Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          FvoUmyFLzOdGOoaF3xAqtfxHzAqxodNgqSbr+Aok+2k=
Subject key identifier:   FE:94:B9:B3:6A:72:A7:57:FC:2B:5B:FE:2F:18:54:F6:3D:A2:6E:56
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       65BA0BAD68322DBD87354202AB7EAB392ECB0659
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     266320
IP address blocks:        170.238.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ba:0b:ad:68:32:2d:bd:87:35:42:02:ab:7e:ab:39:2e:cb:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject: CN=FE94B9B36A72A757FC2B5BFE2F1854F63DA26E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:52:34:95:f6:96:93:88:3d:cd:49:2c:d9:
                    56:cc:be:21:fa:45:0c:e4:a9:9c:36:8e:80:d4:c5:
                    30:eb:37:49:8f:15:35:65:d3:7d:85:bc:98:7e:30:
                    ae:6a:40:3e:48:a6:e2:d3:31:32:08:6b:93:ae:4f:
                    04:db:79:64:1b:9f:d2:b3:32:91:9a:b1:53:09:5b:
                    e5:cc:4b:bf:c2:d5:15:a5:fa:2c:8f:c3:30:fa:2f:
                    67:87:89:84:1e:89:e3:6c:e8:ce:ce:e2:09:3c:93:
                    5c:0f:be:8c:22:3e:63:8b:0d:3e:7f:93:7a:4f:2e:
                    15:9f:e9:24:1d:97:de:ed:bb:ac:77:e7:82:c2:e5:
                    75:7b:73:9e:0f:1c:31:f6:e8:2b:22:19:67:de:88:
                    92:7a:7e:0e:e5:44:8f:a5:97:43:84:3e:65:3f:9a:
                    fc:aa:11:b7:07:a6:fd:68:1d:ca:1e:fa:c5:6e:80:
                    31:0d:3a:66:22:1f:d6:d6:f6:2a:b5:e7:f2:61:e5:
                    20:6e:c4:ab:a9:23:89:c0:c7:2b:89:9c:a9:3b:c3:
                    92:15:e0:41:98:8e:08:32:ac:b0:97:08:f5:98:52:
                    5a:a2:55:93:f2:6c:31:3f:a7:99:0e:c1:60:4c:65:
                    58:7c:a2:3d:de:ef:9d:45:c3:c4:51:5f:92:96:35:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:94:B9:B3:6A:72:A7:57:FC:2B:5B:FE:2F:18:54:F6:3D:A2:6E:56
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:85:99:c2:d5:7d:d0:63:39:e1:11:0b:16:b8:f2:ca:49:
         54:84:d4:5e:fd:30:2e:e9:80:fb:3f:c5:c1:8b:a3:54:47:ba:
         7a:75:86:4c:68:f8:d1:14:fc:92:a4:98:c3:90:f0:7e:b7:c4:
         51:45:c0:ee:b0:37:28:ef:6c:2d:ea:98:e7:d6:16:29:81:d1:
         c4:76:4b:8b:fa:4d:8d:f0:b8:bd:3e:63:22:e0:24:0a:e0:8f:
         34:4c:57:1f:c3:51:1e:b2:13:ca:c4:c9:80:ea:bd:05:8f:a0:
         69:67:29:cd:1e:0f:22:3a:6a:69:82:58:ed:f1:c3:1b:33:93:
         ec:4b:9b:8a:28:f2:26:62:83:0b:af:3a:97:41:73:f0:90:82:
         5e:de:ce:2a:8a:93:17:04:33:a5:0a:df:81:77:e9:50:7a:8e:
         2a:fc:d8:42:31:c4:3b:51:d2:e7:4e:66:52:b6:d5:50:ae:c7:
         c0:74:1d:ff:bb:94:d6:9b:b9:4d:a7:51:dc:2a:6b:fc:f9:f4:
         4d:d6:17:8d:4e:00:68:66:94:4d:aa:41:c9:18:ad:9d:78:4f:
         59:0c:90:66:54:f2:b6:39:c8:2c:71:26:8e:5e:6e:b7:6a:42:
         a5:83:35:e4:1e:59:bf:6e:1a:46:91:a5:16:fe:83:2a:5d:92:
         6e:7d:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org