Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
File:                     3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          SlhKdE/2gDQfwFhw2x6SWE+27xTPZKHNfQ3iNzmYOwA=
Subject key identifier:   CB:E3:F6:D4:8A:D9:88:C2:68:70:C1:75:7A:05:84:DB:E9:F3:0A:41
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       3F38D1FABFA18FDF0E1997368BD17D8685836972
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
Signing time:             Thu 04 Apr 2024 16:38:52 +0000
ROA not before:           Thu 04 Apr 2024 16:33:52 +0000
ROA not after:            Thu 03 Apr 2025 16:38:52 +0000
asID:                     61901
IP address blocks:        170.254.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:38:d1:fa:bf:a1:8f:df:0e:19:97:36:8b:d1:7d:86:85:83:69:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Apr  4 16:33:52 2024 GMT
            Not After : Apr  3 16:38:52 2025 GMT
        Subject: CN=CBE3F6D48AD988C26870C1757A0584DBE9F30A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:d2:62:d7:16:db:9f:6e:c9:31:ad:d1:85:
                    5c:2c:16:d4:9d:93:3d:b9:45:35:48:99:1a:bb:e7:
                    fc:ff:bd:77:47:b3:23:9e:2d:fb:3a:da:b7:c1:b0:
                    3a:2d:8d:02:72:9a:e3:5d:14:9f:10:50:58:ae:1c:
                    32:56:7f:0e:f0:2a:2e:ce:2d:22:46:e5:64:77:70:
                    2c:e4:3b:70:c0:f7:49:cb:2b:59:90:db:02:0c:42:
                    05:27:f2:af:ae:77:4d:da:e7:b1:35:84:66:3e:06:
                    37:37:0b:7c:11:f8:cf:82:f2:11:f7:3d:60:b4:ae:
                    1a:d4:f4:8d:79:cc:24:9b:6e:c3:6e:b8:7f:53:45:
                    23:ff:28:50:94:de:5e:a0:90:8c:36:fe:27:85:72:
                    dc:cc:a4:9a:da:c2:20:7b:0b:8c:17:90:6f:80:bd:
                    c2:99:f2:3e:e2:7f:75:6e:21:e3:95:52:7f:bf:db:
                    ba:3c:69:d5:8a:a7:39:fc:2d:12:68:76:0d:7c:6c:
                    86:f1:16:18:7d:5d:82:1b:94:46:50:9b:b6:f2:cc:
                    91:27:8f:5e:60:e6:cd:ab:38:de:53:9d:1b:d5:90:
                    f3:a4:33:3c:c5:8c:15:41:3e:d0:9f:f4:62:bc:18:
                    52:64:76:93:ef:b4:c8:4a:c3:db:8b:a6:84:3b:66:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E3:F6:D4:8A:D9:88:C2:68:70:C1:75:7A:05:84:DB:E9:F3:0A:41
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:27:04:39:fc:9e:b6:03:d1:0d:a6:7b:04:6b:34:12:c1:b3:
         24:9d:c6:6f:a6:f5:51:de:7f:bf:82:76:d1:c0:e1:8f:69:c3:
         a1:37:41:91:db:02:9d:e1:e3:c9:82:6b:c9:80:12:d0:97:70:
         ed:a7:5f:34:98:e2:13:bd:f5:07:11:84:c8:e9:cc:a0:4e:96:
         3f:ea:e8:3f:22:36:ce:cc:52:a3:ff:06:14:9f:24:b3:a9:41:
         13:e6:da:11:0d:0e:ab:b0:7f:05:34:ab:87:71:6c:0a:04:2c:
         9c:a1:94:7c:e3:26:5c:21:d6:b9:69:ad:a9:d4:4f:63:1e:4e:
         46:64:6e:5d:cc:91:cd:e7:14:59:2b:e6:af:b0:f5:98:e0:dd:
         ed:4c:68:f6:a0:07:a6:28:d1:9c:e8:96:7a:a0:e2:a3:29:02:
         3c:48:c9:21:b2:23:e3:15:6b:20:d1:c6:a0:c5:c4:d8:78:f7:
         f2:54:c5:3e:f3:7c:5a:ba:c0:cc:63:82:13:2d:34:05:98:0a:
         5e:ef:a8:e2:00:bd:64:e4:41:af:94:11:48:94:87:38:db:e1:
         4d:38:e4:74:ab:90:f2:4a:05:8b:46:03:75:c5:00:75:eb:02:
         bc:99:2b:ad:1d:2f:70:c7:c3:d1:75:7e:10:7f:18:d1:b9:32:
         6c:e4:1b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org