Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa
File:                     3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa (raw, json)
Hash identifier:          7P9o1lrlxSOuB/tyYfCu3BBfJPSExkbX2oR6x47Dp9g=
Subject key identifier:   02:B0:F0:1A:96:CF:29:A9:53:73:94:F3:8B:9B:84:26:F0:48:69:0D
Certificate issuer:       /CN=655CC039C16DFEB4822C7990104A86C7C7064890
Certificate serial:       488D4908A380A8A9356AA9C23C4B93D18514BF6D
Authority key identifier: 65:5C:C0:39:C1:6D:FE:B4:82:2C:79:90:10:4A:86:C7:C7:06:48:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/655CC039C16DFEB4822C7990104A86C7C7064890.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa
Signing time:             Fri 05 Apr 2024 00:21:58 +0000
ROA not before:           Fri 05 Apr 2024 00:16:58 +0000
ROA not after:            Fri 04 Apr 2025 00:21:58 +0000
asID:                     270917
IP address blocks:        177.200.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/655CC039C16DFEB4822C7990104A86C7C7064890.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/655CC039C16DFEB4822C7990104A86C7C7064890.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/655CC039C16DFEB4822C7990104A86C7C7064890.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8d:49:08:a3:80:a8:a9:35:6a:a9:c2:3c:4b:93:d1:85:14:bf:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655CC039C16DFEB4822C7990104A86C7C7064890
        Validity
            Not Before: Apr  5 00:16:58 2024 GMT
            Not After : Apr  4 00:21:58 2025 GMT
        Subject: CN=02B0F01A96CF29A9537394F38B9B8426F048690D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:c7:dd:c9:b6:c7:03:7c:1a:0b:f5:b5:51:
                    9c:b7:28:93:c4:55:15:34:39:d3:d2:f1:ae:ef:e1:
                    67:52:c9:72:8d:70:69:ee:e9:a7:54:7a:20:10:44:
                    01:a4:f3:75:3b:1b:73:d2:f5:7f:07:5f:33:8f:13:
                    0f:aa:04:38:eb:6f:5b:ec:87:a5:e3:6c:50:c0:b2:
                    da:32:5f:02:35:ca:52:13:c7:ef:3d:88:f1:3d:63:
                    62:55:10:7a:72:57:d8:4a:d1:8f:35:04:5a:f6:9c:
                    5f:f3:a2:68:0a:bb:b9:c3:c1:c4:38:77:1e:2a:fb:
                    40:a1:68:99:c7:0c:7c:c5:81:ed:6e:72:03:c3:c6:
                    b2:cc:f8:6f:5c:89:92:7c:ac:44:b8:17:ba:c7:2b:
                    bc:43:87:3b:42:39:2a:13:d6:db:c1:b2:14:6d:31:
                    0d:31:e6:ce:a2:83:be:94:ee:e8:c2:5c:08:b8:2c:
                    b4:e4:fd:fc:99:cb:07:d0:3f:60:06:07:0c:5c:0b:
                    27:ef:3c:7c:f2:89:ef:8b:4f:d1:0c:b8:58:02:f6:
                    b1:58:e5:f0:6f:07:ed:66:4a:46:13:37:36:25:b9:
                    88:9c:32:86:26:ee:02:8c:90:e2:1c:02:a9:12:30:
                    87:df:0b:17:6b:fd:27:e1:12:49:a6:ea:06:5b:10:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B0:F0:1A:96:CF:29:A9:53:73:94:F3:8B:9B:84:26:F0:48:69:0D
            X509v3 Authority Key Identifier:
                keyid:65:5C:C0:39:C1:6D:FE:B4:82:2C:79:90:10:4A:86:C7:C7:06:48:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/655CC039C16DFEB4822C7990104A86C7C7064890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/655CC039C16DFEB4822C7990104A86C7C7064890.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:09:82:81:2f:3f:76:19:38:85:11:80:89:63:a6:11:13:
         24:b4:a7:66:d5:00:0b:aa:36:9e:88:c3:2f:0f:de:ec:e2:4f:
         3b:9b:05:4a:40:79:f9:b7:8b:62:72:a9:41:83:d5:e3:67:95:
         4b:5d:af:51:17:58:44:a9:89:a0:1a:d7:fa:18:70:ef:39:97:
         42:f7:34:f7:e2:46:0c:7a:07:b7:5c:11:ff:2f:c5:99:bf:85:
         2f:cc:18:1e:d5:96:63:c2:ce:95:d4:69:cd:ed:ad:92:06:86:
         f5:6b:f3:73:49:c1:23:a8:e5:25:68:86:78:68:b0:de:71:8a:
         ad:c8:4b:0a:88:73:82:e1:a3:5b:63:9a:7c:e2:e8:af:ad:86:
         43:b8:49:83:21:e1:04:20:ce:f3:86:17:8c:42:60:db:20:61:
         61:2a:c1:45:7d:2b:0f:bb:b4:40:23:16:7c:b4:3f:4e:51:a9:
         17:54:f9:78:95:e4:54:4e:c6:1d:05:08:b6:5b:0c:2b:f7:8e:
         d9:4b:6f:8d:c5:35:0f:64:c6:dc:1f:40:17:a7:b5:00:a6:2e:
         87:1f:61:5c:fa:b9:38:dd:84:78:42:73:8e:ff:32:5f:7c:c7:
         ba:48:7a:b7:81:d2:9b:96:f4:ae:34:18:cd:8f:34:41:37:19:
         6d:4d:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:03 2024 by rpki-client on console-fra.rpki-client.org