Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa
File:                     3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier:          YWXPjBxpkRNf24hmCrNdAQMXQSJ8bZuZBS//pY73RSg=
Subject key identifier:   DD:A3:15:34:F8:56:73:AD:19:67:14:CB:3D:43:8B:C3:E6:B0:AC:B4
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       7E8777E42082C165A97CA783EC1A9A9C7AE82427
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:36 +0000
ROA not before:           Fri 31 May 2024 22:35:36 +0000
ROA not after:            Fri 30 May 2025 22:40:36 +0000
asID:                     270764
IP address blocks:        189.127.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:77:e4:20:82:c1:65:a9:7c:a7:83:ec:1a:9a:9c:7a:e8:24:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:36 2024 GMT
            Not After : May 30 22:40:36 2025 GMT
        Subject: CN=DDA31534F85673AD196714CB3D438BC3E6B0ACB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:e8:1e:bb:ca:d5:b4:fb:24:53:76:ba:c5:
                    06:99:7e:cc:bc:65:33:79:49:c5:dd:ee:0b:ea:b9:
                    ee:8f:03:63:8c:9f:ad:29:82:47:ea:d5:79:fe:69:
                    c2:f3:fa:0c:a6:fb:2f:35:31:5a:83:68:07:90:9c:
                    9f:83:f2:c8:ff:84:96:8f:83:a7:a1:d0:59:3a:c9:
                    d8:f5:65:10:32:c6:e4:51:ad:2f:21:da:83:3b:70:
                    fb:ea:ce:40:95:42:b3:3d:df:6e:cf:e0:0f:d9:ca:
                    5d:58:a3:db:8c:28:87:6f:b9:59:65:c5:15:38:15:
                    c1:ef:6a:7a:fc:51:c0:ce:c7:9b:23:1f:07:26:54:
                    7d:ba:26:2f:83:a9:53:cb:f5:ba:32:e2:a7:71:c8:
                    58:6a:f1:30:dc:26:c2:7d:d0:12:2b:9d:09:dd:1c:
                    44:be:5e:64:90:98:c7:bc:d5:cb:94:06:97:ea:8f:
                    e2:87:af:44:b5:8b:30:6b:85:4b:e5:28:15:97:1b:
                    3b:2e:ee:0b:9a:b2:e6:c5:1b:b5:34:de:d6:e0:c1:
                    c2:1d:1e:a2:67:e1:32:63:b5:59:cf:c6:95:83:6e:
                    2b:8c:aa:4a:ff:ce:40:36:e3:e5:f9:31:4a:ad:0c:
                    7e:95:8e:7d:c6:a8:29:f3:50:a0:5c:80:e1:83:a5:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A3:15:34:F8:56:73:AD:19:67:14:CB:3D:43:8B:C3:E6:B0:AC:B4
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:17:ba:28:8e:86:eb:11:5d:11:c9:cc:64:cd:82:e1:15:3b:
         ab:05:b2:3b:e1:2d:a1:65:53:dd:a8:b0:97:84:1a:2c:64:3c:
         9e:d4:85:20:11:83:66:3f:9e:93:93:fd:b4:a0:ec:b9:64:da:
         e0:a3:49:df:e8:47:ac:ca:c5:13:00:ba:cc:54:b7:24:72:35:
         71:ff:e9:27:91:cc:28:73:b4:9e:82:82:2a:40:5c:ab:53:5e:
         96:68:81:7a:a0:22:d3:b4:1e:7b:58:fe:17:d1:fe:a0:95:b7:
         53:24:c7:cc:21:7e:16:20:0b:b5:bf:e6:51:50:15:e1:28:88:
         64:1d:92:97:9c:b9:f1:33:fe:e8:fa:74:ae:d0:a9:98:fb:8f:
         06:79:e2:66:09:53:96:53:00:29:7c:3e:95:ce:09:01:78:8e:
         83:b6:62:3a:ff:30:7d:bb:61:26:1b:8d:82:56:3f:25:8d:dc:
         80:9e:fb:ab:06:8c:50:a3:8d:82:fa:b1:19:40:a4:95:58:a9:
         6e:74:bf:d2:e4:35:2a:d1:e5:87:61:01:6a:40:d6:0a:1d:b1:
         71:b6:36:41:9e:4c:63:58:65:f2:d5:71:a5:52:69:ff:6b:da:
         0b:e5:1c:20:06:2c:25:c8:63:4f:c2:05:ee:23:6a:de:d3:a9:
         36:b3:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:41 2024 by rpki-client on console-ams.rpki-client.org