Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
File:                     3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (raw, json)
Hash identifier:          vhbKQpiIhE5AbuxxkLWfQa0jAZ2LRLxGhA6X3FBzg84=
Subject key identifier:   A5:07:0B:F9:3B:CC:35:7F:69:08:51:C8:9C:27:FD:F8:C8:3F:3D:87
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       34800260C0F086C84727F987C903B5FA23890020
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
Signing time:             Thu 04 Apr 2024 16:38:51 +0000
ROA not before:           Thu 04 Apr 2024 16:33:51 +0000
ROA not after:            Thu 03 Apr 2025 16:38:51 +0000
asID:                     61901
IP address blocks:        170.254.52.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:80:02:60:c0:f0:86:c8:47:27:f9:87:c9:03:b5:fa:23:89:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Apr  4 16:33:51 2024 GMT
            Not After : Apr  3 16:38:51 2025 GMT
        Subject: CN=A5070BF93BCC357F690851C89C27FDF8C83F3D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dd:f8:84:6f:02:b7:0b:16:f8:d3:50:7d:92:
                    91:13:12:0d:4d:fe:26:e4:a6:6d:3e:6c:68:08:3d:
                    cb:67:2c:3c:d5:95:7d:65:de:f2:0e:d1:2d:e2:e0:
                    23:11:85:63:61:67:a1:75:1c:bd:0e:49:34:ad:c3:
                    f3:81:27:b6:31:02:d7:14:9f:39:49:1e:ee:92:d5:
                    88:3c:36:64:83:a8:e3:b6:ef:d8:0f:46:61:9d:cb:
                    6d:26:56:e5:f4:5e:3a:bd:07:67:06:a2:dd:d5:e2:
                    81:f4:94:3e:16:70:3b:bb:25:f6:6c:3d:3c:0a:35:
                    c2:5e:c0:33:05:4d:16:a3:4c:0b:08:ba:ed:0f:7d:
                    2d:98:38:dd:62:81:9c:1f:01:31:f5:6b:54:a7:34:
                    ee:e7:6a:4f:a4:bf:19:9f:4b:38:51:83:c1:32:62:
                    79:fd:52:7d:69:ab:8a:e3:fe:ff:6b:42:f8:e3:1e:
                    4e:97:d6:30:bb:1a:19:db:7e:b9:eb:f6:4f:ea:66:
                    16:d1:ac:dc:dc:04:1e:72:27:e7:42:f6:fc:0d:bc:
                    7d:62:f9:0c:32:80:41:5d:e2:12:8c:95:1f:38:83:
                    35:05:2c:98:12:bb:25:36:8b:5b:0e:a5:65:97:99:
                    da:ff:0d:52:05:2f:8f:f1:23:2c:63:82:fc:16:80:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:0B:F9:3B:CC:35:7F:69:08:51:C8:9C:27:FD:F8:C8:3F:3D:87
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:33:be:c1:0c:e1:b5:6b:3b:4a:c2:de:82:87:c5:d1:92:
         7b:1d:4e:8c:ff:51:a5:3a:be:13:3c:f7:38:bb:75:ac:29:0e:
         96:99:90:f6:f4:25:b5:5e:af:45:77:66:71:c7:0c:05:b7:5e:
         1f:55:9f:4a:f5:e1:b1:1c:be:ee:a1:ae:14:24:8c:70:05:bb:
         c8:53:07:20:7d:2b:2b:12:6e:5e:fc:07:1d:db:9f:4f:00:d7:
         86:15:4e:20:82:97:11:ac:2e:70:3e:e4:6a:ad:8a:3c:49:0d:
         2a:74:55:7d:d0:7e:bf:08:2c:f7:ec:41:db:62:25:7b:f0:5a:
         52:13:f3:0f:94:94:e5:90:db:3b:04:c5:0b:be:01:4a:dd:0d:
         f5:5d:1a:2d:0e:ea:2d:39:2b:3a:32:b4:c6:21:41:92:d3:a9:
         95:f1:8d:9d:72:82:e7:8f:93:e4:04:3a:f2:bb:be:6e:87:a5:
         95:97:32:27:28:11:94:9d:8c:e7:1c:62:48:dd:14:fd:d0:41:
         b5:8b:53:90:db:92:88:c5:65:2b:25:98:b0:00:1f:56:47:d5:
         5e:0f:0b:3d:e9:50:2e:24:e5:88:a2:2f:7c:74:44:16:08:e6:
         20:d0:28:89:29:9f:f0:e1:a2:f1:81:c4:65:59:ed:4b:7e:2b:
         53:07:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org