Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          XhfCeYYS9jcYq9SCVXYlvNgKW2GjpFhchFUKmFDKULw=
Subject key identifier:   C6:EB:FC:AF:20:20:5A:46:CF:28:8C:21:0A:18:47:58:B6:90:48:4F
Certificate issuer:       /CN=52F3DD15F1E61F19A918213318E706B1EA13C48B
Certificate serial:       66F85EE788BF1FB7DB0C136D641F3343B1935937
Authority key identifier: 52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa
Signing time:             Thu 04 Apr 2024 22:54:07 +0000
ROA not before:           Thu 04 Apr 2024 22:49:07 +0000
ROA not after:            Thu 03 Apr 2025 22:54:07 +0000
asID:                     266022
IP address blocks:        170.245.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 20:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f8:5e:e7:88:bf:1f:b7:db:0c:13:6d:64:1f:33:43:b1:93:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F3DD15F1E61F19A918213318E706B1EA13C48B
        Validity
            Not Before: Apr  4 22:49:07 2024 GMT
            Not After : Apr  3 22:54:07 2025 GMT
        Subject: CN=C6EBFCAF20205A46CF288C210A184758B690484F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:a6:96:dc:b9:d4:06:68:20:83:a7:83:ed:
                    f1:df:79:c6:c5:ab:df:01:e9:85:d8:0a:7f:cf:4c:
                    e9:50:a1:d4:44:a9:ff:90:70:63:c6:62:45:6d:5c:
                    4e:9f:e3:40:e3:c5:12:02:0e:d9:d9:88:33:92:45:
                    1a:fb:9f:19:de:e3:6e:b7:04:5e:e2:5e:92:42:eb:
                    87:cb:fc:e7:3e:06:70:bb:3c:86:1b:3c:8d:95:07:
                    02:64:9f:76:46:77:d7:fa:82:b1:3d:1b:cf:56:8b:
                    b7:9e:e5:a0:b3:60:a1:24:c4:d8:a8:52:34:3b:7c:
                    f7:e2:99:79:05:b7:49:30:20:d7:b5:e5:47:87:cf:
                    fd:59:5e:80:68:6c:53:f2:1b:36:77:b9:ae:68:f4:
                    48:71:d3:19:2d:ff:eb:8e:c2:37:d7:ae:b4:b9:53:
                    6c:0d:53:fc:da:a5:7d:5e:6f:03:da:a7:92:2a:64:
                    99:3f:37:91:03:ed:5f:46:52:f5:ea:58:fd:fa:fb:
                    27:77:55:de:00:c7:4e:a0:84:28:a0:e8:8d:7b:7b:
                    7c:72:a3:18:4c:d2:8f:74:a2:c7:ca:9f:28:7c:65:
                    81:a2:48:df:80:8e:43:c6:fc:ef:44:06:0e:48:5e:
                    1c:04:ec:1e:ca:86:0c:10:65:9c:43:58:43:80:05:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:FC:AF:20:20:5A:46:CF:28:8C:21:0A:18:47:58:B6:90:48:4F
            X509v3 Authority Key Identifier:
                keyid:52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:86:30:62:f7:66:29:b2:51:e0:aa:18:33:9f:40:99:17:
         82:4c:16:96:07:44:03:a7:0f:24:6f:b5:b9:0e:da:9e:e3:1e:
         7d:58:b0:03:ff:54:d3:59:c0:e0:ee:4f:86:11:c3:7b:d6:8a:
         fe:f7:48:fe:10:15:c9:25:7e:3a:17:cb:7b:38:66:c9:af:2b:
         8b:1a:86:a6:5b:43:1f:14:93:94:7b:cd:57:01:1c:b4:e3:4c:
         de:aa:96:06:18:31:a2:6f:34:38:08:2c:a6:8e:5d:6a:cc:2e:
         fb:85:ca:94:a4:aa:76:75:91:8c:20:28:5a:89:9f:7b:88:32:
         ec:50:47:d0:d6:1e:51:23:4c:95:6d:b5:4e:af:a2:28:f0:92:
         e1:87:42:67:34:c9:a4:b3:2b:a0:8b:2d:57:60:4a:b6:a0:26:
         3f:84:be:a3:3c:89:c5:ec:a7:71:9d:ee:5b:f7:1b:9d:68:ea:
         cc:33:c6:b2:5f:e6:6f:f3:5b:23:6c:b7:f7:5d:24:92:83:ad:
         24:d0:65:b9:04:f6:26:13:e6:b6:e6:9f:2a:13:f3:5c:30:8b:
         c9:65:79:79:6b:07:f2:41:9b:f7:ab:6e:fc:b7:e6:c2:31:bd:
         be:b2:06:d6:37:5b:14:eb:f3:94:52:f5:24:03:c1:d5:6c:62:
         3e:0e:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:42 2024 by rpki-client on console-fra.rpki-client.org