Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
File:                     3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          klXblZPZT/NE7Ud22I/PoNX/CJ91owFPsSqHItq2mzA=
Subject key identifier:   30:EA:A4:4A:FE:14:80:17:94:19:B2:EC:6B:21:C6:D9:9F:75:1F:AF
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       50A3CAE3FE46121EBC4A22A77D9EDD0BAD3F0EC7
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:37:24 +0000
ROA not before:           Wed 10 Apr 2024 12:32:24 +0000
ROA not after:            Wed 09 Apr 2025 12:37:24 +0000
asID:                     28201
IP address blocks:        170.239.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a3:ca:e3:fe:46:12:1e:bc:4a:22:a7:7d:9e:dd:0b:ad:3f:0e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:32:24 2024 GMT
            Not After : Apr  9 12:37:24 2025 GMT
        Subject: CN=30EAA44AFE1480179419B2EC6B21C6D99F751FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:6f:84:08:3a:3f:87:58:46:ad:58:92:f2:
                    f8:57:80:08:f5:05:51:64:e7:ed:47:34:dc:43:a2:
                    0d:13:09:26:96:d6:9b:5e:5a:67:9d:8e:8b:17:4d:
                    56:49:0b:ac:bc:6b:80:83:f9:be:78:bc:99:15:3a:
                    cc:b9:25:bd:68:5f:5e:b1:23:73:99:88:5c:ff:fd:
                    ae:f5:96:f0:27:84:18:bb:eb:f9:85:30:af:f9:f8:
                    96:df:12:ed:24:c4:e2:9b:d2:67:86:ba:20:2d:c4:
                    36:e6:85:4f:2c:15:0f:da:ad:72:fa:d5:5e:5d:03:
                    ca:02:8e:d9:e3:a4:f4:8c:f4:dd:9c:d9:41:63:85:
                    6f:79:fd:7a:f0:12:2d:80:f6:63:99:44:5b:76:e9:
                    41:5d:e0:8e:ca:c3:36:22:94:dc:76:14:88:63:36:
                    b2:b4:30:25:a6:d4:30:e5:f7:b1:84:08:8b:40:ee:
                    f0:bc:51:7e:61:82:bc:26:86:0c:88:e8:f6:3e:f9:
                    3a:ef:e0:de:a2:1c:f0:0b:ff:0c:68:00:f1:ea:5b:
                    d1:dc:9c:54:ae:53:74:4b:a4:99:2d:a4:ae:8d:97:
                    be:70:55:5d:2d:23:f4:a5:5a:d4:c0:ef:12:14:cb:
                    d8:3f:e7:00:ff:78:c5:d9:eb:fb:9d:ab:fe:dc:d1:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EA:A4:4A:FE:14:80:17:94:19:B2:EC:6B:21:C6:D9:9F:75:1F:AF
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:71:b4:53:da:4b:71:cb:dc:9f:ae:50:1a:45:96:fd:fc:a0:
         64:57:09:70:8e:e1:22:16:76:98:7d:c9:d2:fa:69:d6:f9:a4:
         2a:f3:68:b4:1a:65:84:f1:8e:38:a9:94:74:12:54:78:4c:05:
         b9:8c:c2:f2:9c:46:e8:a1:8a:14:f5:54:36:c3:d1:7b:8d:7e:
         b4:55:79:50:af:e1:24:68:c1:b2:64:bc:6f:83:c2:6d:5d:16:
         85:cc:1c:79:e2:34:f2:12:ed:f7:9b:37:3d:c3:8f:2c:6a:3f:
         17:26:a4:ff:88:2f:0f:2c:41:d1:08:97:fb:e9:48:d3:8d:fd:
         f8:ba:30:32:1e:6d:bd:22:09:d4:a4:5f:df:59:af:a5:ae:3f:
         73:e9:da:ab:7a:b0:4f:8c:48:00:5d:e9:0f:bf:6a:33:7d:04:
         e5:8d:c0:62:18:2a:4e:e2:ac:97:e2:85:46:d8:85:96:f9:b2:
         09:e3:4f:46:41:70:c3:50:36:bc:16:3e:88:ce:e7:a2:45:18:
         bd:d9:e5:4c:8d:70:22:2c:6e:1d:a1:54:62:65:77:cf:17:f9:
         98:ed:2b:11:bc:3f:f3:d8:4b:1c:69:d4:fe:f6:71:f7:07:ab:
         2e:3a:44:ac:dd:6b:21:fa:0d:03:39:56:b9:5b:09:0b:b2:b6:
         a5:2a:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org