Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230332e302f32342d3234203d3e20323636303133.roa
File:                     3137302e3234342e3230332e302f32342d3234203d3e20323636303133.roa (raw, json)
Hash identifier:          iUQ52hzWJlqb6O6R9iCa/7fH4h+rugKleM4EfPBdA04=
Subject key identifier:   EC:17:18:C0:C7:3B:73:63:9C:F3:97:E0:D8:6F:98:DC:48:C3:9F:74
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       3A8B8F444ACA37AC7BC1D65AECFF94718A889C8B
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230332e302f32342d3234203d3e20323636303133.roa
Signing time:             Thu 04 Apr 2024 12:52:46 +0000
ROA not before:           Thu 04 Apr 2024 12:47:46 +0000
ROA not after:            Thu 03 Apr 2025 12:52:46 +0000
asID:                     266013
IP address blocks:        170.244.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8b:8f:44:4a:ca:37:ac:7b:c1:d6:5a:ec:ff:94:71:8a:88:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Apr  4 12:47:46 2024 GMT
            Not After : Apr  3 12:52:46 2025 GMT
        Subject: CN=EC1718C0C73B73639CF397E0D86F98DC48C39F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:42:a2:52:c6:3d:ed:95:16:d9:26:d4:02:
                    e3:40:94:5a:79:e0:4c:6b:76:a0:62:9c:98:9c:ce:
                    e6:77:d2:54:8c:29:77:d9:c6:e8:fc:bf:bd:40:f9:
                    a6:03:8c:20:4b:9a:2e:06:d0:6f:9d:e7:a1:63:a5:
                    d7:32:e4:25:b9:40:12:99:c3:d3:dc:ec:15:ba:96:
                    90:60:8d:b1:18:75:d6:05:f1:f6:84:ff:f7:37:7d:
                    ed:77:78:4c:6d:5a:1b:84:11:8f:af:95:be:a6:9a:
                    ea:ef:de:49:e8:52:af:80:dc:7f:90:a0:6e:e3:23:
                    49:74:a3:4a:1d:f9:4b:1b:6d:7e:4e:4b:c6:ea:b5:
                    d9:4b:10:f8:d6:08:c7:bf:da:de:59:61:69:73:93:
                    c8:bc:f9:05:14:67:25:36:ab:d8:37:1e:a5:20:ad:
                    20:34:78:b9:c1:78:fd:be:11:11:92:53:01:49:83:
                    69:d1:95:7c:bc:b3:a5:d9:e3:42:a0:23:81:b1:80:
                    fd:c2:ab:45:02:33:1c:5f:ab:c8:1d:68:6d:49:a4:
                    9a:b7:58:a3:d7:f1:7d:d1:89:ca:8f:8f:8b:95:c4:
                    1f:eb:5f:c4:6a:1f:69:66:3d:f4:9a:7d:87:94:5b:
                    fd:d1:03:33:6a:19:e7:16:21:c6:45:04:fe:a6:83:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:18:C0:C7:3B:73:63:9C:F3:97:E0:D8:6F:98:DC:48:C3:9F:74
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230332e302f32342d3234203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:56:68:04:1d:3a:08:56:71:09:69:7d:4a:08:d8:61:11:42:
         ba:5a:cf:85:c5:1b:f6:b2:b9:a3:b6:ae:51:78:24:6b:62:7f:
         52:3d:33:fa:4a:7f:be:a2:c6:4f:26:52:ae:c5:09:f8:1d:9e:
         99:f1:c3:ed:f5:ff:d3:8f:e2:dc:46:78:bb:dd:7d:34:16:ca:
         88:13:8e:74:6c:c6:a4:6f:b4:6f:bc:be:23:91:c8:e5:34:1f:
         12:b9:78:d4:ae:f8:31:17:6a:8b:84:8d:67:d8:a6:64:14:09:
         83:0b:dd:68:c3:5c:6d:33:ed:e6:94:ca:08:97:ff:f2:b1:23:
         67:f3:a1:ee:40:92:d1:9c:e4:f0:40:c5:d2:06:cc:95:f9:4f:
         69:2f:00:b6:99:94:16:96:b5:f6:ce:df:1d:c8:2c:2d:d7:e4:
         d2:bd:f3:f3:6a:a8:77:d3:c0:ef:41:a1:e5:2b:48:f0:4b:06:
         63:24:26:9e:46:3c:0e:37:c7:4e:0f:70:6b:d2:6f:ba:ef:10:
         a8:29:04:4c:d2:e4:69:99:d0:7e:cd:35:fd:41:b4:78:4b:64:
         ad:18:d4:cd:74:32:e4:92:d4:60:d5:80:5b:41:85:8c:ce:03:
         64:8e:7f:58:2a:36:0b:67:be:3a:70:db:90:39:22:03:cb:95:
         b4:eb:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:43 2024 by rpki-client on console-fra.rpki-client.org