Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
File:                     3137302e38332e36382e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier:          wSZDXV+Cwnw6srAe1IJLjKj8stBGDKVIOv/ZmbN8rMk=
Subject key identifier:   19:14:50:E7:E2:95:C8:85:6D:D1:B6:2D:ED:90:C1:D2:B2:26:70:9A
Certificate issuer:       /CN=B92001871A07D03B31A6C890436B41249FAC3A6E
Certificate serial:       7D72838574445E81FD2FF38A6BA6AA20797ED47F
Authority key identifier: B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
Signing time:             Thu 04 Apr 2024 22:12:16 +0000
ROA not before:           Thu 04 Apr 2024 22:07:16 +0000
ROA not after:            Thu 03 Apr 2025 22:12:16 +0000
asID:                     61754
IP address blocks:        170.83.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:72:83:85:74:44:5e:81:fd:2f:f3:8a:6b:a6:aa:20:79:7e:d4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Validity
            Not Before: Apr  4 22:07:16 2024 GMT
            Not After : Apr  3 22:12:16 2025 GMT
        Subject: CN=191450E7E295C8856DD1B62DED90C1D2B226709A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:b8:34:9a:ef:a3:75:66:45:75:71:0c:55:
                    e3:f8:b3:67:61:3c:46:4c:02:4d:ba:4c:5d:fd:a4:
                    cb:19:34:35:13:14:25:29:f5:96:ec:d0:85:63:d8:
                    7e:36:c9:77:18:13:fc:a7:cf:fd:60:63:0b:84:61:
                    71:ac:47:8c:fc:42:4f:b7:25:95:be:ee:5c:a3:02:
                    c1:19:11:fe:e8:55:16:6c:53:af:8a:75:18:bd:6a:
                    1d:cb:e6:6e:33:f8:ea:34:1c:37:ac:8f:1c:45:fa:
                    22:05:6d:0a:af:87:92:9a:d7:fe:73:13:c5:e5:8c:
                    34:e2:89:29:40:fc:62:e3:4b:ef:0f:84:60:7c:d0:
                    d5:ba:3a:bd:f8:73:f5:a8:e9:b0:41:62:d1:56:d2:
                    f9:56:a6:db:cc:e2:36:47:d2:79:23:9c:6c:cb:94:
                    fb:9f:16:54:1d:94:13:86:e2:02:fe:db:28:9b:fc:
                    71:01:95:14:e3:d7:62:76:dc:61:8b:0f:39:63:fe:
                    25:31:92:8c:e1:2e:d7:3d:a5:39:da:5d:d0:15:20:
                    07:25:48:d7:2d:7e:23:bf:55:94:bb:5d:7a:4e:8d:
                    67:4a:22:f7:a9:c6:64:00:b1:77:b4:fe:67:f7:3b:
                    82:99:ec:50:0f:d4:97:0a:d3:85:fe:7d:1d:64:fa:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:50:E7:E2:95:C8:85:6D:D1:B6:2D:ED:90:C1:D2:B2:26:70:9A
            X509v3 Authority Key Identifier:
                keyid:B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3137302e38332e36382e302f32322d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:fd:cb:00:fe:2b:1b:39:2a:60:c1:69:be:97:82:63:55:
         fb:3a:bf:7e:71:8f:d5:a1:79:6d:a3:ef:15:77:c6:09:35:e0:
         39:93:ac:51:41:df:0d:3d:d7:1e:3a:5f:94:32:7a:76:bf:29:
         18:05:fe:ef:02:09:80:79:cb:88:f3:09:50:f8:d1:98:c3:fb:
         e1:9b:94:16:db:f6:74:01:d3:1b:4a:3e:91:24:45:c4:7d:7b:
         d0:6f:33:cb:66:a1:22:4e:d8:03:97:9c:05:91:62:92:50:52:
         81:40:05:fd:95:f1:d3:c7:de:e8:43:a2:f0:f6:73:ad:3f:c1:
         95:35:99:84:92:7c:55:5c:74:f3:8e:24:8e:e4:8a:a8:ad:8e:
         2a:1f:75:68:4e:f4:20:f7:fb:07:8d:7b:62:20:42:ac:7a:b3:
         87:30:cc:55:2f:47:c7:00:12:aa:0a:b8:c1:c8:fa:83:b3:ef:
         2e:49:c1:0b:00:17:7d:70:d5:c7:88:e6:c8:d2:20:d0:d1:c3:
         ce:dd:1e:c5:3d:6f:fa:53:d2:ca:0d:37:72:fc:da:db:e0:e8:
         e0:d1:3c:7a:88:e9:70:62:56:17:8c:13:69:71:3d:69:56:4b:
         2f:36:db:65:0d:26:43:08:13:6a:63:88:ba:b8:d8:2c:3b:34:
         6c:e2:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:27 2024 by rpki-client on console-ams.rpki-client.org