    e5:e1:dd:0e:f2:d7:ab:ec:83:00:83:f2:a4:a6:38:
                    5d:af:89:bf:c3:c9:88:75:17:72:40:1a:38:a2:cb:
                    49:1b:7e:df:91:44:04:f8:20:31:32:65:c1:d7:46:
                    2f:08:b8:40:68:92:53:a3:75:37:83:ab:01:6f:3c:
                    02:28:4f:74:65:cc:39:09:08:5b:04:6d:0c:dc:c1:
                    15:98:5e:22:8c:1f:18:b7:f8:1b:8d:a5:55:d1:50:
                    1e:ca:ae:3b:97:78:ba:13:4b:9e:ff:78:2b:e8:0b:
                    d9:4d:d8:f0:31:93:ae:02:9c:54:4f:38:12:1e:ac:
                    43:7f:c7:35:4c:48:93:92:0a:9b:67:9c:51:99:e6:
                    4e:d6:90:f2:b0:51:b8:1c:c8:63:03:a2:2f:b0:69:
                    67:cd:1f:ea:02:41:de:64:c4:79:22:ec:af:a4:18:
                    af:c4:2f:e2:97:11:d7:ac:0a:a2:c8:ed:d9:57:a9:
                    56:24:d3:66:f4:c5:a9:6b:81:9e:39:47:26:4e:a2:
                    84:b7:f6:71:bc:52:4d:fd:0f:cf:01:d9:6b:55:f1:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:3D:42:5B:70:16:F3:56:3D:25:EC:13:53:98:76:2C:9F:BC:27
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31392e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:2c:a9:98:9b:50:53:df:a3:90:2c:d0:e8:0c:b1:58:b1:
         bc:8d:65:da:c2:d4:28:e4:f4:83:86:13:01:74:97:d9:16:f8:
         85:ee:57:d4:a0:b5:a5:a9:db:dc:cb:e9:99:ae:3b:b9:df:bc:
         dc:8a:2e:c1:2f:c2:28:64:ca:cd:51:26:a8:52:b6:43:d5:2d:
         d9:f4:33:d9:d2:f2:02:72:86:ae:48:d1:32:19:51:79:00:49:
         62:3c:56:43:63:1e:81:79:96:05:14:0b:9f:5c:ce:26:a8:fc:
         23:11:78:9e:16:6f:94:1d:8c:bb:a0:ad:32:5e:1d:eb:08:6c:
         c7:59:8a:e7:d3:78:65:a9:f0:99:28:94:6c:99:b3:15:bc:8d:
         6c:83:3e:e1:9b:05:58:18:39:0d:64:c7:e5:17:ff:f5:15:9b:
         a3:81:b1:a5:ff:77:9f:40:f3:dc:8b:e4:36:27:ca:c8:6c:95:
         96:ba:c5:dc:0a:1f:95:b7:f5:88:b4:99:d5:3a:25:e2:2f:21:
         3c:bb:de:1d:b1:8e:ae:8b:44:14:cc:49:2e:02:ab:94:2c:c7:
         62:52:74:c1:6a:69:79:ca:8a:30:0f:ef:f9:41:dd:84:ec:18:
         af:0f:e6:d4:e1:19:72:f1:c9:ea:d2:4f:b7:9b:e5:ea:12:63:
         05:3d:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 22:12:58 2024 by rpki-client on console-ams.rpki-client.org