Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          eWpIZMHffQKvVdHZ2QxcC+QKJF3F9PK+YYYRqG0+134=
Subject key identifier:   14:A3:72:93:E4:EF:07:69:20:EF:A8:3C:7C:27:67:90:EA:64:17:12
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       13D75F5349F989E45C749657000816A71BFD3945
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 03 Apr 2024 18:33:18 +0000
ROA not before:           Wed 03 Apr 2024 18:28:18 +0000
ROA not after:            Wed 02 Apr 2025 18:33:18 +0000
asID:                     61918
IP address blocks:        170.150.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:5f:53:49:f9:89:e4:5c:74:96:57:00:08:16:a7:1b:fd:39:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Apr  3 18:28:18 2024 GMT
            Not After : Apr  2 18:33:18 2025 GMT
        Subject: CN=14A37293E4EF076920EFA83C7C276790EA641712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:82:bd:91:fc:61:26:b7:06:5d:df:67:11:
                    93:3e:64:d7:68:57:f8:86:c1:ec:9c:4c:97:d4:92:
                    cb:dc:27:50:06:99:bc:0f:2c:1b:ed:2e:75:73:b5:
                    16:62:e1:64:d7:3d:40:7b:01:e3:16:bc:57:bb:ff:
                    a5:b1:cc:92:86:51:02:fe:2f:30:d1:e5:4c:cf:1d:
                    73:f2:f6:31:d4:4a:f5:49:2e:66:7d:2b:03:ee:c9:
                    bd:96:81:a4:5b:cf:ac:d8:9d:69:e6:0b:f4:c3:0d:
                    ac:fd:27:31:16:4f:c7:87:e6:af:31:0e:60:9a:de:
                    82:cb:b6:d1:a9:64:7a:62:d5:ea:0b:05:c6:ea:1d:
                    97:d4:76:5e:e7:77:b1:8b:bf:a4:2a:e2:5a:d5:76:
                    23:c7:11:ec:b7:b7:67:ac:2d:5e:3d:15:dd:97:06:
                    03:01:26:a8:81:8f:1f:b3:a6:27:ba:b7:bb:1c:bf:
                    79:1d:c1:69:69:2e:79:15:fe:0b:64:4d:4b:69:0b:
                    f2:5e:96:fb:8e:b0:e3:96:2e:f5:d7:1c:c4:1a:00:
                    28:bd:3d:e1:b1:7d:38:96:0a:35:36:30:ff:81:36:
                    3c:6d:4f:fd:93:de:d4:0f:c4:f6:37:a0:01:79:e1:
                    6b:8b:9e:ce:28:78:87:2d:12:ab:a7:7a:b1:00:ca:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A3:72:93:E4:EF:07:69:20:EF:A8:3C:7C:27:67:90:EA:64:17:12
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:70:61:47:bc:47:33:99:5c:08:0c:02:cd:55:ae:5f:a2:35:
         33:3e:0a:a9:48:df:ea:99:3a:bc:15:e2:f3:51:7b:99:da:b6:
         25:c8:ab:fd:ab:29:04:5e:33:e8:86:37:43:65:e3:88:9c:73:
         43:47:16:36:6a:41:80:54:b7:3e:01:b0:94:bc:5b:e9:b3:65:
         ed:db:b2:5d:cc:5e:fe:2c:69:69:17:06:c3:0b:d9:2d:11:17:
         61:e7:ee:aa:a8:3d:50:da:54:56:c2:f7:00:1c:0d:f5:90:d9:
         f3:56:14:b8:50:26:ae:34:b7:87:b4:1f:81:73:e3:0f:0e:ec:
         89:8e:77:87:82:51:96:62:fb:3f:48:ab:eb:cf:2a:21:a0:e5:
         2b:7d:93:ad:6c:e6:09:ae:70:9f:67:3b:61:dd:59:4e:99:97:
         25:ba:91:67:b7:99:c5:e4:25:75:a5:78:7b:88:cc:e5:84:a1:
         ff:dd:94:b0:88:e9:6d:51:69:71:8b:5a:81:d7:bf:48:5a:4b:
         e9:fb:b1:54:42:05:3a:92:f7:05:22:9b:62:a8:cd:e0:5e:72:
         fe:db:83:be:01:0f:d9:13:b1:5b:17:f6:63:c6:07:ba:65:a0:
         36:3d:90:1e:7f:68:4d:a9:8b:75:12:d9:1a:12:02:86:b2:65:
         5e:fa:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:49 2024 by rpki-client on console-ams.rpki-client.org