Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
File:                     3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          e8QFrbtxuFYWiBUwWSynAiZaQ5DzAF2Zf+Z8CFil8Gs=
Subject key identifier:   CA:47:10:01:39:81:84:02:AA:84:2D:0A:3B:87:F5:BD:B2:A8:62:89
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       1ADA668164470B878F062E13FE69D3D5491740C9
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:22 +0000
ROA not before:           Thu 04 Apr 2024 11:05:22 +0000
ROA not after:            Thu 03 Apr 2025 11:10:22 +0000
asID:                     264001
IP address blocks:        170.246.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:da:66:81:64:47:0b:87:8f:06:2e:13:fe:69:d3:d5:49:17:40:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:22 2024 GMT
            Not After : Apr  3 11:10:22 2025 GMT
        Subject: CN=CA47100139818402AA842D0A3B87F5BDB2A86289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:aa:f1:c8:74:61:5d:c7:69:82:cf:fa:2d:
                    36:23:2a:0b:39:6b:a8:e2:45:74:0e:5b:8e:62:31:
                    6c:38:54:61:0d:72:1e:d8:ea:fa:a9:54:e2:9d:a6:
                    b0:c1:a6:32:5d:a2:5c:94:75:b8:1f:64:2a:e8:5e:
                    d9:f7:a0:6c:b0:61:17:24:ca:49:cf:0a:2a:f3:3e:
                    de:75:a4:8a:80:b4:2e:fe:54:e8:a6:d3:4d:d8:83:
                    f7:93:2b:b8:32:8a:56:8d:f3:bb:3e:62:78:ba:48:
                    fd:ef:5b:3c:bb:89:ac:63:6f:64:46:dc:25:5a:56:
                    06:4d:64:d2:2b:b0:d2:51:2a:07:02:89:ba:1a:d6:
                    ee:a8:b8:d5:13:8b:b7:f1:f0:77:1e:82:30:7e:15:
                    f3:18:01:1c:b0:be:30:2d:08:de:7e:50:7e:78:e3:
                    29:9f:87:e0:c9:7e:c0:ac:0c:a3:83:80:a9:7a:80:
                    78:99:ce:8e:c9:a2:b5:da:27:32:f6:67:30:9e:42:
                    90:c3:05:8d:4d:c9:f3:0b:f5:39:07:23:39:13:d2:
                    13:8f:12:01:18:fb:96:b0:79:8f:7e:73:24:82:d6:
                    48:df:3c:37:11:45:bf:77:5e:43:dc:19:56:d4:d3:
                    99:10:22:ad:0c:f5:1b:09:b9:92:5c:95:60:35:8a:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:10:01:39:81:84:02:AA:84:2D:0A:3B:87:F5:BD:B2:A8:62:89
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138382e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:03:d4:a8:83:06:00:88:b1:83:af:7e:e7:f4:3f:df:7d:
         ed:88:a3:ed:fe:04:7d:94:53:dc:f6:8b:7f:b1:b9:ed:61:85:
         49:e0:fc:30:2a:a5:13:90:78:fd:d5:4c:2e:f2:b2:c4:16:e9:
         80:29:1c:9b:eb:7e:23:ad:2c:5f:4c:1b:dd:5a:82:d1:7c:f2:
         81:e6:9d:73:e7:b6:30:e4:bd:24:a2:92:40:5b:d3:32:6f:85:
         5b:7f:34:36:fa:c0:47:37:c4:d2:0c:3e:6d:a9:d0:66:f1:27:
         24:20:8d:9c:a0:69:a4:89:c2:be:32:32:ed:12:b2:92:69:4a:
         65:d8:3e:de:12:9d:ce:03:01:f2:fd:16:62:70:16:f5:3b:30:
         23:c3:89:12:ee:ca:e5:f5:44:ba:55:c2:7b:68:38:70:31:56:
         5c:cb:65:0f:49:56:a0:b8:f9:b1:11:98:2a:94:53:2f:84:98:
         a8:6c:3d:61:53:4a:ed:bf:f5:d5:e3:23:e6:1e:ea:dd:58:64:
         f0:f7:7b:db:97:2e:7d:a3:e7:d0:c2:67:9e:f9:0c:fc:ad:9b:
         1e:89:51:f3:a1:eb:13:0b:7a:82:9d:a2:48:58:cb:19:fc:a2:
         9e:27:af:2b:3e:31:17:ad:fb:8e:c1:da:58:46:82:5b:6f:47:
         d3:14:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org