Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa
File:                     3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa (raw, json)
Hash identifier:          BSKakE5LANg6aOX91mZ9k4KxBR+lHE8ZJ8UFBDq2Goo=
Subject key identifier:   74:F9:D4:20:E1:4C:41:3E:76:C6:B9:EC:95:EC:6B:9D:23:BF:B0:58
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       07237451A5960534CBC122895043F9C5411495D0
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa
Signing time:             Fri 17 May 2024 14:57:50 +0000
ROA not before:           Fri 17 May 2024 14:52:50 +0000
ROA not after:            Fri 16 May 2025 14:57:50 +0000
asID:                     265237
IP address blocks:        167.250.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:74:51:a5:96:05:34:cb:c1:22:89:50:43:f9:c5:41:14:95:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: May 17 14:52:50 2024 GMT
            Not After : May 16 14:57:50 2025 GMT
        Subject: CN=74F9D420E14C413E76C6B9EC95EC6B9D23BFB058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:c0:0f:6d:83:3b:24:51:44:fe:fc:08:cf:
                    f3:65:1c:66:02:d7:63:09:ce:c2:30:f0:78:40:96:
                    92:f6:45:47:5d:fe:49:05:74:2f:c8:9a:32:7f:1c:
                    3a:81:fe:a5:10:95:39:3f:73:41:cc:e0:59:14:91:
                    e3:ea:8b:c7:d5:03:4a:1b:d2:84:46:4b:0b:ed:28:
                    94:5c:25:d7:5b:f9:83:49:d9:3a:dd:58:bd:6c:8e:
                    25:36:6f:bc:09:d6:00:17:50:cc:95:5b:e6:29:fa:
                    c5:ff:d7:19:20:cb:5b:d1:82:39:f7:1f:f7:d1:08:
                    39:48:dc:6c:be:98:3b:6e:03:0c:24:cd:50:94:dd:
                    8d:ab:12:5e:d9:f9:85:ed:6c:fa:10:55:b7:f2:02:
                    f6:a8:ad:87:35:16:f5:ad:00:f0:90:64:e7:f5:dd:
                    5e:10:b7:76:74:51:60:cd:aa:a1:f5:2f:89:c1:4c:
                    b4:44:50:5a:7d:96:db:b9:7a:98:e5:a0:7d:67:1d:
                    78:b4:f4:34:e3:25:4d:da:d3:55:1b:24:cd:7f:4c:
                    1a:89:61:42:43:23:ed:0a:ca:de:1f:09:1c:64:c1:
                    3c:8f:39:23:b4:c9:9f:7c:d9:83:c0:f0:d4:47:fa:
                    76:56:cd:dd:97:85:9e:3b:3b:b5:83:cb:28:01:a0:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F9:D4:20:E1:4C:41:3E:76:C6:B9:EC:95:EC:6B:9D:23:BF:B0:58
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:b8:c0:c1:85:63:f4:b2:e0:1d:07:13:71:41:96:e0:77:72:
         73:a1:c6:c5:8d:20:9c:71:1e:89:e7:cb:8b:92:0d:c9:59:bd:
         c0:78:0c:6b:df:8e:df:cb:46:95:fe:30:d1:f9:39:4d:4e:80:
         4f:4b:cb:c8:4f:38:a6:f2:02:7f:78:97:26:3a:4c:69:ba:d9:
         38:e7:8a:9b:98:a0:a6:29:47:64:96:21:e3:7f:4c:77:ff:49:
         4b:f8:d6:01:73:ce:5f:d3:9b:37:3a:5b:2a:df:1c:58:2c:c3:
         79:a3:1a:2f:c2:4c:19:e0:e5:3f:7b:08:2c:32:20:27:71:6d:
         e1:6e:93:d2:e7:dc:6c:19:a1:bb:15:d9:91:28:25:9c:25:32:
         35:2b:fa:e1:78:ab:25:91:1a:f0:af:e2:3f:bd:74:69:ce:56:
         24:23:49:e7:92:8b:d5:a1:d0:94:26:99:1f:91:95:8e:85:f7:
         8c:fc:3a:70:c4:d1:a0:74:51:dd:f1:a8:3d:39:c0:d0:52:2e:
         6c:42:c5:fe:ae:cc:e1:21:e6:03:7d:7a:73:ad:69:58:1b:4d:
         c9:e5:45:d6:39:26:13:d7:25:22:63:97:fb:8a:b8:ca:b6:36:
         7c:24:ba:37:6d:ac:da:b6:f1:c0:ba:7b:11:46:e1:35:e0:b9:
         f5:9c:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org