Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3137302e38312e3232362e302f32342d3234203d3e203631363636.roa
File:                     3137302e38312e3232362e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          OqoOGE2KgIKTeahWFXa04HoCrwQEPpa85xHp8eIexx8=
Subject key identifier:   1B:AE:10:8C:41:1F:C6:B3:03:39:76:8F:A7:53:43:85:C2:D0:DF:38
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       68FB4A808B1E1471979CAB5C1EEE01802AB264F1
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3137302e38312e3232362e302f32342d3234203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:08 +0000
ROA not before:           Wed 03 Apr 2024 20:19:08 +0000
ROA not after:            Wed 02 Apr 2025 20:24:08 +0000
asID:                     61666
IP address blocks:        170.81.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fb:4a:80:8b:1e:14:71:97:9c:ab:5c:1e:ee:01:80:2a:b2:64:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:08 2024 GMT
            Not After : Apr  2 20:24:08 2025 GMT
        Subject: CN=1BAE108C411FC6B30339768FA7534385C2D0DF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:27:90:91:f2:12:eb:95:77:cf:84:2d:22:
                    12:33:be:b8:a1:3a:db:71:23:5b:91:5e:a3:8c:e0:
                    c9:01:4e:d8:68:92:b1:3f:3a:7c:34:00:ca:2b:3b:
                    3c:7a:87:61:a5:d9:b2:95:8c:e2:96:b3:54:2e:09:
                    17:8a:63:ce:0c:dd:20:62:d1:e0:95:73:b1:a8:e0:
                    ed:7e:00:6f:7f:e0:d4:dd:2f:fd:fd:d9:77:00:ee:
                    26:15:3a:e0:59:e9:b9:d1:f5:10:fe:af:a2:02:0a:
                    83:99:db:3b:f0:d3:e7:14:28:90:a9:cf:c1:ac:5a:
                    36:c9:7d:4e:9d:5f:55:cd:51:c3:51:e7:55:ff:6f:
                    ab:c3:ef:ab:8f:55:19:2a:cf:e9:18:8c:07:8b:3c:
                    4d:49:52:e2:79:c9:d0:f2:d0:2d:be:55:f6:c0:b9:
                    17:a5:6d:e1:cd:ed:16:6f:48:f3:ee:70:b7:96:e0:
                    81:bb:5a:8b:5d:76:f4:1a:f0:22:63:30:54:0e:72:
                    b7:36:3c:84:87:45:d1:b9:08:c6:b0:47:d3:9a:1b:
                    7b:28:a9:3b:43:b4:ae:f5:49:ef:fa:b4:e5:ba:4b:
                    1f:a5:bb:a1:39:64:97:e2:52:1e:b5:a5:47:54:df:
                    d3:18:56:3c:34:76:70:12:ff:38:df:75:7b:cd:f6:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:10:8C:41:1F:C6:B3:03:39:76:8F:A7:53:43:85:C2:D0:DF:38
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3137302e38312e3232362e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:0e:a8:6b:85:b2:e8:98:e1:70:81:c0:0d:57:62:59:a8:
         5e:03:0d:93:eb:50:5e:51:3d:65:78:64:02:e3:52:dd:4d:a7:
         5b:f2:50:d1:f4:82:20:6a:e7:6b:36:0a:1c:15:f7:f5:90:f6:
         77:ea:5a:74:53:c3:d2:86:63:02:e1:45:14:56:b8:0c:ed:28:
         2e:2d:50:56:8d:96:a2:55:86:9c:16:a5:04:76:4d:77:ee:73:
         bc:23:1a:81:ce:2d:72:3e:f7:39:a1:4c:00:89:81:13:b0:d3:
         0f:95:a5:53:70:38:65:21:98:20:d3:58:99:18:53:50:ad:96:
         b9:73:83:9f:4e:02:be:b8:86:45:09:35:4d:72:ea:2e:d2:48:
         f3:1a:42:9e:cd:68:99:b3:e8:e9:e6:f0:8d:75:9e:f3:4b:67:
         30:8a:09:65:e1:82:18:29:3c:47:79:36:d2:61:f6:a4:73:1d:
         3f:97:11:9b:36:6c:72:62:7b:e5:4b:ed:f2:a9:0a:ff:30:41:
         02:91:96:85:5a:a5:96:bf:a0:1a:6f:99:26:7a:a8:99:24:b6:
         ad:bb:95:3e:88:fe:76:f4:68:9f:01:59:36:fd:ff:33:61:31:
         b2:1d:02:cd:38:8c:16:e6:f7:38:18:12:a8:37:31:3f:db:94:
         1b:9d:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org