Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa
File:                     3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa (raw, json)
Hash identifier:          Ed2EIZXqGFipO13fi/WD6PfySHQir1lwOAKZvzCvFXk=
Subject key identifier:   36:EF:92:30:2B:CE:9D:92:49:ED:16:05:DF:A3:C2:74:98:B8:16:1D
Certificate issuer:       /CN=FC2C41622C37BCAC455084DC9E14B78BE8E39993
Certificate serial:       45269F9E5883F410DB7333E16552A3C08D2BB493
Authority key identifier: FC:2C:41:62:2C:37:BC:AC:45:50:84:DC:9E:14:B7:8B:E8:E3:99:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2C41622C37BCAC455084DC9E14B78BE8E39993.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa
Signing time:             Fri 12 Apr 2024 13:10:10 +0000
ROA not before:           Fri 12 Apr 2024 13:05:10 +0000
ROA not after:            Fri 11 Apr 2025 13:10:10 +0000
asID:                     266523
IP address blocks:        170.244.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/FC2C41622C37BCAC455084DC9E14B78BE8E39993.crl
                          rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/FC2C41622C37BCAC455084DC9E14B78BE8E39993.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2C41622C37BCAC455084DC9E14B78BE8E39993.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:26:9f:9e:58:83:f4:10:db:73:33:e1:65:52:a3:c0:8d:2b:b4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2C41622C37BCAC455084DC9E14B78BE8E39993
        Validity
            Not Before: Apr 12 13:05:10 2024 GMT
            Not After : Apr 11 13:10:10 2025 GMT
        Subject: CN=36EF92302BCE9D9249ED1605DFA3C27498B8161D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:62:2a:9e:46:cb:d0:dc:c7:9c:cf:31:a4:48:
                    3e:a0:40:f2:ee:d1:c1:97:01:c9:8d:5b:76:08:8a:
                    ee:70:00:4a:9f:27:b5:e9:1a:58:61:2c:a4:95:fd:
                    e5:ab:7d:9c:4d:35:17:6b:af:71:57:20:e5:95:3b:
                    79:bc:23:17:0d:1b:3c:27:42:33:d5:fe:24:ce:7f:
                    83:15:8d:6b:0c:42:ce:1b:09:95:f3:ca:00:03:84:
                    19:34:ec:ba:41:97:a4:18:3f:cf:11:87:44:30:41:
                    ed:3f:98:8c:65:e8:8f:28:8e:a2:75:68:e7:bc:b1:
                    bd:36:33:8d:e3:14:52:40:cd:f8:4a:ca:5b:81:9f:
                    cf:d2:87:5e:40:3d:75:19:dd:69:9b:40:1d:4b:c4:
                    96:35:a9:98:2d:f1:69:84:c8:77:a3:a0:ff:8a:d3:
                    ee:52:45:d4:cb:0e:28:de:72:c9:96:f4:ca:e8:63:
                    b5:0a:e7:15:5e:66:fc:f7:92:e7:1d:33:99:1e:20:
                    54:c3:11:a5:c4:a0:20:d5:c7:c2:e8:7e:a2:51:c7:
                    28:5e:df:35:9e:40:0f:6e:ae:0c:35:32:1d:f4:15:
                    fb:a6:6f:9f:e2:81:4a:fb:48:33:5b:43:34:a7:a7:
                    ec:b3:4e:0c:50:55:5e:36:c0:21:be:6c:6a:a0:ae:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EF:92:30:2B:CE:9D:92:49:ED:16:05:DF:A3:C2:74:98:B8:16:1D
            X509v3 Authority Key Identifier:
                keyid:FC:2C:41:62:2C:37:BC:AC:45:50:84:DC:9E:14:B7:8B:E8:E3:99:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/FC2C41622C37BCAC455084DC9E14B78BE8E39993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2C41622C37BCAC455084DC9E14B78BE8E39993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:32:40:62:fb:76:7a:1d:e4:82:c0:43:72:56:55:3f:e2:
         d6:56:c9:cc:e5:e8:f9:01:4c:a7:90:e8:72:96:4d:6a:9a:7a:
         4f:c4:53:80:32:c6:9a:f4:d1:9b:fa:1e:0b:70:9e:c1:04:a1:
         e2:35:6a:4c:00:42:ed:4d:f6:c2:a8:42:ee:d7:d2:27:24:23:
         01:a7:32:ee:54:46:00:09:2a:47:70:5e:82:86:04:85:2e:a8:
         38:bc:ca:50:4c:68:f3:0c:6d:b8:b8:6d:d5:73:96:79:d8:64:
         0d:2f:3c:20:79:c8:b6:72:d5:6b:a0:82:c4:a2:c5:89:aa:62:
         9f:d4:e0:14:2c:09:a2:ae:ec:19:ca:97:3f:49:48:48:e1:20:
         67:15:0e:d2:89:58:72:55:a5:f6:f1:e2:36:24:f1:ec:35:57:
         c9:73:f1:80:55:fe:c3:ae:26:84:b0:9c:ea:cb:80:a0:73:f5:
         66:75:b8:0b:11:e3:de:c6:88:f0:ac:9d:79:d3:6b:4b:0c:10:
         aa:36:a1:94:c1:77:8b:4c:d3:34:18:ae:a3:b8:6f:3b:70:4c:
         db:f7:fd:20:c6:13:4c:bf:e3:00:c5:1d:8e:42:df:19:25:9e:
         e2:52:e6:f8:a3:19:fe:e2:2b:81:1e:6d:4b:42:e7:27:0b:fc:
         ce:08:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:24 2024 by rpki-client on console-fra.rpki-client.org