Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234322e302f32342d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234322e302f32342d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          aKWqfVEc81+PwNe2wOgLGOefsOMrMxgKzQ8MsLtbb6Y=
Subject key identifier:   20:BD:D0:3E:E2:69:C9:04:C2:B9:63:CD:61:B0:A5:90:5B:60:98:E4
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       2162034E7B9DAF4070DB3738F5657A0659B1DAFA
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234322e302f32342d3332203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:53:22 +0000
ROA not before:           Tue 21 May 2024 16:48:22 +0000
ROA not after:            Tue 20 May 2025 16:53:22 +0000
asID:                     271293
IP address blocks:        170.233.242.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:03:4e:7b:9d:af:40:70:db:37:38:f5:65:7a:06:59:b1:da:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:48:22 2024 GMT
            Not After : May 20 16:53:22 2025 GMT
        Subject: CN=3082010A0282010100C01BEFE7949E65D9CAAE91F58F92E9AFA4E18F4DDCB35B10EA15F0C08A7774F003BE2AA491832A7E31A77028961231A96DA1FAD8AE37AFFCC7C222280862AC1ECA2C80FAAC7293478747F101E5FCBD229CBE06118D8C94DF93D965DF888DBE9DFD31FD5F9FCA4AAE79D60C3135E9EC56E9B146BD4C67EE787470B7E50CA127EC936267A02C82DF81EC6ABB2395C4A87F7C26E1A577ED3AC0A357F9CD1B6C02AEE050347DE669C6ADC1D7B755F42BB9108404D051F1A15F0E7F3C68B7CEC99DFCBBF6C17EB577D85F281F9D16FE375DD34F8866FEFC6C662F2B0C7253C0043AFB3D44059FD36C950B1B266842FEA103F6C98F823E0ACDB0C3E92B171D67BAA94F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:ef:e7:94:9e:65:d9:ca:ae:91:f5:8f:92:
                    e9:af:a4:e1:8f:4d:dc:b3:5b:10:ea:15:f0:c0:8a:
                    77:74:f0:03:be:2a:a4:91:83:2a:7e:31:a7:70:28:
                    96:12:31:a9:6d:a1:fa:d8:ae:37:af:fc:c7:c2:22:
                    28:08:62:ac:1e:ca:2c:80:fa:ac:72:93:47:87:47:
                    f1:01:e5:fc:bd:22:9c:be:06:11:8d:8c:94:df:93:
                    d9:65:df:88:8d:be:9d:fd:31:fd:5f:9f:ca:4a:ae:
                    79:d6:0c:31:35:e9:ec:56:e9:b1:46:bd:4c:67:ee:
                    78:74:70:b7:e5:0c:a1:27:ec:93:62:67:a0:2c:82:
                    df:81:ec:6a:bb:23:95:c4:a8:7f:7c:26:e1:a5:77:
                    ed:3a:c0:a3:57:f9:cd:1b:6c:02:ae:e0:50:34:7d:
                    e6:69:c6:ad:c1:d7:b7:55:f4:2b:b9:10:84:04:d0:
                    51:f1:a1:5f:0e:7f:3c:68:b7:ce:c9:9d:fc:bb:f6:
                    c1:7e:b5:77:d8:5f:28:1f:9d:16:fe:37:5d:d3:4f:
                    88:66:fe:fc:6c:66:2f:2b:0c:72:53:c0:04:3a:fb:
                    3d:44:05:9f:d3:6c:95:0b:1b:26:68:42:fe:a1:03:
                    f6:c9:8f:82:3e:0a:cd:b0:c3:e9:2b:17:1d:67:ba:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:D0:3E:E2:69:C9:04:C2:B9:63:CD:61:B0:A5:90:5B:60:98:E4
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234322e302f32342d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:f9:b3:f1:3a:57:ae:f3:86:8d:10:73:ae:28:a8:fe:a1:
         80:33:f3:1b:b7:b9:cf:8e:f9:7a:f6:cc:0c:da:3f:4c:56:9f:
         48:51:41:f0:9b:e8:9d:70:6d:64:96:bf:c6:64:9f:48:1b:c8:
         e5:c6:e2:eb:cd:5f:da:75:f7:bb:8a:a4:1e:79:20:8b:b9:20:
         a5:73:a3:be:aa:67:1f:2f:45:d4:1f:9f:b6:c0:0e:23:0b:b5:
         de:c5:07:a2:92:1e:cd:51:4f:e4:2d:fb:37:56:55:ca:38:80:
         4b:b7:1c:76:e2:42:40:2e:ae:c1:07:fc:15:7e:7e:6b:29:e6:
         13:1d:21:46:e9:60:73:3b:eb:a9:a4:ac:2b:31:e6:b4:29:71:
         57:61:98:fe:77:79:45:6f:5b:ec:0a:e0:20:50:77:bd:8e:b2:
         7d:03:d5:0f:f4:76:23:41:fa:8b:3f:cc:85:82:ad:d7:4b:57:
         52:be:2f:6b:b0:94:78:76:34:9a:19:91:14:b0:de:21:f1:a9:
         2d:ee:be:93:37:a1:97:a8:f8:cb:11:f0:82:ed:15:78:30:38:
         93:6d:55:4b:c0:2b:85:b8:6e:f9:1f:ff:36:2b:05:7c:77:7f:
         4d:ec:9a:e4:17:53:eb:22:95:e8:48:68:e4:1e:ea:6e:14:39:
         e1:d1:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:56:53 2024 by rpki-client on console-ams.rpki-client.org