Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa
File:                     3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa (raw, json)
Hash identifier:          OOqaat+bkkHBfcbIW5r853mwMCDtuUl+bZD3yMuO8j4=
Subject key identifier:   E2:FB:52:1B:07:85:6E:18:93:FF:90:73:32:F4:79:D5:E5:9F:26:36
Certificate issuer:       /CN=212063977863A474A988E1839F9F6296FA77E899
Certificate serial:       204D20221D05BD0812F85141C25A285EC4C49845
Authority key identifier: 21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa
Signing time:             Thu 04 Apr 2024 05:18:46 +0000
ROA not before:           Thu 04 Apr 2024 05:13:46 +0000
ROA not after:            Thu 03 Apr 2025 05:18:46 +0000
asID:                     265274
IP address blocks:        170.80.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.crl
                          rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4d:20:22:1d:05:bd:08:12:f8:51:41:c2:5a:28:5e:c4:c4:98:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212063977863A474A988E1839F9F6296FA77E899
        Validity
            Not Before: Apr  4 05:13:46 2024 GMT
            Not After : Apr  3 05:18:46 2025 GMT
        Subject: CN=E2FB521B07856E1893FF907332F479D5E59F2636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:7f:9e:93:51:eb:2c:ac:2b:2d:a3:34:72:
                    90:f2:22:4a:97:6c:25:36:7d:35:88:5f:82:11:25:
                    04:96:2e:e6:36:df:7f:fa:86:a3:3d:98:ab:eb:a0:
                    8a:c8:b0:c6:5b:4f:02:42:5c:cf:5a:89:c3:67:84:
                    2f:27:97:36:e0:fb:36:1b:3d:35:dd:21:ab:a7:f9:
                    7f:67:90:ee:7a:3b:14:1d:5b:bb:54:09:21:20:94:
                    d3:d0:23:55:b7:13:5f:4d:d4:01:3c:7b:80:16:ad:
                    d9:85:03:b8:d0:b4:df:4d:44:0e:20:30:96:0c:9a:
                    d8:fe:e3:55:bf:1d:1d:6c:7a:e2:11:ff:e5:f8:24:
                    ec:50:b5:66:71:59:b0:f8:05:e4:8c:fe:65:bd:dd:
                    76:fb:cc:4e:17:ad:82:bc:11:bd:93:2b:1c:ae:97:
                    13:38:bf:a0:76:63:de:37:b0:27:17:3a:f1:67:44:
                    94:b6:74:48:5f:5c:e1:3a:3f:0c:62:0c:b9:b3:dd:
                    5f:c2:ae:57:6c:ff:e0:c3:29:4e:58:41:04:3e:14:
                    ac:11:25:29:05:b1:5c:57:06:7a:72:7e:3a:0e:c1:
                    ca:3e:9e:31:94:d6:e9:31:01:e5:ef:e8:20:5b:9e:
                    a5:d5:74:7b:72:bd:39:f6:f2:df:50:38:f2:61:02:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:52:1B:07:85:6E:18:93:FF:90:73:32:F4:79:D5:E5:9F:26:36
            X509v3 Authority Key Identifier:
                keyid:21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/3137302e38302e3232312e302f32342d3234203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:05:3d:6e:bd:7f:ef:80:91:5c:0e:b9:3b:db:7e:1b:49:
         b9:4d:4e:bc:1e:6a:53:33:1d:53:85:33:fa:18:39:05:32:49:
         89:da:2e:ec:f1:16:9e:db:03:e2:7c:f9:9f:26:37:b3:59:70:
         43:ee:68:d7:b5:95:c2:b7:28:37:2b:0e:49:9f:cf:f1:95:4f:
         83:e3:84:d8:6b:a0:45:07:64:89:3b:84:77:ff:4a:2b:b1:ed:
         07:c0:a2:eb:33:46:4b:0e:a2:c2:9d:6e:2a:ff:b1:ab:a9:6e:
         86:a4:38:a8:f4:9c:a7:ff:3a:78:71:a9:a6:eb:60:67:1c:50:
         4c:ea:52:e8:74:7f:2e:31:50:f5:50:37:55:2e:95:f5:f6:ed:
         4f:f1:5e:cd:38:11:6e:20:dc:6c:ef:ba:17:2b:8d:18:49:3d:
         13:00:81:00:dc:a5:1e:d2:39:9c:15:53:28:ec:60:3e:92:85:
         85:b6:2f:4b:1d:3b:65:fa:37:0b:6e:ae:a9:72:b9:a0:1b:7c:
         af:e6:2d:01:ce:7f:e1:b5:bb:6d:a3:9e:47:b9:59:09:e8:aa:
         c5:cf:04:0e:dc:ff:53:bd:be:3e:22:7d:f2:29:05:9a:20:52:
         62:25:b1:06:e4:1f:25:87:e3:22:d4:33:23:9f:7b:84:83:cc:
         eb:28:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:52 2024 by rpki-client on console-fra.rpki-client.org