Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32322d3332203d3e203631353834.roa
File:                     3137302e3235342e3136382e302f32322d3332203d3e203631353834.roa (raw, json)
Hash identifier:          hzrTTbCGKubfq5/gUwy170ZRh2/Vfza6eEzkkHWaIOE=
Subject key identifier:   68:7C:D2:21:19:05:07:72:2A:0E:04:E8:55:BB:FB:E7:F9:BE:EA:BA
Certificate issuer:       /CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
Certificate serial:       24CD63E090437CBAB86720FC845B4D7BB2D3E4FE
Authority key identifier: BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32322d3332203d3e203631353834.roa
Signing time:             Fri 01 Nov 2024 13:20:07 +0000
ROA not before:           Fri 01 Nov 2024 13:15:07 +0000
ROA not after:            Fri 31 Oct 2025 13:20:07 +0000
asID:                     61584
IP address blocks:        170.254.168.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl
                          rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cd:63:e0:90:43:7c:ba:b8:67:20:fc:84:5b:4d:7b:b2:d3:e4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
        Validity
            Not Before: Nov  1 13:15:07 2024 GMT
            Not After : Oct 31 13:20:07 2025 GMT
        Subject: CN=687CD221190507722A0E04E855BBFBE7F9BEEABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:68:06:8f:0c:06:12:ee:00:2b:1d:a5:80:
                    c7:fa:56:10:05:fa:08:75:39:b1:1d:1d:f0:bb:2a:
                    ec:9e:e3:cb:c0:7d:2f:e2:c4:94:a8:e7:f2:45:11:
                    1d:79:14:4b:75:21:17:aa:51:22:d1:9c:49:75:fd:
                    09:f6:cc:78:25:ab:c4:f1:76:eb:91:fe:9c:b7:48:
                    00:f1:25:a0:ea:79:d0:f8:6f:80:d4:7b:98:67:cf:
                    19:ab:4b:b5:d9:70:0f:8d:65:17:2e:6d:fd:64:ca:
                    40:12:9d:68:51:ef:8f:e7:f5:b9:cd:11:8c:9f:83:
                    8d:b6:74:d2:4b:fb:b0:b6:8b:1d:db:9a:7d:6d:15:
                    66:18:b6:6e:43:2a:23:b4:d6:1a:f6:d3:29:af:55:
                    41:a7:a6:88:17:f0:b4:70:31:20:bb:09:0a:40:69:
                    4a:bd:13:a3:1d:4c:f9:89:da:52:03:bb:98:df:87:
                    af:93:b7:c5:d1:21:0b:7d:b4:59:b9:73:77:2d:b2:
                    ab:3c:46:e5:0b:d0:6f:b3:b5:89:19:9a:f4:12:1b:
                    cd:8e:b5:01:67:30:ee:91:f4:fd:6c:d7:f2:e9:5c:
                    bd:6c:a7:c0:47:2e:17:50:88:7d:e5:6e:33:c6:50:
                    cd:a3:4f:98:74:fe:87:81:bb:eb:93:f9:0e:1b:e3:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7C:D2:21:19:05:07:72:2A:0E:04:E8:55:BB:FB:E7:F9:BE:EA:BA
            X509v3 Authority Key Identifier:
                keyid:BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32322d3332203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:0e:ab:73:23:9d:d3:eb:fb:2b:5a:e5:c3:97:a3:a6:84:
         b4:3e:39:60:17:df:7d:79:a2:bf:73:bb:e8:be:7c:9e:8b:eb:
         d0:fb:dd:d7:a2:ce:cf:76:e7:33:f4:30:ee:b4:dc:f6:dc:3e:
         f4:38:35:bf:93:6b:b7:9c:28:b6:6e:bc:ca:7c:fd:d2:ba:4f:
         a2:08:f2:b5:ee:dd:45:28:f8:3c:01:57:3f:1b:1d:e3:5f:c8:
         7d:19:c7:dc:16:1a:f9:b4:fc:f4:53:b5:f7:be:87:c8:af:92:
         37:2d:e8:2d:01:f1:04:69:b5:e8:b7:2a:37:b9:f8:7f:c8:a0:
         dd:89:71:0a:70:f4:9e:b8:b7:a2:3b:bf:91:49:d7:a4:10:95:
         b0:1e:7f:f6:a7:b7:77:dc:92:71:2c:fc:74:d7:da:e5:63:7f:
         d0:5e:c0:7e:43:96:2d:e4:9f:0d:81:16:bb:57:cb:c1:39:0c:
         2b:36:bb:bc:09:a6:84:44:20:8b:67:c7:bc:4f:51:4f:8b:b1:
         3f:55:da:11:1c:55:f0:dc:8f:b0:19:8e:93:01:00:6d:d7:56:
         30:0e:dd:2e:78:be:da:3e:ae:7f:c3:99:fa:02:a4:ad:a0:06:
         c2:f0:d8:0d:e5:8f:55:72:f9:a4:37:e7:63:4a:15:75:80:e1:
         eb:04:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:42 2024 by rpki-client on console-ams.rpki-client.org