Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
File:                     3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier:          oDCxXQn81mikDL1cX62ivShqm2NIAaabT19rhT+KMI0=
Subject key identifier:   D1:4D:51:03:00:79:20:37:B6:8F:35:C3:5A:09:83:06:45:1B:0C:F2
Certificate issuer:       /CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
Certificate serial:       175AC1F6F9315C4A646F651C1F067ECF6873A051
Authority key identifier: 65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
Signing time:             Thu 04 Apr 2024 08:10:46 +0000
ROA not before:           Thu 04 Apr 2024 08:05:46 +0000
ROA not after:            Thu 03 Apr 2025 08:10:46 +0000
asID:                     265080
IP address blocks:        170.233.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5a:c1:f6:f9:31:5c:4a:64:6f:65:1c:1f:06:7e:cf:68:73:a0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
        Validity
            Not Before: Apr  4 08:05:46 2024 GMT
            Not After : Apr  3 08:10:46 2025 GMT
        Subject: CN=D14D510300792037B68F35C35A098306451B0CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:8e:1f:9a:53:db:16:85:07:d5:ec:9e:09:
                    bb:33:0d:de:36:18:1f:0c:c6:28:1f:d6:11:e3:f0:
                    f6:f7:1f:17:f8:ac:d6:70:94:f5:fb:2e:81:d8:99:
                    f8:39:82:b5:f4:b4:49:63:51:df:53:75:22:1a:5d:
                    0c:99:51:55:8e:a4:6b:c1:cf:f9:d6:bc:93:bb:9a:
                    99:a7:5d:6f:af:e6:59:05:91:2c:c4:0c:b5:00:00:
                    75:fd:93:c0:ab:1d:ce:3f:7b:a4:3b:e0:2f:ef:09:
                    9c:79:7e:93:33:35:4a:33:ba:b9:98:d9:5b:62:fc:
                    0c:73:0c:b8:06:ca:2f:e3:ee:7f:5c:44:0e:b4:ad:
                    af:ad:3a:59:5f:36:aa:fd:a8:f6:3a:10:8e:c1:62:
                    4f:a4:ee:7a:26:23:bd:12:08:83:61:6c:13:11:50:
                    87:bf:ac:30:a2:be:93:aa:c2:3f:17:3d:99:70:2a:
                    d0:27:e3:dc:ca:c3:01:b7:9d:49:fd:4e:5b:2b:3a:
                    44:89:42:87:93:88:b9:7c:c8:3d:81:cc:96:58:89:
                    f3:d0:0a:95:a5:8a:07:89:5f:01:ba:c3:d5:28:c5:
                    e1:24:9c:50:7e:15:c4:5f:da:30:3d:9c:98:f5:4f:
                    c1:37:14:78:4e:d0:aa:1f:2e:1e:dc:80:95:d9:7f:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4D:51:03:00:79:20:37:B6:8F:35:C3:5A:09:83:06:45:1B:0C:F2
            X509v3 Authority Key Identifier:
                keyid:65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:e2:d9:09:04:31:cd:b1:a9:fc:f1:86:08:73:cb:5b:e9:
         83:24:b2:b8:5f:33:60:a6:08:99:b6:0b:e5:43:65:f3:78:73:
         87:40:ef:52:0b:83:b4:7d:ed:93:39:93:f9:66:cc:1c:f0:7f:
         84:cc:2d:96:48:af:08:e0:86:30:a4:80:1b:93:a0:c4:cb:0c:
         91:cb:c0:e0:35:e3:90:0e:f0:30:d1:e5:45:5a:47:54:c2:48:
         4d:2e:69:d5:c6:75:8e:63:5c:84:21:14:06:fd:66:3c:83:06:
         db:b6:cc:fb:39:56:a8:14:b5:a5:94:f2:ef:d0:61:ed:f3:a3:
         e5:83:83:20:21:f6:41:94:fd:5e:61:e0:7e:dd:b2:f5:d5:1e:
         40:19:bd:18:3c:64:c1:2f:1f:9a:6f:47:81:58:9f:91:0c:fa:
         7d:7b:f5:3d:06:7d:72:e4:0b:54:19:c7:95:74:07:ba:ab:41:
         3e:2d:d4:84:20:39:f4:96:69:82:9f:83:b5:f6:53:34:d3:19:
         ba:10:e3:9b:84:ae:de:5d:63:f3:5a:c5:c0:e9:1f:e9:f3:19:
         60:4f:8e:97:11:68:dd:c4:01:ba:f2:82:87:99:76:4f:4f:be:
         9e:26:4e:74:fc:18:8e:de:21:ad:80:83:f1:c4:20:4e:b6:23:
         21:0d:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org