Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137302e38332e34342e302f32322d3234203d3e20323632353935.roa
File:                     3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          /9HT7cmy1i7/zLU/HoC+QbpZjMfwrtwKp5F4+V8Zd2I=
Subject key identifier:   EC:F1:7D:8B:7C:E3:1B:58:1D:B4:2E:2B:1D:AF:86:C2:75:C8:89:51
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       32FA6028888B7593A7BF58BC56242E19D54AF240
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137302e38332e34342e302f32322d3234203d3e20323632353935.roa
Signing time:             Wed 03 Apr 2024 18:30:05 +0000
ROA not before:           Wed 03 Apr 2024 18:25:05 +0000
ROA not after:            Wed 02 Apr 2025 18:30:05 +0000
asID:                     262595
IP address blocks:        170.83.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fa:60:28:88:8b:75:93:a7:bf:58:bc:56:24:2e:19:d5:4a:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Apr  3 18:25:05 2024 GMT
            Not After : Apr  2 18:30:05 2025 GMT
        Subject: CN=ECF17D8B7CE31B581DB42E2B1DAF86C275C88951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:d2:eb:dc:55:21:fd:0f:bf:3c:76:84:54:
                    64:92:72:16:27:52:75:d1:3e:f4:2f:51:36:b0:f0:
                    01:84:91:d1:e7:fd:5e:da:00:f9:4a:85:23:06:76:
                    48:24:fb:6d:e6:ee:77:2b:bf:dd:04:ef:42:4f:fc:
                    7d:65:a4:13:2e:fd:f0:9c:5d:ab:6a:f2:93:67:2c:
                    ab:76:3e:c7:55:97:a0:d3:65:6a:60:5f:b4:06:20:
                    1d:d4:01:c5:a3:75:b0:d4:f4:03:b5:9c:ba:c5:25:
                    0f:69:43:2d:61:b2:fb:1e:74:c0:63:df:66:c6:ea:
                    37:d2:c7:83:aa:e7:24:1e:3b:31:9b:9f:8d:aa:26:
                    c3:56:42:aa:10:2b:1a:53:0b:9f:cb:ea:ff:75:4b:
                    d9:4a:42:b2:96:7c:7b:4e:e5:27:46:8a:04:6d:9a:
                    f6:20:a4:7d:3c:97:f0:e6:38:79:3e:5f:e4:03:0d:
                    bd:72:88:4d:28:1e:4a:2d:0e:5a:a7:7e:db:7c:64:
                    16:5f:2c:4a:e4:71:88:d6:2e:e2:21:ce:eb:3a:c3:
                    12:89:10:57:ce:df:7d:8e:26:25:24:e0:08:41:fe:
                    b1:69:b4:ef:d9:f1:69:f3:09:32:f6:b1:b5:34:c6:
                    c3:fc:18:11:94:7a:4c:fa:07:0c:6a:df:48:41:88:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F1:7D:8B:7C:E3:1B:58:1D:B4:2E:2B:1D:AF:86:C2:75:C8:89:51
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137302e38332e34342e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:0d:63:4f:2b:16:96:92:46:44:15:bb:54:77:90:4a:d4:
         14:c7:82:49:e4:d8:a2:30:9a:a3:64:fb:f0:53:0a:8e:1b:eb:
         fa:d1:39:2a:23:1d:20:a2:fe:1e:4c:9b:d0:52:37:95:70:b6:
         cc:8b:95:50:1a:8f:9d:fe:ec:51:be:2a:1a:6c:90:7f:20:9d:
         95:a9:4f:b3:43:f4:16:cb:2e:49:66:b3:df:b7:6a:d7:d9:99:
         df:30:22:cd:fc:4a:85:7e:89:45:8d:57:65:7c:4a:b5:0e:15:
         03:6b:fa:49:d7:bf:60:d4:42:49:15:33:7b:7c:85:db:61:8b:
         ec:85:2c:71:88:a5:74:a8:34:3f:3c:2b:d2:68:b6:08:92:0d:
         8b:09:e4:21:63:fe:a8:fc:f6:07:25:66:d5:83:d2:91:35:99:
         e1:41:07:c8:e8:aa:ff:92:1c:9c:86:e1:46:f0:17:87:c6:76:
         4b:0a:23:93:e8:a6:52:38:10:b8:d8:f9:40:5a:cb:c5:e4:20:
         43:a3:79:4d:e6:ad:92:f9:45:ef:86:f0:bc:74:b3:56:ea:b4:
         7e:f5:62:5a:91:fb:6b:9d:33:36:4d:48:33:1b:18:8b:7e:81:
         c6:8a:5c:a7:ba:52:8f:a2:00:3a:5a:3a:92:02:e7:d1:0a:37:
         0a:a5:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 13:53:31 2024 by rpki-client on console-fra.rpki-client.org