Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38352e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          XFZoRNp2UOxyY6iggS/Fc+qPUlQ70K4hxR4T74ZkggE=
Subject key identifier:   4E:97:6B:EF:AC:85:4E:30:02:08:E1:A9:86:44:D7:11:3D:07:E5:7F
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       1B55511487EA6CE393A59AFB069A371F60BEEC9B
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:13 +0000
ROA not before:           Thu 04 Apr 2024 03:19:13 +0000
ROA not after:            Thu 03 Apr 2025 03:24:13 +0000
asID:                     262642
IP address blocks:        170.82.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:55:51:14:87:ea:6c:e3:93:a5:9a:fb:06:9a:37:1f:60:be:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:13 2024 GMT
            Not After : Apr  3 03:24:13 2025 GMT
        Subject: CN=4E976BEFAC854E300208E1A98644D7113D07E57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:23:6d:e8:bc:40:c8:4b:06:81:fb:20:22:
                    00:e1:62:c4:09:98:d8:61:8d:51:0a:ba:7b:5b:78:
                    71:01:22:17:ed:81:c5:a6:32:fe:bd:d2:54:92:bd:
                    05:ef:01:a1:73:b5:1a:ba:86:06:dd:a1:7b:df:86:
                    71:d4:17:c2:46:09:02:fe:00:a4:ca:99:a1:43:d0:
                    31:0c:1a:56:29:7b:28:e7:96:35:38:78:95:64:dd:
                    fb:c2:65:13:59:fc:2b:30:50:54:d9:8d:7b:9a:87:
                    c2:ff:c4:9c:85:54:37:9a:36:6e:7c:a8:d7:4c:62:
                    92:f7:f2:52:33:0c:1b:cb:c0:9b:cb:8a:f4:17:30:
                    53:70:73:13:8d:5b:5e:cf:31:3a:25:d8:13:46:a7:
                    52:03:db:97:5c:52:35:6d:73:b2:6b:a8:87:cf:c0:
                    3b:20:4d:d1:59:24:1b:e8:85:f9:4b:10:f5:c0:bc:
                    6d:c2:f5:f0:11:36:75:11:bb:f5:7b:e6:9e:3e:b7:
                    39:46:46:e4:7d:f4:f9:de:7f:9c:e2:c5:d3:4b:83:
                    ea:78:32:4b:3d:5a:de:10:0d:44:55:cd:79:f9:17:
                    a2:ff:51:80:41:18:ee:2a:4f:08:df:c5:fc:11:54:
                    af:a8:6b:af:e3:42:55:95:41:e4:73:e1:f5:b9:69:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:6B:EF:AC:85:4E:30:02:08:E1:A9:86:44:D7:11:3D:07:E5:7F
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:ab:2b:5b:05:24:bf:e8:c1:b5:34:ab:12:17:f8:1e:c0:
         15:99:b5:22:62:8b:5f:63:d3:aa:00:63:8d:0f:d3:37:92:2c:
         0e:42:66:97:7f:6c:5a:83:3e:89:66:60:7d:6c:a5:8c:0b:bc:
         f5:16:76:1d:e4:5e:e4:19:2b:da:61:1c:8b:c6:1b:46:e5:2a:
         38:6b:2f:b8:ab:eb:a5:8f:b5:69:ee:5c:bb:85:67:e7:df:89:
         ee:04:1e:4c:7b:e1:4d:7d:0e:db:dc:25:0b:56:4c:57:3c:ce:
         27:1b:72:0c:6b:be:10:3e:fb:27:d7:35:11:8a:e2:10:09:5c:
         ed:c6:f2:b8:50:85:82:34:bf:9c:49:1a:99:9e:eb:fe:24:a6:
         19:c7:71:e6:81:91:15:28:7f:10:4f:9f:e4:a2:62:cf:8e:aa:
         ea:c6:50:5f:e0:9c:05:9e:4c:44:53:85:7f:99:9b:94:ba:94:
         7d:dc:1a:3d:f5:92:3b:71:0a:4b:a9:da:a4:47:12:d3:8d:e2:
         8b:7a:a7:d3:1f:8f:09:04:3b:05:35:51:fb:e1:18:44:bf:f8:
         86:c9:e5:96:4a:f0:ec:83:01:f9:88:72:7b:12:3e:32:af:8c:
         90:da:7b:41:8a:10:69:62:13:3c:1b:f1:d8:ba:03:a8:ca:9a:
         7a:b0:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:32 2024 by rpki-client on console-fra.rpki-client.org