Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          5Ny8Yp2weBPdXFQdb7ZOExrfjfv6Gjdu2rErbX5oAYo=
Subject key identifier:   52:FA:3B:3D:AF:D5:3C:4B:9E:9F:71:EE:06:83:85:57:D1:71:C4:C4
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       745BEB82B3BF42EA3A036F1ED948981A2AFBBE38
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 04 Apr 2024 08:40:47 +0000
ROA not before:           Thu 04 Apr 2024 08:35:47 +0000
ROA not after:            Thu 03 Apr 2025 08:40:47 +0000
asID:                     266514
IP address blocks:        170.244.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5b:eb:82:b3:bf:42:ea:3a:03:6f:1e:d9:48:98:1a:2a:fb:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Apr  4 08:35:47 2024 GMT
            Not After : Apr  3 08:40:47 2025 GMT
        Subject: CN=52FA3B3DAFD53C4B9E9F71EE06838557D171C4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:9e:c0:f9:a3:71:39:6c:87:3b:22:fa:9d:
                    f5:02:47:1a:dc:24:3f:d5:39:6d:f4:04:ec:38:fc:
                    14:60:84:00:f9:98:7c:d0:fe:6c:9d:9f:77:31:e1:
                    df:f1:06:e5:7c:fd:74:46:aa:de:e0:63:8a:a3:fe:
                    96:3f:c9:61:e5:ed:95:ca:36:61:ca:67:94:08:a7:
                    11:db:d8:6e:bb:26:e3:44:63:00:8d:f8:7f:c8:5e:
                    1e:f9:ed:53:3f:dc:6e:cd:63:9c:bf:5e:82:2d:9a:
                    2a:ec:79:15:10:dd:5e:57:94:0f:11:46:64:e5:28:
                    2f:d7:31:cd:5f:37:75:40:a0:b8:19:aa:a5:cf:f5:
                    d3:d4:a7:9d:bb:2e:ac:89:23:c2:6e:cd:7f:ee:51:
                    d0:27:b0:8f:bc:95:bb:0e:45:e8:24:10:96:40:e5:
                    55:89:69:7a:d7:61:07:6f:2c:6a:92:a2:63:33:09:
                    eb:98:cc:c4:39:73:bc:e8:91:49:42:be:df:03:d1:
                    b1:ac:de:c6:c0:ad:cb:51:e0:00:32:04:c6:5e:5c:
                    17:ce:25:01:ad:38:84:ab:09:05:6c:3b:ba:0d:81:
                    f2:4a:dd:ad:a7:09:55:1d:26:23:db:5b:f3:71:bd:
                    2e:a8:9c:7e:69:bf:7d:c2:f3:5d:6e:9c:44:93:e1:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FA:3B:3D:AF:D5:3C:4B:9E:9F:71:EE:06:83:85:57:D1:71:C4:C4
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b5:8f:81:97:16:1e:24:c0:be:ff:02:09:6c:a9:7f:7b:4e:
         d8:eb:b8:9d:10:8f:3f:1a:22:0d:6d:78:4e:c9:cd:65:15:80:
         a8:5b:b8:6f:1f:85:46:43:6a:88:6f:89:69:ba:74:9b:33:d3:
         5d:d0:4b:22:33:5e:46:38:ee:3d:ac:00:33:ad:fe:5b:0f:5b:
         56:7f:75:5f:68:cb:63:60:1c:06:d8:0d:59:3b:1b:be:bc:6f:
         07:a8:b4:57:46:95:e8:c9:fe:e2:3c:7d:7c:55:03:c0:7a:4b:
         c5:ff:e9:46:93:73:38:04:4e:5c:b7:56:0e:e1:09:11:07:9f:
         1d:7a:97:cb:97:aa:10:e4:d3:91:14:6f:fc:aa:33:30:58:df:
         e1:c7:58:52:11:19:fe:98:8a:0c:aa:88:70:52:a7:e3:6a:e0:
         f4:c8:46:c6:fb:b4:4a:b1:9d:d6:ee:5f:a6:d6:da:15:19:1b:
         6d:0b:ad:4f:4b:40:b2:e1:07:a3:dd:75:70:89:af:c1:4d:80:
         a0:2a:80:ac:99:1b:05:0c:4c:1e:4b:9b:97:f6:07:45:04:47:
         90:98:74:24:9a:11:1a:e1:65:ca:4e:20:3e:06:50:3e:60:0c:
         e8:52:62:65:49:f4:94:d0:00:f5:fc:54:3b:15:86:45:f8:45:
         da:75:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org