Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa
File:                     3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          yN66IWMyKG56OigC2RWnFY44F22Ntj6tC9aEXIjAPvU=
Subject key identifier:   F7:66:A0:F0:E7:EB:8F:26:05:BC:30:29:B4:A5:0D:76:13:F8:9E:75
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       5A373A73E3C49F125FCB5C15C21CF9B0AB2979F0
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:28 +0000
ROA not before:           Thu 04 Apr 2024 03:47:28 +0000
ROA not after:            Thu 03 Apr 2025 03:52:28 +0000
asID:                     265181
IP address blocks:        170.233.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:3a:73:e3:c4:9f:12:5f:cb:5c:15:c2:1c:f9:b0:ab:29:79:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:28 2024 GMT
            Not After : Apr  3 03:52:28 2025 GMT
        Subject: CN=F766A0F0E7EB8F2605BC3029B4A50D7613F89E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:c2:4c:19:f1:aa:76:0c:28:e0:e5:84:3f:
                    95:d2:0b:9b:d4:53:01:90:47:c2:5f:5c:5f:fc:9d:
                    22:27:3a:bf:a9:f9:40:c3:7f:56:ac:9d:1a:6b:e8:
                    4f:c3:b1:ef:dd:0e:50:bb:33:c1:e6:dd:c9:83:e5:
                    f4:a9:97:af:51:03:d3:97:20:93:a8:e2:00:91:c9:
                    04:47:a8:9a:f0:8f:54:89:fa:6d:bb:e6:09:ce:7d:
                    26:59:0f:5b:80:f5:1d:32:0e:63:b7:82:be:55:a4:
                    63:1b:e6:30:1b:78:40:fa:e9:6d:69:c6:1a:c8:11:
                    c0:67:a8:65:d0:83:08:f3:e1:1a:fb:93:1c:03:75:
                    d0:0e:07:02:82:b8:b5:23:c5:06:54:e4:0f:d4:a5:
                    5d:4a:f2:3a:48:fe:f3:bd:6b:99:3e:44:65:45:e8:
                    ed:56:25:6e:fc:af:5c:fd:86:a7:f4:05:e7:cf:68:
                    35:93:93:5f:58:1d:b1:fc:ac:24:0e:57:57:de:69:
                    3f:82:6f:cb:a6:b5:f3:98:4f:f4:3c:e4:84:8e:92:
                    cf:a0:08:54:4a:da:37:18:19:ed:5a:f6:4f:c3:15:
                    55:7e:75:4e:64:af:97:57:f2:9b:b0:58:12:68:41:
                    68:9c:18:9e:85:44:61:51:93:08:90:86:f0:14:81:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:66:A0:F0:E7:EB:8F:26:05:BC:30:29:B4:A5:0D:76:13:F8:9E:75
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:a9:b4:20:6e:80:43:45:c1:e5:40:76:60:bc:e6:90:8d:
         c7:fb:99:b6:f3:7d:3a:82:86:09:2e:2e:b5:75:bc:12:82:92:
         99:1e:01:2d:13:64:7c:b5:60:02:72:84:8c:4f:61:26:28:10:
         1f:f9:b3:d0:eb:3a:f7:3d:08:dc:01:f2:90:be:a3:23:f7:02:
         7b:b2:3d:26:27:76:1d:f3:4f:26:41:f8:56:ae:fb:19:34:b1:
         fe:a2:17:d0:2c:a3:f0:b4:12:72:68:27:d5:a3:cd:ac:78:94:
         89:30:a2:79:91:80:7a:ee:d1:2d:ef:b3:87:51:6f:ea:82:c7:
         ed:9e:a2:11:a0:55:36:cd:b6:7e:e5:62:51:10:33:5d:ec:b8:
         7c:61:32:16:7a:6a:bb:d7:94:de:f1:32:40:d2:eb:fc:d1:12:
         63:dd:2a:7e:1b:91:2f:11:1b:8d:5e:3b:1c:20:af:ac:87:1e:
         25:2b:b0:5a:0a:1b:88:d7:f4:84:40:98:6a:a6:01:d6:ed:f6:
         06:10:bf:a7:be:8c:c3:8f:45:7e:21:e1:bb:5a:b2:a6:4a:f3:
         24:ab:73:9e:ee:b7:da:a7:94:cd:7f:fd:aa:4b:e0:38:9a:17:
         53:02:3a:61:4d:dd:b0:ab:bc:b4:d1:86:d7:9b:e2:fb:25:c2:
         49:30:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:19 2024 by rpki-client on console-ams.rpki-client.org