Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f3234203d3e20323636333338.roa
File:                     3137302e3233382e3138342e302f3234203d3e20323636333338.roa (raw, json)
Hash identifier:          /ftYF/5PQabM7uAKAOFwuiWaqNh+FCqHUJ1XJG8mKFQ=
Subject key identifier:   86:44:70:B6:A1:64:47:E8:B2:60:BD:E4:F9:C3:84:DC:D7:7F:0E:07
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       39A2076D93ECD9DC505404BC16ED2D0266EC9938
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f3234203d3e20323636333338.roa
Signing time:             Fri 24 May 2024 21:00:00 +0000
ROA not before:           Fri 24 May 2024 20:55:00 +0000
ROA not after:            Sat 24 May 2025 21:00:00 +0000
asID:                     266338
IP address blocks:        170.238.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a2:07:6d:93:ec:d9:dc:50:54:04:bc:16:ed:2d:02:66:ec:99:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: May 24 20:55:00 2024 GMT
            Not After : May 24 21:00:00 2025 GMT
        Subject: CN=3082010A0282010100F03003B831C49030CFB2E9D6D13EB0D034A5B75D14EEDE7EFB332DE4B39E2D3DD4248FB4A9EC75912BABD844C047BEF9FADA49B40B92CBE241E2F7CB2FF06C877E74AD2CA46D69C314BBD9DC1BF1936B431E8A9FCAFD21E969182FEC24B560D7630F6F6A646730C94D78DD42215450EF653FB37B046DF0D946F081F508813CE52F73956E4F4E7D16CB8C54042B6C59E0A8046BF342BDBEB4F41FCF74E5329D2F548C4C3C76190748416E50B15A395BCD3492CA361FDBB0DA527D31AB127DCDEF6C581CC6BAA5B80EC3CA62FC20C4B01755BF157B01D049CBCAF5B89D1BF3D798B72A129A7D1E15C08A6C0A84359608831465CB09516EDF4AA98681B6F0A7B2650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:03:b8:31:c4:90:30:cf:b2:e9:d6:d1:3e:
                    b0:d0:34:a5:b7:5d:14:ee:de:7e:fb:33:2d:e4:b3:
                    9e:2d:3d:d4:24:8f:b4:a9:ec:75:91:2b:ab:d8:44:
                    c0:47:be:f9:fa:da:49:b4:0b:92:cb:e2:41:e2:f7:
                    cb:2f:f0:6c:87:7e:74:ad:2c:a4:6d:69:c3:14:bb:
                    d9:dc:1b:f1:93:6b:43:1e:8a:9f:ca:fd:21:e9:69:
                    18:2f:ec:24:b5:60:d7:63:0f:6f:6a:64:67:30:c9:
                    4d:78:dd:42:21:54:50:ef:65:3f:b3:7b:04:6d:f0:
                    d9:46:f0:81:f5:08:81:3c:e5:2f:73:95:6e:4f:4e:
                    7d:16:cb:8c:54:04:2b:6c:59:e0:a8:04:6b:f3:42:
                    bd:be:b4:f4:1f:cf:74:e5:32:9d:2f:54:8c:4c:3c:
                    76:19:07:48:41:6e:50:b1:5a:39:5b:cd:34:92:ca:
                    36:1f:db:b0:da:52:7d:31:ab:12:7d:cd:ef:6c:58:
                    1c:c6:ba:a5:b8:0e:c3:ca:62:fc:20:c4:b0:17:55:
                    bf:15:7b:01:d0:49:cb:ca:f5:b8:9d:1b:f3:d7:98:
                    b7:2a:12:9a:7d:1e:15:c0:8a:6c:0a:84:35:96:08:
                    83:14:65:cb:09:51:6e:df:4a:a9:86:81:b6:f0:a7:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:44:70:B6:A1:64:47:E8:B2:60:BD:E4:F9:C3:84:DC:D7:7F:0E:07
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:c4:c3:88:0f:16:44:03:02:61:cc:ac:56:07:ea:4f:03:
         7a:c9:4d:51:d2:ea:f3:bf:24:bc:38:8c:bd:e8:6a:bb:ac:41:
         db:88:dd:a5:fa:8a:61:4c:af:65:9d:44:96:b3:43:2e:3a:fb:
         4f:43:1d:a2:cb:b9:0f:31:4f:0d:4e:bd:99:09:4d:78:ca:28:
         46:18:ff:46:0d:a8:82:48:c0:47:b7:ca:18:a8:ba:4a:f8:ab:
         91:85:d7:93:f3:c5:3b:d1:21:6c:d4:36:de:b3:95:37:38:da:
         77:6f:1d:85:05:70:12:6a:0d:7d:66:2f:fe:02:ac:d7:d3:04:
         8f:fb:48:28:98:d0:5c:14:77:b2:2c:ff:b6:14:bd:6b:3f:75:
         c8:94:a9:b3:97:9f:0d:40:df:54:1e:be:18:dc:8e:9b:2c:49:
         d5:8c:27:62:41:10:f5:91:ab:fc:67:dc:37:f2:c5:5e:96:b5:
         7b:91:b5:8c:3a:91:5a:0f:49:66:96:62:ae:dd:f9:16:12:0d:
         1d:23:a9:c6:f9:22:e6:5e:e4:af:94:1b:a4:c2:70:e2:85:cd:
         0c:9e:e9:bd:c3:4f:39:7d:5b:0c:99:d7:f9:b3:6f:14:67:c5:
         97:9d:e5:cb:17:6d:28:91:02:c5:be:33:ca:92:9d:ba:6d:de:
         12:b7:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:29 2024 by rpki-client on console-fra.rpki-client.org