Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          Ll3rrOQNfhEKz5/ko9YqcFmQ7K7PWN0XUOd8rIrGKMY=
Subject key identifier:   DE:0A:20:6A:49:10:58:6B:69:A2:8A:32:AF:25:48:35:AB:67:7B:3C
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       7372A76291607DF3AB3CBD311E174BE504E67A5F
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:39 +0000
ROA not before:           Tue 30 Apr 2024 13:07:39 +0000
ROA not after:            Tue 29 Apr 2025 13:12:39 +0000
asID:                     265106
IP address blocks:        170.254.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:72:a7:62:91:60:7d:f3:ab:3c:bd:31:1e:17:4b:e5:04:e6:7a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:39 2024 GMT
            Not After : Apr 29 13:12:39 2025 GMT
        Subject: CN=DE0A206A4910586B69A28A32AF254835AB677B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:4f:0e:6f:ff:a5:9a:6b:58:5f:d0:4f:c9:
                    fb:fd:ee:b2:d8:ad:85:12:fc:fb:65:1f:c5:0c:e5:
                    76:08:d5:f7:26:6c:3f:e5:03:ad:bf:d3:4c:d4:08:
                    7f:7e:e0:fa:68:19:81:49:04:23:e4:f5:0d:95:fd:
                    34:17:b6:22:59:cb:78:0a:2d:71:86:65:71:fd:a8:
                    03:13:49:8b:55:f9:4d:24:05:d2:96:4c:c9:0c:dc:
                    71:6a:29:7a:7c:30:17:65:23:f1:af:d2:9e:82:9c:
                    13:13:95:c5:ae:92:4b:1c:62:14:93:55:60:63:e7:
                    16:09:8e:eb:e3:16:2e:60:14:76:3c:50:99:eb:43:
                    b9:9e:8f:30:ba:73:45:58:e2:a0:d0:32:72:ad:93:
                    26:03:b4:7d:ff:47:2c:35:a3:a8:bc:81:c9:6b:cf:
                    eb:24:66:63:68:61:eb:27:54:af:f4:f5:89:1a:01:
                    68:65:77:8b:d0:f0:0d:06:91:d1:49:72:a7:c8:2b:
                    65:f7:f0:40:00:f3:e3:35:fd:54:57:1d:48:ac:8d:
                    be:a3:b8:e9:7f:c9:c5:79:fd:fe:d9:9c:56:6c:0e:
                    7c:14:f5:dd:5b:f4:bf:ce:a4:33:bf:b7:ec:13:f4:
                    3d:d9:e1:ec:8e:81:00:f4:90:12:0c:d2:f5:48:9d:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:20:6A:49:10:58:6B:69:A2:8A:32:AF:25:48:35:AB:67:7B:3C
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:38:52:08:96:58:ce:a6:de:38:15:41:f6:cb:66:bd:7d:b6:
         ed:4e:be:ec:46:57:2b:86:d8:8d:16:10:1c:9a:35:5a:19:28:
         1c:55:df:b7:57:7d:e2:54:0a:fc:70:f2:96:45:a8:92:a4:e4:
         17:e6:22:76:3f:14:0f:3d:dd:de:7f:67:3c:2e:db:7b:68:c1:
         91:f4:28:98:23:8e:43:3d:7f:16:94:8f:b3:49:38:25:bc:8a:
         0d:46:4a:3e:e9:49:e3:ae:0d:31:2d:48:cd:54:d3:2d:e2:00:
         da:21:37:bd:a0:4d:6a:63:f6:49:7e:86:8e:44:40:7e:fe:4a:
         38:a5:f4:33:e2:2a:8c:26:f4:ea:63:a2:75:c3:36:0c:8a:00:
         8d:47:c2:1b:c5:81:30:08:94:7b:14:a2:03:0d:08:f8:99:0c:
         82:9c:77:15:f2:3f:e0:ea:80:f4:ab:de:b8:37:03:42:ec:24:
         6a:4e:9f:4f:d9:f0:c2:33:43:3b:8b:7e:d8:43:3b:e8:6c:8b:
         1b:07:f4:4a:72:52:51:81:ec:3d:43:af:39:a3:16:3c:6a:aa:
         8d:c7:d9:d6:8d:81:ec:1b:d6:37:fe:e8:10:a1:21:6b:f9:e4:
         7d:3c:04:58:d6:bf:c4:ef:a7:b2:89:f7:c1:12:25:ff:94:ce:
         07:e0:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org