Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/3137302e3233392e302e302f32322d3234203d3e203532383738.roa
File:                     3137302e3233392e302e302f32322d3234203d3e203532383738.roa (raw, json)
Hash identifier:          EBtUvZDOHCJ2+kQ+EzfPhOWdFQAWOKLpBPR4h+buMCM=
Subject key identifier:   02:41:A2:97:B8:CF:F2:6E:AC:22:83:EF:FB:B1:62:A3:66:43:95:CE
Certificate issuer:       /CN=36636C5524467BBA576827BCA72D663FDD92AE4C
Certificate serial:       302360BBE373D2E0026BF09CE049B3689AC40746
Authority key identifier: 36:63:6C:55:24:46:7B:BA:57:68:27:BC:A7:2D:66:3F:DD:92:AE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/3137302e3233392e302e302f32322d3234203d3e203532383738.roa
Signing time:             Sun 02 Jun 2024 13:25:30 +0000
ROA not before:           Sun 02 Jun 2024 13:20:30 +0000
ROA not after:            Sun 01 Jun 2025 13:25:30 +0000
asID:                     52878
IP address blocks:        170.239.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.crl
                          rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:23:60:bb:e3:73:d2:e0:02:6b:f0:9c:e0:49:b3:68:9a:c4:07:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36636C5524467BBA576827BCA72D663FDD92AE4C
        Validity
            Not Before: Jun  2 13:20:30 2024 GMT
            Not After : Jun  1 13:25:30 2025 GMT
        Subject: CN=0241A297B8CFF26EAC2283EFFBB162A3664395CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:34:b2:75:1c:aa:c2:04:e2:82:02:c9:2e:
                    a2:bd:04:63:b0:30:85:7a:96:a2:b9:af:40:47:04:
                    22:b9:59:15:72:41:01:6b:8d:99:fe:7d:24:73:71:
                    cd:03:2d:ce:ee:21:b6:96:f0:1a:75:af:b9:f8:e2:
                    ae:3b:82:4d:78:43:5a:88:51:cc:35:f6:e3:8e:5f:
                    a8:62:83:06:be:0c:45:22:94:2c:4a:98:7b:51:75:
                    be:36:09:2d:7d:de:7b:f7:90:51:32:48:dc:9c:9c:
                    f5:43:c4:a2:58:07:f9:fe:d1:03:00:ff:04:a6:37:
                    2b:ba:00:4e:df:2a:cb:52:9e:7b:34:47:d9:47:e6:
                    b3:e8:64:9b:7a:a0:a1:2b:eb:ac:18:95:ca:1d:af:
                    87:d2:33:b6:fd:89:66:62:09:ef:52:35:b9:b1:9e:
                    3d:c2:38:ef:fc:74:58:c4:49:27:b6:8e:f1:80:d8:
                    ba:dc:38:7f:0d:7e:04:df:5f:eb:94:8a:a2:14:c9:
                    cf:7d:75:b7:c0:69:5f:a1:16:2e:00:74:81:be:62:
                    71:2e:d7:5c:f9:fe:cb:73:ef:95:80:cd:a3:a8:bf:
                    d3:83:20:fc:a4:cc:ca:1f:85:f6:12:a4:c7:38:d0:
                    3a:1f:11:5a:4a:40:aa:a8:52:54:bb:0f:5f:22:c3:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:A2:97:B8:CF:F2:6E:AC:22:83:EF:FB:B1:62:A3:66:43:95:CE
            X509v3 Authority Key Identifier:
                keyid:36:63:6C:55:24:46:7B:BA:57:68:27:BC:A7:2D:66:3F:DD:92:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/3137302e3233392e302e302f32322d3234203d3e203532383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:9d:71:89:a5:5b:5d:74:71:dd:a9:e0:84:5e:9d:ec:65:
         7b:06:fb:bb:7a:47:69:5d:7b:76:af:c5:3c:e0:bb:70:76:c2:
         cc:cc:52:a6:5b:4a:b7:29:04:3e:b9:46:9a:64:23:de:e6:c7:
         be:2f:cf:7d:04:6b:35:e6:27:23:e1:2d:c9:72:67:bc:8b:43:
         ef:4c:6a:94:24:66:13:b1:99:0f:7c:ab:25:13:d2:41:c4:12:
         d4:93:a9:6f:3a:0c:78:f9:c9:96:01:1c:38:5e:c5:9b:5c:8d:
         a2:0a:85:df:14:cf:f3:e9:d1:bc:02:b2:55:5c:d1:18:7a:27:
         62:32:ad:b9:73:ff:29:d9:56:de:99:54:01:61:04:73:fb:19:
         13:b3:7f:7b:89:14:39:be:e1:2d:8d:16:e2:99:79:bf:03:bd:
         3c:30:80:79:71:4f:20:93:08:99:52:bd:44:37:61:cc:db:7c:
         f3:37:f8:f2:3a:25:ee:9d:cc:d3:f9:63:cf:58:58:2c:69:74:
         cf:de:6e:2c:84:f4:03:fc:fe:d3:f5:60:1a:bb:80:c3:86:07:
         c7:f7:1a:2f:0d:b7:a2:42:23:26:fe:af:c5:79:be:9f:c9:c6:
         8d:97:f9:82:bc:ae:af:ac:08:08:74:29:be:5c:f7:47:a5:00:
         b7:41:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 09:16:27 2024 by rpki-client on console-ams.rpki-client.org