Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e35302e302f32342d3234203d3e20323635303232.roa
File:                     3137302e38342e35302e302f32342d3234203d3e20323635303232.roa (raw, json)
Hash identifier:          arPEcvqVaq7QODgFPPFhTtuLM6PU8bkwksgeNtJzrFs=
Subject key identifier:   AE:32:20:E1:02:30:D5:4F:BB:2C:47:74:9A:CE:54:65:3A:F3:47:C7
Certificate issuer:       /CN=75730747EE0CCC4C66AB50829F21FF172F57999D
Certificate serial:       AC6DEAF64DC11D707B48C89DB6D99EAE96DFC8
Authority key identifier: 75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e35302e302f32342d3234203d3e20323635303232.roa
Signing time:             Thu 04 Apr 2024 05:48:28 +0000
ROA not before:           Thu 04 Apr 2024 05:43:28 +0000
ROA not after:            Thu 03 Apr 2025 05:48:28 +0000
asID:                     265022
IP address blocks:        170.84.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl
                          rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:6d:ea:f6:4d:c1:1d:70:7b:48:c8:9d:b6:d9:9e:ae:96:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730747EE0CCC4C66AB50829F21FF172F57999D
        Validity
            Not Before: Apr  4 05:43:28 2024 GMT
            Not After : Apr  3 05:48:28 2025 GMT
        Subject: CN=AE3220E10230D54FBB2C47749ACE54653AF347C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:19:37:9c:bf:e4:6e:cf:c2:f2:1a:3f:b1:
                    a5:67:9f:26:3b:3c:7f:50:59:55:9a:b3:c3:22:32:
                    14:32:7e:0e:5f:59:af:80:b7:d1:96:68:31:78:b8:
                    6f:b9:c7:8f:48:13:67:99:99:a5:8a:42:08:ba:cb:
                    39:de:36:9e:b5:c1:dc:8c:1f:21:e2:de:d9:93:50:
                    87:37:aa:c6:53:ce:03:fe:e1:81:ac:4d:0a:7a:66:
                    61:9b:52:f0:b1:b7:74:75:00:36:60:8e:29:7d:bd:
                    87:cb:0e:ef:ec:ff:6d:bb:a9:34:57:ba:3e:1f:61:
                    63:6f:d4:0c:fa:bb:7b:86:d0:2e:a0:f2:c4:fc:bc:
                    50:6f:c2:7f:37:1e:c9:b0:f3:02:8e:27:66:db:26:
                    f5:20:f5:16:df:3f:58:bc:d3:58:81:32:e8:38:2d:
                    32:6e:90:1c:12:f5:01:d0:71:b1:16:fd:c9:a0:5c:
                    2a:ae:76:38:40:3f:a9:0a:14:75:26:77:dd:ae:11:
                    bc:dc:08:f9:b5:da:d6:e4:e2:62:43:58:d2:51:ea:
                    07:8e:0f:63:b4:ad:63:51:3b:f0:0c:06:6a:d9:4b:
                    e3:cb:5e:ce:9b:06:1d:20:6b:bb:17:0f:da:64:34:
                    c6:9c:ff:98:a9:24:76:f7:c5:f0:f4:15:26:b9:8f:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:20:E1:02:30:D5:4F:BB:2C:47:74:9A:CE:54:65:3A:F3:47:C7
            X509v3 Authority Key Identifier:
                keyid:75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e35302e302f32342d3234203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:d0:28:f5:b5:75:bb:e6:f0:a5:58:bb:ee:82:1b:7e:2e:3f:
         d4:37:75:f1:17:43:0c:69:84:77:31:2a:d7:3a:23:b1:49:c0:
         74:56:55:e0:e8:2a:50:ce:6d:9c:6b:70:68:e4:07:f7:a2:c4:
         86:f0:8f:85:c0:82:9b:f1:3f:ae:31:f5:09:46:21:c4:3c:32:
         e5:58:23:18:01:f8:bf:35:9d:3a:f2:53:a9:1f:bf:bb:8c:98:
         d4:64:ad:19:5a:09:ee:39:58:22:30:b3:63:da:c7:94:b0:f6:
         fc:41:23:96:3a:1e:80:59:cb:cc:fa:9b:2d:07:fa:f9:8a:5f:
         df:60:d1:ac:f3:97:f1:f2:dc:04:58:b4:09:98:f7:fa:d1:34:
         ad:c2:6b:bf:e5:26:cd:78:ae:ff:d4:db:ed:8b:03:32:41:24:
         1f:b5:34:85:66:a3:6d:7d:04:a7:e8:1a:ab:ef:39:60:9b:60:
         8b:54:45:2a:bd:05:bd:cc:8a:9d:67:f1:ea:3f:f8:2d:cc:35:
         ef:16:f4:2f:d3:45:54:e4:32:95:0c:12:0a:84:be:19:0b:d5:
         d7:55:bc:0b:e3:c5:11:f2:24:53:b1:ae:bd:87:4d:b3:b6:9e:
         fc:11:b2:02:21:10:10:db:28:5f:4d:90:ae:01:83:d9:28:d6:
         84:a7:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:07 2024 by rpki-client on console-ams.rpki-client.org