Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa
File:                     3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa (raw, json)
Hash identifier:          unVWDU9gohF3xbPLcxh/W6i5utNd8nzQlRg65qv1l7Q=
Subject key identifier:   80:57:64:9F:2E:BA:5A:55:7B:27:1F:A2:8A:46:B0:05:FC:7C:01:8B
Certificate issuer:       /CN=83D0155F5069287D4AA91D06FC515095D8B510B8
Certificate serial:       4092114AE414DA94A9B38879C37783E7FA18357D
Authority key identifier: 83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa
Signing time:             Thu 04 Apr 2024 14:12:46 +0000
ROA not before:           Thu 04 Apr 2024 14:07:46 +0000
ROA not after:            Thu 03 Apr 2025 14:12:46 +0000
asID:                     271023
IP address blocks:        191.37.170.124/31 maxlen: 31

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl
                          rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:92:11:4a:e4:14:da:94:a9:b3:88:79:c3:77:83:e7:fa:18:35:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D0155F5069287D4AA91D06FC515095D8B510B8
        Validity
            Not Before: Apr  4 14:07:46 2024 GMT
            Not After : Apr  3 14:12:46 2025 GMT
        Subject: CN=8057649F2EBA5A557B271FA28A46B005FC7C018B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:06:0b:b7:8e:e8:95:57:86:6a:d0:4f:b9:
                    b4:5f:84:d7:69:57:4d:da:10:2a:1c:1c:4d:2b:16:
                    84:77:c6:da:9e:fc:95:a6:d2:57:64:94:27:00:7b:
                    6c:50:a9:0a:76:7c:82:3b:d1:38:8e:f2:0f:f0:e0:
                    a0:3d:34:7f:95:96:12:71:d2:d1:99:34:43:1d:83:
                    51:9c:b6:53:e1:7e:44:24:7f:26:5a:80:62:77:9e:
                    47:5d:18:74:a8:a1:76:ea:a1:e4:b0:f3:47:fa:f6:
                    41:4d:26:3a:95:c1:4a:79:72:0a:e9:f5:f4:b4:df:
                    ea:b8:fa:b0:02:8a:49:71:58:d5:f8:e1:77:0c:5e:
                    9d:83:3d:ff:3e:75:8a:e5:84:62:cc:e2:56:cd:8b:
                    d1:66:d9:9b:af:7e:fd:1e:6b:7b:18:67:6c:fa:12:
                    8e:5c:cb:85:ac:cb:40:10:49:39:90:fa:8a:cc:63:
                    b1:74:c5:23:86:f3:ec:72:26:e0:b5:02:14:85:d3:
                    4a:d7:28:ac:14:28:43:80:80:17:99:6a:19:c5:80:
                    74:69:2f:2e:f7:b7:50:91:f2:25:c1:9f:3f:70:78:
                    5d:12:b0:60:de:2e:df:e9:96:ae:19:c3:6d:44:47:
                    49:a6:a4:9a:5a:cb:2d:0c:7b:10:70:3b:74:6f:16:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:64:9F:2E:BA:5A:55:7B:27:1F:A2:8A:46:B0:05:FC:7C:01:8B
            X509v3 Authority Key Identifier:
                keyid:83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.170.124/31

    Signature Algorithm: sha256WithRSAEncryption
         9c:d2:89:1f:5f:6c:e8:7d:c2:73:bd:67:8c:41:96:db:f0:a4:
         ff:fd:e4:41:c8:9e:1e:c7:16:19:c6:2f:cc:de:4b:8c:0c:fa:
         40:eb:33:eb:66:2c:6e:06:5e:80:df:83:4a:57:4c:6a:be:75:
         2a:c3:e1:b0:52:9a:55:7d:a9:31:76:f9:f8:ba:1f:eb:aa:25:
         20:c2:5b:bd:53:a6:99:14:f1:c1:95:9c:0f:ca:65:c2:8b:3a:
         34:e0:0f:e6:6e:6e:c3:9c:e2:d2:8c:a0:6e:ae:6f:93:2d:59:
         c7:2b:68:dd:68:76:d3:03:48:4f:2b:1f:da:c2:9c:a2:53:53:
         96:58:d5:52:68:17:b0:e7:96:c2:59:1e:eb:3b:54:a7:bd:c6:
         d0:0f:85:57:ee:9e:b4:77:a9:3f:e0:fd:01:7b:e1:90:8f:3f:
         5d:d0:2a:cb:64:0d:bb:30:2b:4a:23:71:17:32:77:be:08:5f:
         98:28:c5:08:ff:44:8a:ce:97:ed:10:89:56:b5:f5:d5:ef:30:
         75:a0:02:5e:e4:08:b6:50:03:d1:be:7d:22:d3:90:85:70:68:
         f7:f0:18:c4:37:db:48:3e:71:54:03:94:2c:5b:1a:95:c4:a9:
         2d:e7:5e:94:ff:7f:b1:55:ab:2c:13:3c:16:97:38:5f:ee:30:
         1a:2c:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org