Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
File:                     3137302e3233332e35322e302f32322d3234203d3e203532353437.roa (raw, json)
Hash identifier:          pp6mLc/YUWcoHcx/KkJgy7aDoH48Wh1GBIncdPvWIfU=
Subject key identifier:   DC:AB:50:92:EF:C8:6E:0F:6C:23:E6:7A:0F:42:4A:96:4B:2F:48:EE
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       3270309E952098EC34E9A1CD122E59AF46F63610
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
Signing time:             Wed 29 May 2024 18:19:55 +0000
ROA not before:           Wed 29 May 2024 18:14:55 +0000
ROA not after:            Wed 28 May 2025 18:19:55 +0000
asID:                     52547
IP address blocks:        170.233.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:70:30:9e:95:20:98:ec:34:e9:a1:cd:12:2e:59:af:46:f6:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: May 29 18:14:55 2024 GMT
            Not After : May 28 18:19:55 2025 GMT
        Subject: CN=DCAB5092EFC86E0F6C23E67A0F424A964B2F48EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:02:63:a5:70:a0:67:75:c9:a2:3a:07:1d:
                    cf:53:d1:f0:00:67:52:63:15:d2:5a:92:3c:db:e0:
                    f3:26:b0:cd:0a:55:b7:e8:e5:2d:f3:ea:c9:53:1b:
                    af:ec:48:1f:fe:52:99:19:1a:a2:7d:f9:d7:9f:24:
                    09:c6:3f:c6:88:ef:f5:ad:e4:c5:c2:f3:0e:f3:5b:
                    4f:76:7b:f1:e0:dc:e9:6d:a9:3a:96:06:95:ac:b3:
                    fd:46:5b:64:66:4e:b2:3f:9a:9a:98:52:e4:cf:74:
                    38:c7:cf:14:8e:f6:38:39:5a:0c:dc:0f:5a:28:e9:
                    f6:75:de:3b:aa:6e:80:11:29:25:31:2a:33:37:65:
                    63:54:52:cf:6e:92:ac:2d:23:9e:b0:be:4c:52:9f:
                    f5:40:65:bb:bf:2a:2d:ca:18:a7:32:4e:79:e7:97:
                    f3:cc:da:e7:1b:8b:28:04:16:75:5e:1d:a5:38:7b:
                    3f:6b:07:3d:90:f7:e1:6d:c2:9f:83:51:d7:86:b4:
                    36:43:4e:b7:bc:df:8c:eb:49:c7:ee:94:83:d2:0d:
                    0c:9b:58:23:a1:ff:95:d6:44:97:11:6c:b9:32:21:
                    7c:46:36:62:34:2e:3b:83:4b:b7:93:fa:8a:45:10:
                    f9:25:8f:a3:65:fe:b8:c5:ec:07:2f:3e:2d:35:77:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:50:92:EF:C8:6E:0F:6C:23:E6:7A:0F:42:4A:96:4B:2F:48:EE
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:ab:a1:d3:00:62:f5:94:ca:b6:ff:3f:b1:c2:46:c0:16:
         fb:28:ba:55:f1:f6:78:cf:43:81:1b:69:69:22:fa:b7:41:b8:
         23:a2:6a:d4:1c:ea:9b:d7:f7:b5:4d:a9:66:59:af:44:e4:2c:
         ae:69:b5:f2:e4:05:5f:6e:92:dc:a3:17:36:4e:61:b5:55:f3:
         dd:22:b8:26:21:20:ea:56:2d:cd:ea:5b:17:88:12:2c:f9:ff:
         7e:78:35:ac:a9:7b:26:b5:f4:0e:f2:80:e1:4c:24:d3:af:51:
         47:85:02:44:e2:be:35:89:a3:4f:b3:17:c8:ad:5c:2d:53:2c:
         66:48:41:32:ee:2d:8e:c2:c7:71:3c:3a:68:34:eb:69:67:91:
         e6:fe:6a:3a:41:a1:86:b9:b5:49:fb:01:73:84:4b:13:7a:60:
         8c:de:f0:37:50:37:99:eb:62:cb:21:63:69:32:59:1d:1d:03:
         0e:af:ec:d1:fd:3d:1f:87:7f:67:4f:84:c4:59:d6:0e:f6:b6:
         3f:ef:37:ad:76:9c:10:a3:ca:24:04:3a:fb:d4:66:86:ad:dc:
         21:64:a2:52:4e:65:f2:e8:12:bd:cb:cf:33:fb:83:df:a9:4c:
         b4:f7:4d:06:82:d2:65:fd:e8:f6:49:39:6d:24:3e:a2:02:93:
         e7:61:88:f7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMnAwnpUgmOw06aHNEi5Zr0b2NhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNDA1MjkxODE0NTVaFw0yNTA1MjgxODE5NTVaMDMxMTAvBgNV
BAMTKERDQUI1MDkyRUZDODZFMEY2QzIzRTY3QTBGNDI0QTk2NEIyRjQ4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIAJjpXCgZ3XJojoHHc9T0fAA
Z1JjFdJakjzb4PMmsM0KVbfo5S3z6slTG6/sSB/+UpkZGqJ9+defJAnGP8aI7/Wt
5MXC8w7zW092e/Hg3OltqTqWBpWss/1GW2RmTrI/mpqYUuTPdDjHzxSO9jg5Wgzc
D1oo6fZ13juqboARKSUxKjM3ZWNUUs9ukqwtI56wvkxSn/VAZbu/Ki3KGKcyTnnn
l/PM2ucbiygEFnVeHaU4ez9rBz2Q9+Ftwp+DUdeGtDZDTre834zrScfulIPSDQyb
WCOh/5XWRJcRbLkyIXxGNmI0LjuDS7eT+opFEPklj6Nl/rjF7AcvPi01d4Z5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3KtQku/Ibg9sI+Z6D0JKlksvSO4wHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzEzNzMwMmUzMjMzMzMyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCquk0MA0GCSqGSIb3DQEBCwUAA4IBAQCIP6uh0wBi
9ZTKtv8/scJGwBb7KLpV8fZ4z0OBG2lpIvq3QbgjomrUHOqb1/e1TalmWa9E5Cyu
abXy5AVfbpLcoxc2TmG1VfPdIrgmISDqVi3N6lsXiBIs+f9+eDWsqXsmtfQO8oDh
TCTTr1FHhQJE4r41iaNPsxfIrVwtUyxmSEEy7i2OwsdxPDpoNOtpZ5Hm/mo6QaGG
ubVJ+wFzhEsTemCM3vA3UDeZ62LLIWNpMlkdHQMOr+zR/T0fh39nT4TEWdYO9rY/
7zetdpwQo8okBDr71GaGrdwhZKJSTmXy6BK9y88z+4PfqUy0900GgtJl/ej2STlt
JD6iApPnYYj3
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org