Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32372e302f32342d3234203d3e20323634303031.roa
File:                     3137302e302e32372e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          MBxfZpzny2+Qqb7PGoHtdf0DTQf/o2Xm/nmtJw6A0OU=
Subject key identifier:   99:56:B6:F0:1D:D4:F9:42:C7:D3:3E:2A:0B:08:FE:3F:28:53:56:28
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       2FAF4B9529A74ABB78AAC9388B188B711D38B5E7
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32372e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:23 +0000
ROA not before:           Thu 04 Apr 2024 11:05:23 +0000
ROA not after:            Thu 03 Apr 2025 11:10:23 +0000
asID:                     264001
IP address blocks:        170.0.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:af:4b:95:29:a7:4a:bb:78:aa:c9:38:8b:18:8b:71:1d:38:b5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:23 2024 GMT
            Not After : Apr  3 11:10:23 2025 GMT
        Subject: CN=9956B6F01DD4F942C7D33E2A0B08FE3F28535628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:41:89:d5:16:10:a5:74:5b:53:f5:e2:ad:
                    bb:6a:0d:fd:c9:c4:5b:62:ca:42:bc:b4:b4:66:8a:
                    c1:73:95:fd:21:3d:de:37:6d:0c:fb:b2:64:4b:d3:
                    54:fd:47:7d:95:10:b4:05:16:aa:b2:65:b1:f6:01:
                    90:d2:63:bf:29:14:42:2d:1c:e5:d3:7f:5e:ca:93:
                    f9:4b:c4:87:b5:d4:2e:55:3e:46:de:01:c3:d3:72:
                    f5:4f:bd:d2:c8:49:d9:c2:af:49:01:8a:01:dd:8a:
                    61:07:e1:0e:14:50:de:0c:52:4b:25:6a:3b:68:7e:
                    49:92:e2:0f:f9:aa:d7:a0:ca:f1:6c:d3:23:a5:68:
                    04:36:9d:6d:b5:40:39:ee:24:24:90:d3:66:12:e8:
                    a7:00:5c:b1:20:45:be:60:80:1b:54:2b:ca:fe:80:
                    dc:ad:ec:4b:35:21:93:1d:1e:b4:b0:d2:67:f6:6c:
                    ac:9b:9c:08:b7:52:05:95:1a:ae:4e:7a:9f:d1:29:
                    16:b9:bd:aa:a7:37:58:95:ab:e4:37:7b:4d:3e:26:
                    2e:1d:7f:a1:19:04:c4:d5:a6:7b:64:d5:3a:31:a0:
                    7d:38:41:5f:fe:4b:9a:45:c2:37:b8:7f:87:74:b3:
                    9d:ac:0f:71:95:28:d7:ab:95:13:45:66:e6:2c:48:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:B6:F0:1D:D4:F9:42:C7:D3:3E:2A:0B:08:FE:3F:28:53:56:28
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32372e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:77:4b:3a:93:11:7b:09:fb:ae:81:8b:8f:1a:5a:2b:be:
         90:27:72:95:32:62:9d:47:05:17:8a:f5:67:c7:64:2f:f7:b0:
         66:89:6a:42:b2:c9:82:48:98:ed:8c:2a:25:fb:db:29:87:c1:
         73:2f:3e:3b:3d:fe:aa:b6:78:3f:74:46:81:ea:6d:a8:34:74:
         a3:bb:1b:09:3f:1d:d2:5a:c3:b4:fa:00:9c:96:2e:b0:c2:4d:
         b7:f9:e0:93:d1:e5:dc:63:b8:de:a2:a9:ae:35:ef:f7:fc:a8:
         04:88:ae:59:c4:db:6e:50:a2:17:f6:67:c1:5d:4b:df:1d:65:
         0f:9d:c6:fe:29:05:9e:6d:64:86:df:bf:54:aa:04:d1:94:1d:
         ae:e4:73:b7:22:32:dd:db:30:3e:7c:47:c4:3a:fd:df:82:3b:
         76:58:db:d9:d4:23:3e:22:24:47:67:6a:80:37:e2:12:ba:22:
         27:53:c6:d9:e5:2e:c5:30:5b:6c:b2:ed:09:57:31:96:53:c3:
         fc:ea:09:8c:45:c8:3b:50:3f:0c:ab:34:42:cd:11:f6:2c:4c:
         1d:17:8a:87:df:0c:8d:8d:b8:69:2f:39:f8:6b:b9:ce:a4:d3:
         e0:04:c7:d7:1e:6c:13:18:42:10:f3:09:d6:81:14:ce:88:5d:
         99:61:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:07 2024 by rpki-client on console-fra.rpki-client.org