Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa
File:                     3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa (raw, json)
Hash identifier:          eAROyzIvCOvH5I9FgAbhOg70ad92wcNpdLMrpEsUJPY=
Subject key identifier:   32:C7:6A:F6:64:C9:A0:90:64:58:80:37:8E:E7:0E:CC:36:2B:2C:B7
Certificate issuer:       /CN=EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144
Certificate serial:       26D224C9294761BCBD91FB19C7580373A2C08E02
Authority key identifier: EE:8B:AF:E7:16:B0:EC:43:1F:F4:EE:AE:C2:C9:F6:E5:2F:F8:91:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa
Signing time:             Thu 04 Apr 2024 03:00:19 +0000
ROA not before:           Thu 04 Apr 2024 02:55:19 +0000
ROA not after:            Thu 03 Apr 2025 03:00:19 +0000
asID:                     266504
IP address blocks:        170.244.160.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl
                          rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d2:24:c9:29:47:61:bc:bd:91:fb:19:c7:58:03:73:a2:c0:8e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144
        Validity
            Not Before: Apr  4 02:55:19 2024 GMT
            Not After : Apr  3 03:00:19 2025 GMT
        Subject: CN=32C76AF664C9A090645880378EE70ECC362B2CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:97:da:03:93:75:a7:b9:9b:c5:0d:51:fe:
                    37:0b:38:95:e2:55:fb:a6:09:2a:95:7a:61:9f:dd:
                    44:5b:1e:f8:58:09:a2:2e:c2:af:fb:3c:dd:32:0f:
                    cb:5b:c1:44:95:f5:47:ae:c7:f2:b7:41:f5:8a:80:
                    be:58:9e:08:ce:99:fa:e4:d2:af:60:5d:eb:cc:c5:
                    21:7f:90:99:63:9a:5c:59:ca:f7:99:c0:30:1e:d3:
                    49:d9:43:1d:05:35:a7:39:3b:ee:17:e6:71:45:9a:
                    00:3d:b3:10:f7:82:79:15:6b:56:e7:b2:03:7f:5c:
                    58:56:2b:37:38:d4:5f:e8:35:b9:fe:20:da:1c:ef:
                    22:4e:31:3a:3d:37:b5:4d:5f:24:ae:36:11:6d:c4:
                    b5:28:bc:e0:c2:1f:b0:6a:66:b1:84:35:e1:a5:25:
                    8d:d6:8c:61:57:71:05:03:dc:34:89:c4:4c:34:91:
                    46:c4:fb:c4:73:ef:4c:92:c7:67:c1:42:11:44:76:
                    34:67:8d:79:f0:b9:5d:bd:1e:69:ad:9e:ea:4c:7c:
                    f3:f9:30:97:17:80:4a:d4:4e:38:0f:f7:35:4b:49:
                    21:19:cb:f0:9b:80:33:8b:58:e1:87:6a:50:2a:cd:
                    61:5c:f9:c1:0c:2d:82:ac:0d:c9:3a:9a:41:14:5f:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:6A:F6:64:C9:A0:90:64:58:80:37:8E:E7:0E:CC:36:2B:2C:B7
            X509v3 Authority Key Identifier:
                keyid:EE:8B:AF:E7:16:B0:EC:43:1F:F4:EE:AE:C2:C9:F6:E5:2F:F8:91:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:5e:22:3a:00:49:0a:a0:4a:d2:48:3d:40:7d:ca:69:05:
         29:a7:5f:7d:3d:fb:9c:01:2d:0a:bd:39:b3:4b:72:2c:4e:6f:
         32:ef:74:c1:40:81:c4:ba:06:c5:11:f4:f8:a6:3f:0e:f7:6a:
         cd:0b:ff:57:3e:a6:c4:c5:2c:51:69:67:9d:24:e6:a4:9a:f6:
         a6:71:fa:5c:43:04:a3:bd:df:ab:4b:62:06:77:b8:b6:e3:41:
         90:1f:31:3f:3c:d9:eb:ec:ce:53:5b:58:ee:bf:3e:18:7e:09:
         91:7b:8a:55:79:25:af:4b:81:ac:08:6d:20:f2:0e:9a:37:bc:
         ba:85:d0:d7:a3:74:bf:72:94:26:a1:29:4f:e4:2e:17:fb:3c:
         5d:d3:95:8f:cd:8a:04:c2:e9:76:88:fe:72:c4:94:c0:b7:ed:
         b1:2e:ca:32:e6:02:75:fc:13:25:fc:cb:85:23:b8:51:31:96:
         e7:16:65:9f:9a:d9:c9:6f:b1:7e:31:2c:2f:c6:5a:54:ff:23:
         87:d7:c7:d9:e6:53:f2:56:87:da:90:ff:54:d9:42:12:f8:51:
         fa:9b:79:dd:38:a5:da:c0:57:8f:c4:4e:31:ea:ef:f9:75:97:
         7a:fc:f8:4a:68:30:c1:fd:d5:8b:a7:93:04:2b:3c:b3:48:80:
         75:f6:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org