Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37372e302f32342d3234203d3e20323730343133.roa
File:                     3137302e302e37372e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          yM0jkxu6sCTZOWtZwUfdfwFbZx26+cZQ3cToT4cD3gM=
Subject key identifier:   C3:69:7B:8D:D3:6D:1D:0B:51:2F:5C:B0:44:5A:F5:4B:C3:DE:FB:DD
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       0A2EB9653B48821EACFFD0040347F4889F2C9AFF
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37372e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 03 Oct 2024 13:37:53 +0000
ROA not before:           Thu 03 Oct 2024 13:32:53 +0000
ROA not after:            Thu 02 Oct 2025 13:37:53 +0000
asID:                     270413
IP address blocks:        170.0.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2e:b9:65:3b:48:82:1e:ac:ff:d0:04:03:47:f4:88:9f:2c:9a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Oct  3 13:32:53 2024 GMT
            Not After : Oct  2 13:37:53 2025 GMT
        Subject: CN=C3697B8DD36D1D0B512F5CB0445AF54BC3DEFBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:70:d2:80:4b:6a:5a:73:dc:d5:02:3d:b7:6d:
                    cf:cc:d6:65:f4:d1:55:a1:53:ac:07:df:fe:3a:8c:
                    3b:04:f8:6b:e6:6a:28:1e:36:1a:75:9d:2b:75:f2:
                    16:bb:89:c7:2b:92:9f:91:b1:02:5d:10:e9:82:83:
                    40:8d:8b:c3:65:53:66:04:bb:d9:67:24:3b:a7:6d:
                    2d:62:bf:42:23:2b:2f:49:2f:77:c8:de:af:24:96:
                    9a:52:c2:74:a3:16:af:cb:68:0e:62:69:80:16:a5:
                    bc:37:a7:3b:52:f8:ab:60:f2:92:53:8e:f6:d1:e1:
                    81:59:bc:da:2f:9e:97:90:f1:12:dd:2f:9d:ba:6d:
                    d7:67:4b:e7:68:24:81:e2:63:b3:70:17:45:60:c9:
                    6f:46:01:2f:72:0a:c2:49:48:7d:40:db:76:bb:67:
                    38:cc:b9:2e:0f:04:d0:3d:8b:95:bc:03:6c:67:5d:
                    3f:86:be:1e:4f:73:b2:44:73:17:42:24:73:94:6e:
                    75:e5:51:b7:46:b3:70:01:38:de:86:bf:b3:02:5b:
                    b1:57:dc:f2:7d:c6:a6:1b:9c:08:c9:80:01:2d:c7:
                    a5:23:4b:2b:9a:4b:92:da:45:a0:c7:a1:78:48:0a:
                    50:9e:ba:22:7b:6c:34:09:36:66:28:2e:04:6c:e1:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:69:7B:8D:D3:6D:1D:0B:51:2F:5C:B0:44:5A:F5:4B:C3:DE:FB:DD
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37372e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:61:db:97:f7:14:42:d4:75:23:87:c1:0a:e4:7d:96:b6:
         28:54:37:ad:06:2c:17:3a:2f:37:59:b8:15:40:0e:2d:44:4f:
         97:44:50:f1:b8:6d:06:6e:97:56:2d:83:00:34:bb:7c:f8:53:
         4b:65:45:65:96:2d:ca:0c:e1:57:88:a0:73:8d:54:22:61:16:
         9e:d1:32:5c:88:37:3b:2a:57:e8:df:76:18:18:80:f3:78:36:
         ae:80:0a:4a:ed:8f:34:2d:63:78:7f:ce:45:f2:98:d4:03:60:
         70:d8:86:94:ca:eb:1b:9a:35:d6:5d:e5:eb:9d:a5:c8:bb:bc:
         3c:5b:e9:64:ac:dd:f5:10:ca:96:1a:fe:62:79:c3:49:5f:fe:
         d8:a1:1c:ff:c7:ea:77:75:ce:ae:3a:c6:b5:67:c4:e6:8b:79:
         3e:3a:3a:2c:26:5f:e4:74:0c:0b:62:bd:8a:08:bd:0c:ce:ed:
         57:4a:18:ca:88:99:bb:92:93:b9:4c:82:4f:d4:46:f2:89:1a:
         57:1d:50:f1:46:1e:0d:47:04:a4:7c:f1:39:d2:68:6a:38:ce:
         68:3d:4c:b0:9e:e5:f4:ac:da:5b:51:e2:db:d3:46:d1:9c:e4:
         7b:62:48:ce:61:5f:9f:d9:ea:2c:66:19:0e:a2:ff:26:97:e0:
         14:5f:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org