Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135342e302f32332d3234203d3e20323634303133.roa
File:                     3137302e302e3135342e302f32332d3234203d3e20323634303133.roa (raw, json)
Hash identifier:          ht4dry2rbZS1VpefmU36l1U/HBhYlN/idHFn46uiGbU=
Subject key identifier:   17:13:39:CB:02:20:78:C1:EC:43:6D:C7:53:42:F4:BB:60:9E:12:3B
Certificate issuer:       /CN=B4427441B48FB34853A49345A310681C00837092
Certificate serial:       6D9B5E98551FD402AD86C67CFE252E35B8D0735F
Authority key identifier: B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135342e302f32332d3234203d3e20323634303133.roa
Signing time:             Tue 28 May 2024 20:35:43 +0000
ROA not before:           Tue 28 May 2024 20:30:43 +0000
ROA not after:            Tue 27 May 2025 20:35:43 +0000
asID:                     264013
IP address blocks:        170.0.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9b:5e:98:55:1f:d4:02:ad:86:c6:7c:fe:25:2e:35:b8:d0:73:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4427441B48FB34853A49345A310681C00837092
        Validity
            Not Before: May 28 20:30:43 2024 GMT
            Not After : May 27 20:35:43 2025 GMT
        Subject: CN=171339CB022078C1EC436DC75342F4BB609E123B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:6c:db:60:72:42:e7:a6:3f:54:56:45:86:
                    20:39:05:ab:aa:0e:9a:20:e8:98:4c:39:55:4f:b9:
                    3f:d3:0a:67:07:b9:ad:5f:83:b4:80:eb:82:6f:3b:
                    ad:89:e1:0c:31:a6:c0:37:67:49:6e:20:11:5a:6e:
                    ff:a3:a9:ca:4d:c2:cc:38:eb:86:37:70:87:df:ad:
                    c3:ee:68:b1:90:a1:84:a4:7a:ac:e5:f9:1a:6d:35:
                    ee:97:a3:4d:e9:d0:0a:c4:6f:66:03:84:3f:14:3c:
                    f6:75:69:84:02:99:2a:77:c4:14:d1:8a:bb:5b:55:
                    6b:27:84:58:a0:da:c9:ca:0f:af:4e:b0:8e:66:5b:
                    d8:a2:ea:30:0c:93:0b:2c:22:a9:f8:06:cb:a3:f6:
                    3a:d0:f0:03:94:69:0a:ba:e7:1e:da:dc:ac:7e:74:
                    f9:38:1f:50:1c:41:ec:2f:1a:cb:37:c6:98:02:67:
                    05:51:38:1e:4c:15:90:ee:1f:29:42:37:f7:76:96:
                    cf:f5:84:d9:90:b9:3e:64:5c:bd:bc:e6:ee:b3:ad:
                    b1:28:99:4b:08:e1:a4:60:12:b9:b2:24:d0:f7:f3:
                    92:30:e3:44:9f:b0:49:de:29:3d:36:19:d2:f5:a7:
                    2a:f4:12:5a:60:bc:70:6f:ab:f6:03:92:9b:97:df:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:13:39:CB:02:20:78:C1:EC:43:6D:C7:53:42:F4:BB:60:9E:12:3B
            X509v3 Authority Key Identifier:
                keyid:B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135342e302f32332d3234203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:de:97:d9:0d:6d:39:cb:25:bf:38:de:4b:0d:da:79:af:6d:
         ac:b3:7e:06:72:57:81:f5:36:f1:7d:2c:bc:e2:be:1b:e1:d7:
         dd:97:dd:a0:74:4f:1b:d4:43:5b:d0:b4:4e:b6:f6:93:96:6d:
         80:39:f7:9c:1a:dd:6b:3d:4e:87:c6:b8:c7:70:10:e0:cf:d4:
         0d:84:89:6a:50:59:db:c8:06:12:f9:66:09:e8:20:13:0f:e1:
         bf:30:c0:5d:3b:c4:5f:a9:6a:97:a0:8e:24:a0:88:43:03:8f:
         75:dc:a6:23:d5:69:5e:46:8d:24:f0:75:75:69:f3:09:84:c2:
         d9:47:b2:c4:09:b5:2d:58:4b:9a:40:bb:a5:69:38:b3:7f:27:
         ea:38:0a:9c:0f:da:5c:44:c7:0f:e2:fb:f1:99:a9:e8:15:07:
         e5:ee:3f:c2:f3:4b:e3:ad:c2:79:bd:05:32:16:73:17:a9:58:
         21:03:ec:4f:9b:b7:92:12:51:b9:f1:a0:e2:d9:7b:b3:aa:2b:
         a9:0a:e2:7d:43:01:59:b0:2a:fe:c4:5d:0a:11:be:04:cb:c3:
         20:34:19:20:f1:b1:b1:b1:af:0e:c4:f4:ed:28:7c:b1:16:1c:
         9b:e3:f1:28:36:22:51:7a:6e:17:40:15:1b:3b:00:8b:d9:1c:
         0f:4e:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:41 2024 by rpki-client on console-ams.rpki-client.org