Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          ZU0utCrRwhLf9cf3Ktz0r0JUiIjPDVqLBl0kACiWp9o=
Subject key identifier:   C5:00:B1:06:D1:65:1A:2A:EC:8F:FD:19:67:0F:63:D8:2E:79:2D:88
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       0B7D918E401C87311A46B345AFF19720A3490A8E
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa
Signing time:             Thu 04 Apr 2024 13:08:43 +0000
ROA not before:           Thu 04 Apr 2024 13:03:43 +0000
ROA not after:            Thu 03 Apr 2025 13:08:43 +0000
asID:                     265078
IP address blocks:        170.233.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7d:91:8e:40:1c:87:31:1a:46:b3:45:af:f1:97:20:a3:49:0a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Apr  4 13:03:43 2024 GMT
            Not After : Apr  3 13:08:43 2025 GMT
        Subject: CN=C500B106D1651A2AEC8FFD19670F63D82E792D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:86:32:9c:ef:40:82:dc:5f:13:fa:f4:4f:
                    25:f6:d1:92:c9:79:a7:74:33:26:18:a6:53:1b:c6:
                    ba:1b:ca:2e:bc:13:49:7f:8a:1e:ec:e3:9e:54:76:
                    0c:50:97:98:f5:5c:ad:da:2c:83:56:80:f6:65:ae:
                    f0:27:34:cc:4f:19:ae:ef:0f:bb:a7:a3:23:f0:fe:
                    99:8a:50:9c:9e:25:69:b4:e7:05:fc:7a:25:67:be:
                    d3:dc:af:fc:7e:57:d0:e9:53:bd:46:a7:59:61:5d:
                    41:88:01:90:07:31:d0:9d:89:97:a6:5d:ca:b6:10:
                    45:12:56:34:c0:99:23:2c:2b:81:d0:f9:74:db:28:
                    b5:7d:ac:c7:58:d8:3e:8c:ed:e7:2d:d5:49:b1:50:
                    93:02:6a:72:75:fd:e3:42:35:14:97:9b:e6:91:29:
                    4d:9a:4e:9b:e5:0d:f4:6b:96:73:d1:b7:03:48:3f:
                    54:45:cb:d2:2b:a9:4e:c3:ab:08:47:2f:eb:da:63:
                    df:22:2c:e2:2e:01:58:1e:fd:47:a4:9d:95:1c:32:
                    37:7a:71:6f:08:b7:ac:b4:b4:6d:aa:f8:c7:81:ba:
                    c6:5d:63:f2:48:62:c1:62:80:9c:53:3b:93:11:46:
                    99:d9:e0:e9:b5:7e:1a:5f:e7:7e:c8:f8:3e:80:05:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:B1:06:D1:65:1A:2A:EC:8F:FD:19:67:0F:63:D8:2E:79:2D:88
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:88:08:82:2a:c5:ec:5b:9d:51:0a:91:68:22:b9:5d:2f:c8:
         c9:11:29:e2:09:3b:e4:5e:05:ac:1b:d1:fe:4d:91:ee:db:3a:
         29:81:a2:5e:44:07:5e:d3:fe:f9:59:e5:14:e4:13:16:07:74:
         21:94:eb:1c:d7:75:3d:da:67:fb:c4:2d:c8:6d:ae:1d:b4:54:
         4f:7a:ba:77:af:5f:34:90:4f:de:e9:7d:3d:b0:96:83:8d:2e:
         47:5c:5a:b8:84:3f:ba:9c:4b:d4:01:31:b7:7d:3f:47:ca:34:
         ae:cf:3d:c6:ac:93:23:88:0d:62:5d:28:e5:90:31:9d:ea:b6:
         70:45:2b:55:02:5b:33:dc:e6:2e:18:c4:f9:93:11:b6:d1:0e:
         90:72:0a:76:c7:5a:e8:8e:37:aa:c9:f5:99:42:14:93:e7:27:
         06:1a:c6:b4:8a:12:55:97:30:f0:3c:29:f7:12:79:ab:21:ac:
         b1:32:13:83:27:e8:83:df:4d:5a:db:82:34:ea:55:1f:01:bf:
         77:a5:d7:84:14:02:b3:b9:dc:43:04:13:17:82:be:78:14:01:
         89:2d:d4:40:38:be:f9:f2:29:dd:30:26:ec:e8:5b:d9:21:e0:
         4b:33:f7:34:12:22:ae:e5:08:ac:52:2e:f2:b4:95:1f:a9:0f:
         e1:a8:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:53 2024 by rpki-client on console-fra.rpki-client.org