Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa
File:                     3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (raw, json)
Hash identifier:          Zy2jE5TPgy30XTsJcKJkevwMpvhMeToYX6Canomj3pA=
Subject key identifier:   AD:07:DA:7E:D7:12:3D:05:58:E4:7C:69:D4:AB:E5:13:60:48:41:28
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       56F85C7DE47126705010D3873FFBA033FAF96633
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa
Signing time:             Wed 03 Apr 2024 22:41:56 +0000
ROA not before:           Wed 03 Apr 2024 22:36:56 +0000
ROA not after:            Wed 02 Apr 2025 22:41:56 +0000
asID:                     265081
IP address blocks:        170.233.180.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:5c:7d:e4:71:26:70:50:10:d3:87:3f:fb:a0:33:fa:f9:66:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Apr  3 22:36:56 2024 GMT
            Not After : Apr  2 22:41:56 2025 GMT
        Subject: CN=AD07DA7ED7123D0558E47C69D4ABE51360484128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:50:9c:d6:e8:de:49:93:b7:0c:89:60:66:
                    5c:c6:b2:f5:69:71:56:f5:81:64:7e:45:2d:9d:c8:
                    34:3e:b2:a9:1b:c7:09:da:61:a0:a2:98:c3:3f:ae:
                    f1:8c:a0:30:e2:4f:b6:65:ff:a1:db:9e:78:3e:4f:
                    5a:06:37:aa:67:c7:2f:a0:41:db:1e:c4:f0:a8:e0:
                    04:17:71:42:58:51:b2:29:bf:40:04:73:56:e9:8e:
                    8d:c9:16:d3:20:b6:0c:b1:8b:ee:12:1f:18:e2:a3:
                    a1:3f:ee:55:ab:e6:0a:6d:57:bd:bc:50:a3:14:89:
                    9b:50:b5:d2:d6:4d:89:d3:73:e6:46:42:97:58:1d:
                    ff:ac:2b:6a:c4:96:0c:4c:ac:d5:14:84:09:ac:89:
                    1c:aa:f3:2c:a9:2e:26:de:d9:70:94:65:ee:ea:c7:
                    26:59:54:e1:44:86:75:3b:f5:f1:03:28:9d:fb:ec:
                    b6:68:21:de:71:ed:81:97:b1:5f:77:43:18:7f:01:
                    42:8c:79:8e:5a:25:b6:a6:3a:e7:6e:2b:b7:80:0f:
                    fe:07:3d:87:1a:fe:df:db:26:56:64:f9:a8:08:42:
                    76:a8:06:2f:c7:d9:b7:e9:7e:3f:be:4a:59:7b:b4:
                    7d:ae:12:c0:d2:e4:35:6b:29:10:32:0a:04:66:a0:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:07:DA:7E:D7:12:3D:05:58:E4:7C:69:D4:AB:E5:13:60:48:41:28
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:1b:a1:90:64:8e:79:45:da:ad:6f:a7:84:48:64:86:99:
         a4:81:b6:c4:7e:bc:7b:27:43:7b:4d:2c:b5:71:a2:54:74:04:
         b5:19:78:98:6e:06:a3:8f:e5:9c:9a:07:d0:9c:bf:da:7a:ab:
         16:d8:87:fc:34:fa:6d:4d:f0:c3:c6:f2:bd:95:4e:12:f5:60:
         1c:de:8e:c7:1a:e2:f5:ad:b0:2e:17:83:1b:bf:9d:b6:8b:0f:
         80:22:a8:82:e8:28:41:0e:1b:8e:e8:1f:3a:0d:8c:b9:16:78:
         54:a5:1a:f6:02:e7:2c:c5:64:73:43:d0:c3:53:67:27:6b:ec:
         a6:62:29:23:26:1c:09:5e:31:5b:d4:db:78:6c:2d:9d:6b:96:
         2f:a0:60:be:33:1c:38:42:b7:26:09:6c:be:7b:7c:fe:44:e9:
         29:cb:4d:2b:e8:74:bb:0b:85:06:07:88:0d:45:31:90:88:e2:
         89:ef:e1:2d:b2:4d:8c:2f:4c:aa:94:16:57:8f:28:c7:9a:3e:
         89:24:23:8d:c5:1b:46:6d:01:91:0c:f1:f1:35:f5:2a:f7:5d:
         44:00:82:a0:62:ff:8f:87:81:93:78:98:c1:ee:01:3d:ca:ed:
         11:8c:ab:de:ed:a3:78:1f:e5:da:d7:86:fb:71:f3:f4:ce:a8:
         ae:29:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:11 2024 by rpki-client on console-ams.rpki-client.org