Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32352e302f32342d3234203d3e20323634303031.roa
File:                     3137302e302e32352e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          wWs6IOQIImSU6N+BRTh/VTX3MzsHW14b3FsMPO+LyDo=
Subject key identifier:   06:2E:2B:26:D9:5C:7E:BD:23:E7:8A:B7:52:FB:6F:CA:72:EC:16:78
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       3232CC32478A8FB381B59B3F93BD5F2B8F69552F
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32352e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:23 +0000
ROA not before:           Thu 04 Apr 2024 11:05:23 +0000
ROA not after:            Thu 03 Apr 2025 11:10:23 +0000
asID:                     264001
IP address blocks:        170.0.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:32:cc:32:47:8a:8f:b3:81:b5:9b:3f:93:bd:5f:2b:8f:69:55:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:23 2024 GMT
            Not After : Apr  3 11:10:23 2025 GMT
        Subject: CN=062E2B26D95C7EBD23E78AB752FB6FCA72EC1678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:29:a4:d8:04:c0:b0:25:b4:5c:7c:e1:11:
                    59:67:88:a7:de:2d:d7:bf:ed:f9:2d:ee:98:c8:0d:
                    b8:d7:20:00:c7:57:3f:88:9b:47:44:20:6e:fc:d7:
                    14:db:5f:59:91:22:b7:e7:e1:e2:69:50:aa:d8:36:
                    49:30:61:f1:ca:83:47:d3:4d:cb:63:99:9d:02:23:
                    41:1e:9c:62:2d:b2:95:99:a8:0f:c6:95:02:b9:c6:
                    67:a5:35:24:60:cb:f7:2f:cc:de:0e:94:11:65:95:
                    2e:03:2a:26:ca:23:3d:58:f4:45:6d:e7:9e:c9:ff:
                    d2:30:a2:02:4e:9c:29:44:32:ce:ac:6c:a5:b0:aa:
                    1b:1e:d4:ce:46:29:60:24:71:0e:2d:b9:91:c7:30:
                    16:82:3e:1c:59:17:cc:d4:31:6c:f9:be:d9:52:69:
                    75:0e:a8:84:3f:77:95:4c:aa:7c:25:52:c8:c8:2b:
                    4b:b1:1b:38:d1:bb:34:9a:cc:2f:35:6b:c8:01:ed:
                    91:de:04:b5:a9:1d:6c:6b:30:2d:1c:0d:cb:da:3a:
                    71:5a:1b:83:e0:64:a9:cb:91:37:76:7f:0f:5a:05:
                    e5:06:db:ae:f6:08:8c:4d:7c:91:82:a5:49:cb:d5:
                    a5:5b:24:9a:f1:3b:1c:67:ac:c5:92:2f:e5:08:19:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:2B:26:D9:5C:7E:BD:23:E7:8A:B7:52:FB:6F:CA:72:EC:16:78
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32352e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:05:49:6e:aa:e2:2b:a5:ed:b6:e1:4e:18:42:e8:2a:d3:
         02:8f:a4:fe:fe:de:f5:67:9c:5d:16:fe:55:9b:53:0d:ea:c3:
         64:c4:0e:f7:3b:5d:d3:fe:77:e0:86:1e:6c:5d:51:3f:ec:a6:
         9b:33:3e:34:c2:98:70:3f:d6:e8:ba:17:9a:c2:4e:21:01:20:
         ec:e1:96:62:ca:6a:e0:52:d4:d9:f7:86:8a:6e:7d:65:5b:d9:
         f4:e6:fe:3f:c1:b0:d2:96:e6:c4:6e:f3:10:d5:58:22:36:2a:
         19:2a:5c:bb:71:ee:63:dd:f2:5b:9d:a3:4c:cb:f9:25:58:49:
         93:d6:3f:cb:99:83:f3:bd:9e:d6:79:c3:b1:4c:8e:c5:f1:8e:
         9d:8e:24:16:82:7d:e7:24:10:8e:3e:9f:c0:1d:dd:a7:5a:72:
         09:e5:f9:5d:2d:27:be:a9:07:b4:2a:30:d6:b8:01:af:5d:7d:
         8e:6c:ea:76:d3:a9:e2:ca:a0:4b:2a:f2:59:ea:3c:94:da:61:
         5a:9b:08:9d:3b:fa:72:b0:e0:ea:00:25:b9:4c:ab:4d:6c:a2:
         44:4b:b3:17:a9:ad:95:fe:eb:00:95:8c:44:04:52:3c:35:e4:
         a8:74:e2:f9:eb:5e:15:89:0f:04:ab:97:05:14:05:ed:aa:0c:
         cd:37:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:20 2024 by rpki-client on console-fra.rpki-client.org