Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39382e302f32342d3234203d3e203631373438.roa
File:                     3137302e3234352e39382e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          1Olqzr9lH7AC/JGRF2PUwakndfhpN7pb0EGBO/Ug9PY=
Subject key identifier:   10:5A:5B:CC:00:E6:F3:1E:61:7A:BA:0B:16:16:0C:40:29:2D:72:28
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       3289226F56D835A3AD716426A1ECA7BFE85100
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39382e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:20:14 +0000
ROA not before:           Wed 10 Apr 2024 19:15:14 +0000
ROA not after:            Wed 09 Apr 2025 19:20:14 +0000
asID:                     61748
IP address blocks:        170.245.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:89:22:6f:56:d8:35:a3:ad:71:64:26:a1:ec:a7:bf:e8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:15:14 2024 GMT
            Not After : Apr  9 19:20:14 2025 GMT
        Subject: CN=105A5BCC00E6F31E617ABA0B16160C40292D7228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:e4:8a:a1:70:14:90:5f:47:4d:ce:84:4c:
                    f9:99:7d:9d:0c:fd:32:f6:13:45:d3:ba:f2:1e:09:
                    56:1c:c3:03:d5:df:89:fa:b8:ed:a4:45:1e:28:a5:
                    0c:27:57:9d:73:83:d8:af:e4:71:8b:a8:7f:ba:b1:
                    68:22:88:ef:2f:11:74:ae:3c:71:9f:df:5f:0c:a8:
                    d0:40:7b:36:7a:92:96:07:8b:e1:2d:a5:05:0f:cf:
                    e1:85:ce:43:df:24:47:11:90:5c:01:88:73:f0:4f:
                    7d:eb:ec:d9:fe:49:0b:3b:d1:9b:fd:58:3c:6e:b5:
                    1a:8f:d4:d1:a9:12:3f:26:32:0c:f8:f7:f1:da:23:
                    c4:1d:cf:5d:9c:dc:30:0d:97:be:ce:b2:ab:08:0b:
                    2b:e9:c7:c3:fe:f1:61:e9:bf:66:61:4c:0a:4f:61:
                    da:ab:0a:5c:1a:6a:22:78:d1:05:fc:d0:bf:6c:0c:
                    b6:4b:e7:0e:0e:6e:9d:ee:ac:0f:00:4e:8f:f8:16:
                    4b:19:77:52:a5:87:6f:02:62:55:db:94:13:86:2f:
                    f1:a5:bf:a8:2b:47:ce:d0:6b:6b:a2:e8:42:f0:51:
                    55:4d:61:2b:73:8f:fa:a0:e2:11:b8:69:d9:33:34:
                    4b:61:c6:42:dc:0d:92:de:6d:01:27:a5:42:77:81:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5A:5B:CC:00:E6:F3:1E:61:7A:BA:0B:16:16:0C:40:29:2D:72:28
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39382e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:37:a1:52:db:89:80:7a:3c:34:7d:e2:e0:db:5f:ca:ec:
         ca:84:1c:32:fb:70:0f:a4:bd:c3:29:66:f3:71:c3:62:3c:2c:
         c1:bd:31:c4:d9:dc:f6:d5:ba:e5:f4:89:36:62:55:69:29:ee:
         71:67:8c:b1:d1:0d:28:68:96:10:15:e5:fb:5f:39:73:ed:b9:
         47:e9:20:91:1d:94:a6:ef:5e:d4:bb:63:fd:99:27:c2:65:6d:
         c8:6c:dc:8d:f4:3b:5e:22:50:22:a7:b6:74:a5:d3:9a:d4:ff:
         a7:eb:34:53:4d:0c:02:0c:41:f8:ae:bb:a0:ec:bf:ff:fb:10:
         a5:34:66:ea:26:9c:4c:a0:1b:6e:01:69:87:83:66:6a:fc:1d:
         67:ec:cf:e8:d9:7d:3c:33:32:a4:ca:d0:12:d5:19:6f:f4:24:
         d0:e3:83:1c:7d:32:c1:89:ed:80:40:47:1d:ac:c3:49:51:2a:
         b8:7a:65:39:9e:28:41:10:ed:d0:aa:1b:02:b5:d5:4f:02:a0:
         16:c4:b0:04:ca:89:09:4c:a0:17:9c:12:a2:1b:8b:63:0d:e4:
         27:ce:c1:4d:4d:10:f4:60:0c:63:c5:f3:f6:e7:9b:f9:a3:b3:
         cf:7e:ac:c3:21:26:8a:1c:6e:c1:4d:62:36:63:b3:8a:f5:ec:
         e5:ee:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:12 2024 by rpki-client on console-fra.rpki-client.org