Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
File:                     3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (raw, json)
Hash identifier:          KYGxaFTAq7jEe8eSAMMEuFgmR4ZwzbO+JRbteCQKylk=
Subject key identifier:   BD:63:C7:68:C1:9C:FD:C3:0F:F2:13:56:8F:A2:BC:18:AB:C1:59:F5
Certificate issuer:       /CN=E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3
Certificate serial:       123CA715D28AD881BF3D1C9AE800B7D78FD5899F
Authority key identifier: E2:72:A9:E5:EF:50:88:38:8C:B8:E9:AE:9F:34:BC:0E:52:0F:1D:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
Signing time:             Mon 20 May 2024 18:44:57 +0000
ROA not before:           Mon 20 May 2024 18:39:57 +0000
ROA not after:            Mon 19 May 2025 18:44:57 +0000
asID:                     266343
IP address blocks:        170.239.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3c:a7:15:d2:8a:d8:81:bf:3d:1c:9a:e8:00:b7:d7:8f:d5:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3
        Validity
            Not Before: May 20 18:39:57 2024 GMT
            Not After : May 19 18:44:57 2025 GMT
        Subject: CN=BD63C768C19CFDC30FF213568FA2BC18ABC159F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:11:19:8b:07:28:bf:ef:0d:e6:d2:63:c4:
                    4b:b6:4b:3e:f0:e3:57:b9:97:42:99:26:4c:f7:30:
                    46:83:12:01:95:7f:c8:aa:32:c6:2a:05:4a:0b:a7:
                    c9:60:b6:79:2e:97:40:a8:52:2e:33:1e:94:4f:0e:
                    c7:38:5a:ca:89:4a:9b:c4:ed:73:90:f6:b6:65:f1:
                    54:2f:ac:92:5f:90:dc:c1:bc:a8:0c:31:89:d3:b9:
                    89:46:21:15:ca:c3:56:63:80:92:5c:bf:10:d5:dc:
                    1b:cc:7d:b0:56:64:2d:d4:ab:0d:e7:f5:05:34:32:
                    63:ae:f5:5c:76:58:42:ad:f2:d5:cc:f2:4f:df:d3:
                    18:e3:d0:81:b6:77:b2:64:b9:f5:f8:7e:11:ba:ac:
                    a6:26:24:13:ad:7a:46:01:a4:4a:bb:40:71:9d:c3:
                    7c:de:0a:53:fe:5e:ce:1c:5b:2a:04:28:7b:c4:34:
                    d0:ef:68:7a:14:a5:11:97:25:2a:98:3a:a5:d1:96:
                    c3:84:9a:f4:f6:1d:5a:13:70:5a:8b:ed:e2:67:0c:
                    38:b3:97:21:bd:84:b1:d7:7a:d5:55:bd:3d:b0:64:
                    c9:18:a1:15:b2:38:03:dd:8c:f9:c7:5b:ce:f9:33:
                    ad:1c:b6:5a:15:80:a9:38:e3:db:d7:b2:3d:6c:e3:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:63:C7:68:C1:9C:FD:C3:0F:F2:13:56:8F:A2:BC:18:AB:C1:59:F5
            X509v3 Authority Key Identifier:
                keyid:E2:72:A9:E5:EF:50:88:38:8C:B8:E9:AE:9F:34:BC:0E:52:0F:1D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:00:cd:96:60:e0:9a:16:eb:03:39:90:2c:85:8d:52:f2:84:
         86:4d:a3:bf:94:0c:cf:4e:f6:06:c4:3f:15:e7:80:b3:56:ee:
         90:dd:01:f8:31:ed:a8:d3:0a:4a:d2:13:02:df:7d:66:65:69:
         46:5e:aa:a9:97:7d:f5:d2:4c:11:8e:1f:43:59:3c:0d:15:59:
         5e:33:13:ca:ec:6c:ae:11:34:77:da:84:c9:d1:89:cd:6e:ba:
         6b:52:a3:de:bf:c0:5c:cd:0a:0d:b7:99:65:7a:a4:e5:01:5f:
         50:92:b7:06:39:5b:aa:c4:74:04:4e:10:8b:10:af:9b:33:4b:
         50:ee:17:fe:3b:13:ff:e4:bf:75:5d:9b:69:3e:be:4d:e2:62:
         f5:15:20:32:8e:88:c4:27:05:53:db:0d:4a:2e:1b:6a:34:fe:
         1f:fc:d1:43:41:06:7b:a8:61:89:d7:16:d3:e0:04:2d:54:2a:
         78:75:c3:0a:11:fc:d1:7d:57:40:f9:86:83:0d:7e:21:89:f2:
         16:d0:f2:58:a7:3f:63:4f:4a:1a:2a:fc:08:f7:23:18:37:85:
         46:28:fb:b7:e7:70:28:86:11:5e:39:ca:33:2d:65:93:82:92:
         44:10:5a:76:9f:61:f8:80:cd:e4:8b:d6:be:2b:43:c9:8c:53:
         f4:f8:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 10:15:12 2024 by rpki-client on console-ams.rpki-client.org