Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          VkdZE2zYESHKgFkMbZ5lw7bEZSvrAMrOwjzmhUfG/2w=
Subject key identifier:   D0:3B:81:EC:78:12:48:F6:68:44:F3:30:61:39:E1:0B:FE:95:80:CD
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       4336F50692B8CF7742A4AB7C7CDB276057906BA9
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa
Signing time:             Thu 04 Apr 2024 15:53:29 +0000
ROA not before:           Thu 04 Apr 2024 15:48:29 +0000
ROA not after:            Thu 03 Apr 2025 15:53:29 +0000
asID:                     265041
IP address blocks:        170.150.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:36:f5:06:92:b8:cf:77:42:a4:ab:7c:7c:db:27:60:57:90:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Apr  4 15:48:29 2024 GMT
            Not After : Apr  3 15:53:29 2025 GMT
        Subject: CN=D03B81EC781248F66844F3306139E10BFE9580CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:16:4a:18:e0:77:4b:b0:42:48:ea:8e:92:
                    36:2b:ab:ae:64:c8:7f:60:ed:23:bc:25:e4:f3:7e:
                    ec:8c:b7:4a:42:6b:9c:48:d1:8a:91:c2:81:bb:a2:
                    d9:27:2a:04:7c:a3:c4:1c:f4:a0:e5:f0:cc:48:8c:
                    bf:84:5e:80:55:8a:31:15:9f:00:11:b5:f5:a3:c1:
                    14:eb:c3:d9:42:04:7f:c3:68:e7:2d:3a:6c:27:58:
                    75:52:86:bf:0d:6c:86:01:91:69:e8:e7:72:42:87:
                    af:00:6f:70:ed:50:21:f3:6b:82:38:9b:73:6e:00:
                    e0:4c:b5:da:3f:ca:0a:ae:8a:dd:c5:b1:8f:6c:37:
                    2d:c3:94:f4:0c:0e:7b:30:eb:c0:63:4a:2c:12:58:
                    82:9c:60:47:d6:ee:38:72:bc:31:aa:fa:67:1f:26:
                    98:04:1c:5b:db:a3:aa:65:d7:82:d9:1d:33:f7:47:
                    e1:c2:e4:fd:f2:f9:c8:66:fe:ae:e5:cd:9f:99:eb:
                    3b:f8:c7:1e:bf:26:25:05:c3:98:ea:98:ab:b6:44:
                    e2:fd:c1:69:c1:bc:bc:d9:f5:85:c8:f2:90:b3:be:
                    88:67:27:d9:f6:13:76:60:66:6c:bb:9b:60:1e:e2:
                    15:1c:46:73:37:02:e8:10:31:58:c0:85:91:c2:4b:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:81:EC:78:12:48:F6:68:44:F3:30:61:39:E1:0B:FE:95:80:CD
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:9e:a5:02:7a:d7:be:ba:4c:5b:50:52:5a:7e:b1:9a:19:
         e9:2d:a5:a9:9e:7e:f7:b3:34:63:25:3a:3a:4f:b3:f2:4f:0a:
         be:a9:dc:94:cf:11:02:92:1c:87:c8:ff:9c:ae:93:95:9c:bc:
         28:e7:6e:51:e3:f6:48:0e:54:60:3f:ed:5b:32:c2:dc:9b:80:
         93:41:a3:b1:72:56:bc:9a:e4:46:64:f7:c8:83:08:0f:13:94:
         b5:61:9d:a3:2f:d8:b1:2b:0b:37:83:f1:1a:d4:fb:58:a2:12:
         4c:21:4f:5e:38:8d:e9:5e:fa:d9:5b:6a:9d:ef:d8:0a:de:3c:
         0f:50:b9:04:d6:4f:0a:bb:04:7e:4a:c0:a7:2a:81:76:4f:09:
         57:65:a6:65:33:3c:2f:98:75:fa:95:5f:a4:39:19:f5:2b:9c:
         5e:7c:7d:e7:2a:11:8b:0e:84:26:dc:44:ea:33:ee:7f:df:ca:
         4a:90:7a:f7:84:8f:38:25:b4:5e:06:eb:ae:bb:f6:c8:17:bb:
         2e:54:42:49:e0:9f:14:34:b7:5c:2d:6a:09:19:81:6e:1c:ec:
         bf:00:34:95:2e:c5:c0:f7:25:63:35:66:ed:a8:5c:32:1f:b4:
         c8:78:2f:55:c5:72:77:a8:ea:0d:0c:52:91:9f:33:23:f3:6d:
         df:33:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org