Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39362e302f32322d3232203d3e203631373438.roa
File:                     3137302e3234352e39362e302f32322d3232203d3e203631373438.roa (raw, json)
Hash identifier:          bKdK5nOwwBIssHhJbLmYaUyWSJWJU9VJ7PGd8oguUxg=
Subject key identifier:   62:93:68:0C:F7:BB:D9:33:62:6A:04:D9:48:80:A2:23:CB:73:6E:D4
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       63F7E71336BC267D5F2FC1A025566A39AC93A291
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39362e302f32322d3232203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:48 +0000
ROA not before:           Wed 10 Apr 2024 19:14:48 +0000
ROA not after:            Wed 09 Apr 2025 19:19:48 +0000
asID:                     61748
IP address blocks:        170.245.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f7:e7:13:36:bc:26:7d:5f:2f:c1:a0:25:56:6a:39:ac:93:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:14:48 2024 GMT
            Not After : Apr  9 19:19:48 2025 GMT
        Subject: CN=6293680CF7BBD933626A04D94880A223CB736ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:c2:84:9b:e6:05:b0:e3:d9:57:92:a0:ca:
                    a5:fc:cc:b4:f6:4e:2e:66:e2:a9:e1:5b:1f:6b:2a:
                    f0:6d:60:c9:05:22:c7:58:36:db:02:88:ee:a0:9e:
                    6d:72:bf:63:4b:9d:e8:3d:20:cf:61:4d:15:78:aa:
                    79:34:d9:b8:2c:4a:45:6c:da:f4:07:5b:4f:08:f7:
                    a2:5f:51:bf:33:fc:9a:81:59:87:3b:41:6d:6e:15:
                    00:7d:9a:43:3a:94:ef:10:dc:25:e4:05:bc:17:b6:
                    81:0b:d5:00:6c:c9:a3:08:ea:48:94:5c:7f:71:59:
                    ce:a6:6a:c3:7a:5b:8f:49:3d:9e:69:2d:5b:65:ff:
                    d6:a5:97:29:ec:a6:4c:6a:10:4f:7b:c6:f0:75:03:
                    d9:db:b3:55:99:51:84:e1:f9:96:a2:d6:19:18:40:
                    4c:f8:02:20:e7:02:17:0b:12:38:df:d5:4a:72:62:
                    9c:71:b0:f0:19:45:c6:34:ab:20:23:e9:84:37:ce:
                    1d:a5:43:72:e6:af:ef:19:86:f0:ff:65:36:fe:e7:
                    86:51:14:f9:26:9b:52:83:61:2e:8a:74:e0:62:97:
                    16:fd:89:62:01:64:61:7a:28:a6:4b:62:37:e2:53:
                    54:e4:4c:25:7e:05:e9:3c:78:79:9d:c4:72:86:a3:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:68:0C:F7:BB:D9:33:62:6A:04:D9:48:80:A2:23:CB:73:6E:D4
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39362e302f32322d3232203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:d4:f9:e3:85:31:24:b3:01:82:55:62:15:fa:00:b3:61:
         cb:81:19:f7:ad:b0:cd:40:4a:ca:5a:38:64:e2:cb:e1:d2:db:
         dc:93:a3:5a:7a:77:a7:87:7b:56:74:3a:26:c6:26:9f:79:38:
         49:63:5a:68:b4:da:d9:b1:5a:e2:b9:81:5f:c2:06:53:a3:fc:
         c1:f2:04:04:ea:5e:6e:44:de:50:9a:85:e4:de:4d:9f:8c:d4:
         a0:02:ed:7e:4e:83:bf:25:c2:c4:34:eb:a4:02:8b:a2:cd:43:
         fb:b6:67:1e:15:2a:fc:36:7e:ce:22:26:94:b8:09:83:49:e5:
         60:cf:ca:d4:14:aa:db:c6:9f:24:d8:0c:5e:b9:6a:79:6f:86:
         a4:a5:34:e0:4e:43:9f:0d:2c:5a:cb:15:a3:5e:b5:ac:10:82:
         ce:90:5a:0f:3d:15:4f:15:fd:5f:16:9e:44:92:d5:33:c5:ff:
         77:26:0b:20:07:54:f5:13:65:2b:b8:0f:2c:c2:e4:1c:81:69:
         01:59:92:7c:46:d2:74:f2:98:0b:28:41:19:f1:b8:97:0a:28:
         e3:30:6d:96:49:1e:8c:ae:3c:1a:21:fd:c5:bb:3b:de:d3:88:
         96:1a:67:d1:8a:b8:cf:60:f2:95:c5:32:e4:ff:d9:ea:e7:0e:
         93:e1:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org