Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa
File:                     3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          ZN6DFzCniwkk83YVYqUo7XyhMyKd/GZ/DD3rxReNcTs=
Subject key identifier:   2A:4A:0B:EB:A2:A4:8A:E3:CC:D2:15:80:61:A7:08:C5:64:02:83:A6
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       22EB15C021D29977B7DDA63F8FD3C4F126A54F18
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     264440
IP address blocks:        170.233.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:15:c0:21:d2:99:77:b7:dd:a6:3f:8f:d3:c4:f1:26:a5:4f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:9a:c5:45:99:ad:1f:fd:b1:a8:8b:66:0d:
                    53:10:50:ac:14:1e:ef:11:d2:ae:3a:21:19:b3:e5:
                    27:bd:50:0b:2b:33:6d:ca:22:3b:c8:94:c8:c7:e8:
                    2b:0d:b0:92:e1:6a:35:99:c0:7e:9c:06:ca:7c:e4:
                    ab:cb:80:1e:21:79:f3:c5:43:4c:54:0a:fe:fe:6b:
                    98:53:4a:b0:2e:aa:aa:ec:50:52:2d:ec:27:4a:83:
                    20:e1:f6:76:9a:31:9a:a8:5c:b9:1d:8e:36:f2:fc:
                    a3:40:58:0b:90:7a:b9:13:0c:e4:27:de:0f:a8:15:
                    62:bc:02:b1:e9:e9:c0:b1:70:07:0a:b9:1e:64:c1:
                    0e:38:59:c8:35:e6:69:b9:4e:27:2e:ac:b5:a3:12:
                    0f:c4:f1:ef:f8:e1:ea:cc:ad:58:8c:ce:b7:07:96:
                    6c:4d:6d:1a:53:dc:bd:ad:a8:9c:9f:36:34:eb:52:
                    aa:8c:d9:76:91:82:a9:78:99:f8:dc:ad:3f:3c:ce:
                    c9:d7:7b:36:eb:79:4c:b5:e0:fe:dd:45:8f:8b:be:
                    a4:cc:76:38:ab:b3:f0:f5:98:9e:95:58:63:31:6c:
                    83:1b:41:4d:ae:f3:33:ba:01:39:7d:fe:00:ee:9d:
                    76:35:fb:1c:52:67:f6:01:86:aa:59:63:d7:b3:92:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:0B:EB:A2:A4:8A:E3:CC:D2:15:80:61:A7:08:C5:64:02:83:A6
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:6f:37:37:02:e3:0c:3a:bb:d9:5e:d6:65:f2:9a:3f:df:
         6d:cd:9f:86:8e:c2:44:86:44:38:ff:fe:64:f4:8a:1e:f2:1f:
         8e:6a:a7:65:a6:27:37:6c:d2:30:ae:2c:24:29:f6:f3:b0:f5:
         1c:06:36:68:ea:9b:ec:82:42:dc:61:ac:12:24:e1:cc:e3:b0:
         e4:65:a5:9c:5d:f7:da:40:cd:bc:c9:5e:1c:8d:97:6e:1e:78:
         58:38:1c:a5:37:1f:f4:21:a5:37:75:13:d5:be:6f:57:03:21:
         68:38:33:81:aa:22:f4:ec:6c:32:86:9a:a6:a0:5e:88:e5:ed:
         b0:13:b1:14:14:f0:e3:ca:07:d8:99:da:ad:83:3d:6e:fb:b1:
         c7:3b:bc:14:24:cb:fc:07:95:69:8f:25:53:51:4e:32:2f:cc:
         25:c3:bb:d5:0a:1b:ae:2a:6d:8a:68:03:0a:46:da:51:22:26:
         19:81:73:71:24:7e:57:d8:5f:e2:3f:57:c6:87:b1:b5:39:37:
         77:b6:69:44:1f:16:c2:bf:99:aa:f1:cf:2b:bc:74:11:5b:f5:
         ba:50:2b:c1:6a:e3:a7:eb:77:6b:f8:b0:95:74:b0:c1:25:64:
         bb:6d:f0:b8:91:34:b1:25:b1:ab:49:5b:a7:0f:6b:75:ff:9e:
         24:c6:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org