Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa
File:                     3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa (raw, json)
Hash identifier:          2ryOuC/WyQyZwf8tql4HYBlZAcJxtNmf0ldKXOMl7KA=
Subject key identifier:   A7:28:56:D3:3E:93:DF:D9:08:06:A4:0C:F2:B8:67:0E:02:FD:2B:FA
Certificate issuer:       /CN=83F0276570C6F4420470E10FE5542F0F878F7D89
Certificate serial:       12AA4889EFBFFE23B30519EFBDA96D95067079AB
Authority key identifier: 83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa
Signing time:             Thu 07 Nov 2024 13:59:39 +0000
ROA not before:           Thu 07 Nov 2024 13:54:39 +0000
ROA not after:            Thu 06 Nov 2025 13:59:39 +0000
asID:                     61792
IP address blocks:        170.247.236.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:aa:48:89:ef:bf:fe:23:b3:05:19:ef:bd:a9:6d:95:06:70:79:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F0276570C6F4420470E10FE5542F0F878F7D89
        Validity
            Not Before: Nov  7 13:54:39 2024 GMT
            Not After : Nov  6 13:59:39 2025 GMT
        Subject: CN=A72856D33E93DFD90806A40CF2B8670E02FD2BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:91:3a:bf:b1:b7:43:a8:84:17:8f:5f:b1:
                    8a:3b:49:ee:82:26:12:02:46:b3:3f:34:e7:13:bc:
                    74:fe:6f:b4:2a:83:db:27:1a:66:b8:08:41:0b:b3:
                    0e:a0:0b:e0:69:2d:e1:66:e7:2d:f4:89:3e:44:a2:
                    44:96:4f:6e:f5:3f:6f:7d:bf:c7:68:96:a2:67:5f:
                    ab:58:6a:25:d1:0c:1e:b3:1c:21:fc:99:44:c9:d7:
                    0c:c2:e5:fd:6c:44:2a:3e:13:b7:c3:6d:b8:b0:fb:
                    b9:31:50:c8:c9:1e:14:d7:d9:ac:3c:15:0d:21:d1:
                    e9:c1:63:37:13:9c:75:8e:5a:ec:63:bf:45:27:b2:
                    be:70:ee:bb:ee:b2:6d:d8:db:a9:3f:91:ba:4d:15:
                    b0:b4:c9:3e:49:58:af:f0:dc:18:51:fd:72:38:b0:
                    25:cf:21:d1:f8:1c:c3:75:4f:08:43:ac:9a:49:5f:
                    e8:42:9d:0d:71:e5:da:8d:4f:c1:e6:f6:ba:57:43:
                    47:e3:a0:87:6a:af:4a:6e:f8:51:a8:37:86:ea:ed:
                    0f:b0:3a:9e:c3:74:d8:a8:a4:8e:e3:7e:f8:b0:fe:
                    c4:6b:e9:e3:9a:2d:08:b7:9c:8a:ab:07:6f:42:ff:
                    2b:6b:32:21:f1:17:e2:67:e7:7b:ce:a5:04:b9:da:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:28:56:D3:3E:93:DF:D9:08:06:A4:0C:F2:B8:67:0E:02:FD:2B:FA
            X509v3 Authority Key Identifier:
                keyid:83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:d0:3e:91:ca:cc:ba:f0:8f:2b:16:38:ba:c1:2b:a8:d3:
         d0:cc:4a:19:5f:73:a8:72:f8:9c:b8:29:02:ba:1d:f8:04:9c:
         47:ef:3e:31:c3:0c:1a:f3:b3:25:cf:76:93:49:25:28:7d:ea:
         e6:ca:a5:0c:4c:2b:b1:bc:d8:20:41:8e:8c:4b:73:2d:41:b3:
         9f:a5:ef:28:01:fa:46:c3:5b:5d:14:b7:e3:4f:72:c3:10:bc:
         7b:54:d2:4c:b3:f8:09:db:74:ce:10:03:64:da:5c:32:d6:2a:
         6a:24:e0:d6:ac:70:30:8c:bf:27:49:a8:c0:86:41:56:1c:fe:
         23:63:4c:62:74:b9:e3:ef:e9:69:21:da:db:06:98:df:de:19:
         a4:8c:94:49:b1:ce:0f:fa:32:67:b2:34:1e:ca:6d:22:47:70:
         e5:60:c5:da:09:e5:fd:5a:c0:ec:7a:c4:67:76:c5:27:1d:b3:
         81:9f:0c:75:e8:ef:2f:1b:07:06:59:87:08:8d:db:06:c8:62:
         4b:f3:01:14:ce:29:f9:b7:73:bb:9b:ad:9b:40:99:a0:7e:98:
         90:0f:54:2e:d6:69:73:c0:c8:6e:24:5a:57:3c:85:2d:e8:5f:
         3d:38:a0:75:c2:b4:f8:f5:b8:a8:cc:ca:d6:c8:e6:71:63:6e:
         16:e2:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:24 2024 by rpki-client on console-ams.rpki-client.org