Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
File:                     3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          GwRnzGNry6/kKGpLmY3qzV1bCImmZukOz9y1eG4U2Lc=
Subject key identifier:   27:46:D4:CE:18:97:D6:C0:C5:0C:F9:8F:83:4C:A6:C3:16:98:C1:68
Certificate issuer:       /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial:       68866F2DDCB45E131133F110E0D3913105606C0D
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
Signing time:             Thu 04 Apr 2024 13:24:37 +0000
ROA not before:           Thu 04 Apr 2024 13:19:37 +0000
ROA not after:            Thu 03 Apr 2025 13:24:37 +0000
asID:                     263496
IP address blocks:        170.244.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:86:6f:2d:dc:b4:5e:13:11:33:f1:10:e0:d3:91:31:05:60:6c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
        Validity
            Not Before: Apr  4 13:19:37 2024 GMT
            Not After : Apr  3 13:24:37 2025 GMT
        Subject: CN=2746D4CE1897D6C0C50CF98F834CA6C31698C168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:ec:bb:18:13:37:9c:ec:a5:b1:a2:64:70:
                    f6:52:3b:67:b5:6a:7a:01:67:10:7a:21:3a:48:2d:
                    cf:4b:56:fe:a0:3c:9a:9f:59:45:41:a2:3f:f1:59:
                    26:44:82:be:8e:e9:b8:19:08:cd:79:33:85:be:2f:
                    21:d5:67:13:76:04:7d:73:0e:78:c1:33:06:cb:9e:
                    ea:76:5f:87:d0:fd:6d:07:57:52:34:6e:72:23:ad:
                    8f:ca:c6:95:87:19:46:94:03:2f:f1:9a:17:ab:69:
                    07:c5:33:23:f5:6f:7f:07:d0:0e:e2:ca:18:25:b9:
                    cf:9a:26:cd:42:f5:5c:c0:19:90:03:63:41:e7:07:
                    0a:12:32:2c:a8:2e:24:d4:6f:67:47:f2:b4:ba:73:
                    32:d6:aa:bd:8b:c9:ab:e8:4b:6c:6b:e7:0e:ed:72:
                    fe:3d:92:34:a4:df:ab:f7:90:06:d8:42:55:0c:d6:
                    28:6f:fd:c7:54:3a:70:d9:6d:ac:b9:f8:99:47:1e:
                    33:fc:9e:c0:d3:88:76:c2:7a:3d:58:d1:c2:7f:80:
                    c8:db:64:20:88:b2:aa:e9:b3:bc:0e:65:10:2f:b7:
                    66:16:f2:00:3a:a7:cb:86:e1:89:8e:db:5d:d7:bf:
                    d1:eb:03:4f:33:82:4b:1b:35:50:e5:3d:79:7b:2b:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:D4:CE:18:97:D6:C0:C5:0C:F9:8F:83:4C:A6:C3:16:98:C1:68
            X509v3 Authority Key Identifier:
                keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:bf:bc:d4:66:57:43:cd:3d:1f:50:57:8f:86:57:21:8a:
         e2:e3:49:b4:38:00:eb:c3:4c:d1:8a:6c:b4:1d:4a:1c:70:6d:
         05:df:d4:32:51:a2:bf:29:cf:1a:72:c1:ef:cd:e4:f7:39:de:
         33:dd:2e:08:63:07:74:6a:ba:f1:94:9b:96:98:d6:61:af:0f:
         3d:ed:6c:7c:31:23:37:b1:38:cc:08:80:a9:a7:f5:47:ba:5c:
         7a:c8:60:b2:86:bd:90:39:01:a7:73:bd:dc:ce:26:c9:f8:9d:
         a6:2d:d2:c5:2b:8f:7f:81:bc:28:85:94:96:18:98:8b:34:f1:
         6b:d9:4b:3f:35:c2:74:18:7b:78:be:67:73:a6:5c:c7:26:fd:
         53:e6:29:5e:d2:6d:e4:87:84:c0:32:ec:46:3c:46:7d:36:e1:
         cd:34:0e:11:66:e2:b7:09:45:70:e5:f2:25:7f:aa:c9:a7:89:
         13:90:3b:67:65:95:dc:fc:5c:2f:72:e2:ee:66:40:43:a2:90:
         03:5a:15:9c:96:5c:53:aa:c2:25:be:6d:2f:59:55:e1:6b:8c:
         b2:f1:80:68:89:f4:67:1b:42:a8:fe:d0:e0:93:8a:6b:95:fb:
         1c:58:a7:bf:c5:63:40:9d:a4:e8:9e:8c:6f:e5:90:d8:61:4b:
         7f:17:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:09 2024 by rpki-client on console-fra.rpki-client.org