Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa
File:                     3137302e38332e3230342e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          QUfXs0kvSWORW/ViEZxtree3Ad/MaKqgvGHlfvwjz7s=
Subject key identifier:   29:D4:94:A6:DD:CB:7C:77:85:CC:D7:CD:E4:1A:2D:66:10:D4:D7:38
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       0B2286FDDD6FE26D61B0AF8BA9F3A2B777AF19A6
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     53236
IP address blocks:        170.83.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:22:86:fd:dd:6f:e2:6d:61:b0:af:8b:a9:f3:a2:b7:77:af:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:10:0d:dd:f8:29:19:44:87:98:b4:52:92:
                    34:21:99:3f:d0:d2:cc:d6:48:cf:2a:99:6c:e2:71:
                    23:89:18:0c:55:5c:00:ec:77:47:63:03:45:2f:b1:
                    d5:ae:c2:b4:5a:1b:af:6d:b7:f8:af:06:9d:32:94:
                    b5:53:2b:49:2e:82:16:05:c1:24:41:a9:2c:53:df:
                    4e:bd:2f:35:d3:e2:5e:ff:13:ff:07:33:f5:c2:4e:
                    af:51:f5:09:c7:2f:a1:41:08:7b:ff:62:f0:9e:03:
                    e3:15:7d:2d:bb:fd:c2:99:45:38:c3:76:98:59:92:
                    29:db:7f:ab:63:c4:7c:6d:a4:30:c4:37:ff:41:84:
                    6f:21:95:4a:4a:66:f9:de:c2:5e:ad:58:7f:55:92:
                    01:b4:bd:f3:65:1f:ab:6d:90:d1:14:a6:23:a7:a2:
                    27:34:a1:92:e9:0c:b2:f3:a3:fa:1a:43:9f:b3:ae:
                    d7:3c:ad:3e:4a:52:4f:b6:e2:3a:3b:55:45:e3:12:
                    eb:44:d5:92:07:88:04:3b:a5:e9:23:66:c9:16:b2:
                    80:8a:6c:40:f8:11:d1:f2:71:c2:c4:e5:08:6c:57:
                    1b:70:6a:dc:37:80:47:52:dd:cc:2f:f6:7b:99:84:
                    53:50:e3:89:6b:b5:2a:1e:ed:17:60:94:09:99:7a:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D4:94:A6:DD:CB:7C:77:85:CC:D7:CD:E4:1A:2D:66:10:D4:D7:38
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:38:11:62:8d:56:64:fa:41:48:11:c3:de:3f:07:68:ea:ce:
         b1:17:66:e5:76:5d:17:49:64:70:54:6f:78:78:4f:8d:89:b5:
         da:b5:5e:9e:da:8a:4c:60:1b:38:3a:c3:3f:5d:f5:a7:b8:cc:
         fb:c5:38:71:27:e7:74:85:9b:4a:21:27:cf:ab:40:8a:f3:61:
         de:ad:9b:8c:b7:75:51:9e:a2:06:ed:19:cd:97:ce:5c:f8:86:
         b4:55:4c:ab:25:06:34:fb:ce:8f:77:57:31:bc:2c:c6:29:0d:
         a7:c6:6e:02:b0:38:4e:41:81:2a:8e:4a:e5:43:38:be:e7:a1:
         fa:85:b9:38:f1:10:e1:b2:a5:fd:f5:c6:40:a5:b2:8c:29:c9:
         1d:af:81:95:0f:cb:39:55:6f:ab:1e:4e:44:8a:09:8c:c4:22:
         5d:ac:02:56:cc:04:d6:a1:89:a7:91:24:23:05:57:e1:96:f2:
         8b:a0:6c:30:7e:7a:ba:d4:d5:9f:d6:63:79:1e:6f:2f:22:6d:
         7a:f2:d2:fb:3f:97:50:6d:94:e3:ec:83:67:6a:36:fc:82:b7:
         c6:40:93:17:d1:84:bf:f1:97:05:23:eb:b1:ef:2f:9d:d3:97:
         32:62:04:35:54:d7:ea:b9:53:5e:97:bd:f0:24:e1:27:30:27:
         ee:91:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:06 2024 by rpki-client on console-fra.rpki-client.org