Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa
File:                     3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa (raw, json)
Hash identifier:          yN4gT3PVqbzNNY22eejtYniWHfomClONtHp9Q2y8/34=
Subject key identifier:   7D:22:83:14:38:6E:8B:70:C9:38:D4:34:7A:9D:52:87:3A:7A:11:3A
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       0DDFAA0DA1CAD5AE2884EDC34505D91188C5FC6B
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa
Signing time:             Fri 17 May 2024 14:57:44 +0000
ROA not before:           Fri 17 May 2024 14:52:44 +0000
ROA not after:            Fri 16 May 2025 14:57:44 +0000
asID:                     265237
IP address blocks:        167.250.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:df:aa:0d:a1:ca:d5:ae:28:84:ed:c3:45:05:d9:11:88:c5:fc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: May 17 14:52:44 2024 GMT
            Not After : May 16 14:57:44 2025 GMT
        Subject: CN=7D228314386E8B70C938D4347A9D52873A7A113A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:fc:75:bf:c6:45:5f:36:89:73:3d:ba:1b:
                    98:9e:38:ea:50:f5:25:5d:c0:71:1f:bb:40:43:35:
                    41:d2:b9:67:3b:d5:77:a4:59:a0:8e:95:ea:3d:dc:
                    66:c2:09:51:f5:30:e6:11:8e:59:a6:44:f5:4f:b5:
                    38:77:dc:12:5b:16:94:7a:cc:13:e1:85:0a:34:d7:
                    5e:5e:5a:8a:1b:b2:f8:76:1d:da:15:3b:29:fd:c4:
                    25:48:a2:ad:22:63:29:24:8d:68:79:4d:bc:82:47:
                    bd:7a:a6:4f:88:d3:b7:fc:f1:8c:57:53:51:a7:58:
                    5f:54:ad:7f:94:3e:e0:17:e9:d3:e5:9d:49:b2:d0:
                    95:9e:24:46:a3:16:64:4b:70:19:86:69:a4:9c:7a:
                    14:05:99:a5:5b:93:21:9c:07:86:47:0f:51:3a:3b:
                    d8:21:ca:6f:25:99:49:90:3e:80:c2:fd:e0:d1:40:
                    b9:50:e2:65:2c:2f:a9:b2:93:05:d6:3a:8b:7d:30:
                    2f:70:c3:06:e1:43:a2:6f:35:18:44:05:6f:6a:a8:
                    dc:19:1a:8c:c4:79:c3:32:e3:09:c4:5a:ae:08:ad:
                    98:1c:74:c6:16:3e:18:ff:e2:bd:89:ca:29:05:fc:
                    ce:4c:dc:03:bc:e0:c9:22:ed:b1:a6:7d:b0:8b:84:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:22:83:14:38:6E:8B:70:C9:38:D4:34:7A:9D:52:87:3A:7A:11:3A
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d7:a7:13:78:6b:20:5d:5f:6a:d9:01:a1:a7:5c:80:1b:a3:
         ca:3b:14:9c:c8:de:d4:23:25:69:b0:37:85:e4:2b:93:1b:cb:
         44:7f:4d:13:82:15:3c:32:fd:fb:2c:f6:6a:e3:1c:f9:a9:02:
         30:ac:08:e0:7d:e3:28:0a:6b:b3:be:8c:9d:f4:67:11:94:c8:
         ad:da:cf:b7:e7:ad:e6:ec:bf:47:78:32:6b:50:09:61:04:cc:
         c9:ba:c7:eb:08:ae:81:7c:94:db:0a:db:87:ba:28:51:13:26:
         22:84:34:2b:a7:3c:bb:46:6b:08:b8:25:fd:24:0d:3b:47:b4:
         f2:58:4a:62:47:b0:de:e0:46:80:27:4d:22:c5:34:2e:64:c4:
         b2:fd:a6:43:10:22:15:0e:ad:89:f6:a1:49:e6:70:71:38:a0:
         b4:e6:90:77:06:af:f7:73:fd:28:58:3f:8b:5f:e2:aa:52:8c:
         09:13:f2:1c:b3:6d:8f:fb:8f:ba:22:28:23:1a:01:b8:6c:cc:
         31:05:5b:df:55:d8:dc:60:07:ee:9d:cc:31:8b:19:b0:0a:88:
         38:0f:d7:b9:83:c7:72:29:a2:83:4a:da:ec:34:04:79:fd:e8:
         07:d9:f9:61:37:b8:cb:f9:62:ea:df:03:a6:af:a6:b6:ec:cb:
         e6:5d:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org