Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa
File:                     3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa (raw, json)
Hash identifier:          wMGGiE/jDaw5NMbVcobKP2Gvu085joMLePByPg4P/N0=
Subject key identifier:   13:37:0D:8C:FA:5C:C2:0D:E1:D7:F2:C1:55:95:6C:91:B2:3F:80:24
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       454BC5BDFC1168E91A9BE6EDF8D7CD0F58446A23
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa
Signing time:             Thu 04 Apr 2024 20:12:51 +0000
ROA not before:           Thu 04 Apr 2024 20:07:51 +0000
ROA not after:            Thu 03 Apr 2025 20:12:51 +0000
asID:                     272193
IP address blocks:        170.247.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl
                          rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:c5:bd:fc:11:68:e9:1a:9b:e6:ed:f8:d7:cd:0f:58:44:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Apr  4 20:07:51 2024 GMT
            Not After : Apr  3 20:12:51 2025 GMT
        Subject: CN=13370D8CFA5CC20DE1D7F2C155956C91B23F8024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:2f:e5:77:74:a4:2b:c3:26:7b:6f:7f:f0:
                    26:ba:f3:03:e7:ef:9a:06:9e:2a:ea:8b:c7:e2:69:
                    05:f8:c4:bd:80:2c:ac:0f:bc:1c:03:6c:1f:68:18:
                    5f:38:d8:69:f4:36:df:c5:2e:cd:63:7c:73:c0:93:
                    1f:ec:85:34:8f:14:86:06:85:af:f1:51:95:b3:bb:
                    df:32:cd:c0:41:6b:9b:8e:be:5c:cb:f8:28:4a:f8:
                    fa:d9:56:51:c2:d9:96:9a:57:2b:dd:10:96:97:a2:
                    fe:ef:e3:55:3f:fa:cf:78:54:d5:61:40:09:44:52:
                    67:fe:8a:d7:ac:da:d9:e7:4d:42:76:2e:a5:c6:1b:
                    f9:fb:c4:ec:d4:eb:26:44:20:10:96:32:23:40:b2:
                    1b:bd:f7:07:7b:76:dc:73:50:a2:3b:c4:4c:ee:f7:
                    11:a8:bb:6c:8a:3c:4a:99:a8:73:e2:4d:58:4a:9f:
                    81:53:af:0e:a3:6f:ad:3f:90:75:1d:cf:4d:eb:d8:
                    4c:93:07:67:19:ab:ef:dc:19:51:c8:c8:22:d4:5b:
                    cf:0c:f9:6b:fd:13:f7:14:98:aa:dd:0e:d6:e1:b7:
                    9b:b7:ca:84:c1:c9:67:9c:eb:a8:6b:d9:af:73:e3:
                    99:29:1f:8a:21:f3:47:e1:5a:76:75:f1:20:45:fc:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:0D:8C:FA:5C:C2:0D:E1:D7:F2:C1:55:95:6C:91:B2:3F:80:24
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:e2:60:b7:c4:b2:d4:5f:11:f1:b5:40:a9:21:cc:89:89:7a:
         01:e6:96:3a:c1:da:0f:fc:43:46:79:a2:3a:92:58:69:17:17:
         fb:43:7e:71:24:4a:43:87:ef:01:0d:e4:e7:60:ae:6e:e1:2f:
         7c:44:8b:53:b5:85:95:ef:71:7f:78:28:45:76:73:5e:b1:35:
         37:77:e0:d8:d4:92:d2:7a:67:6b:fc:45:b7:10:8b:81:5c:ac:
         03:ff:7c:d1:f1:15:34:ad:13:03:e9:a0:9e:0d:56:4c:92:cb:
         bd:fb:f6:6c:c0:dd:63:ae:d3:58:74:a2:af:e9:e4:d1:b3:74:
         66:8d:1e:cd:2e:d7:e8:c0:f8:42:01:36:73:d7:a0:3a:3d:ba:
         e8:13:f1:06:0a:71:79:41:a9:7b:89:43:ea:3a:47:fd:46:1e:
         d4:25:d1:1f:ed:90:08:bc:12:2f:64:e7:00:8e:5f:01:6e:4e:
         2c:d2:46:81:e6:61:6c:b1:e1:f4:7a:7b:5b:ea:6a:ff:0b:e5:
         87:8e:ab:d3:16:90:03:f4:75:86:de:dd:c6:49:20:b9:35:6b:
         61:0a:86:e6:23:74:0e:ac:a3:13:17:ff:7a:28:d7:2b:0d:b7:
         9e:39:08:25:97:9d:65:7a:d7:5f:9b:1a:5d:a3:78:ec:cf:9f:
         15:9d:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:45 2024 by rpki-client on console-fra.rpki-client.org