Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e312e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          czxjBwt1L2SWsDEn2auDbY/0/XfLnnPSnM1AQr5JTPQ=
Subject key identifier:   EA:03:19:21:52:86:02:10:A3:C3:E6:6F:EC:6D:74:99:4F:93:5F:7C
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       0BB2D0869D33E11E368A7CB8799B2A7A0FC0610B
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:39 +0000
ROA not before:           Tue 23 Apr 2024 19:08:39 +0000
ROA not after:            Tue 22 Apr 2025 19:13:39 +0000
asID:                     263627
IP address blocks:        170.80.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 01:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b2:d0:86:9d:33:e1:1e:36:8a:7c:b8:79:9b:2a:7a:0f:c0:61:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:39 2024 GMT
            Not After : Apr 22 19:13:39 2025 GMT
        Subject: CN=EA03192152860210A3C3E66FEC6D74994F935F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:6c:43:41:c7:14:b8:17:d4:cc:8f:a5:b1:
                    cf:a2:07:d3:6a:62:97:24:63:3e:cb:61:05:69:61:
                    99:71:5f:7d:70:ba:ee:d5:66:56:9a:94:5e:90:91:
                    93:63:0f:2d:d4:f4:88:1c:3f:a6:cf:7a:cd:b0:a0:
                    14:7f:4f:02:48:0d:59:4c:54:43:05:47:89:7f:fe:
                    5e:6b:c1:53:32:14:f6:1b:cd:4d:ce:ef:a2:6a:69:
                    6f:ac:0b:67:23:9f:75:0c:c0:ea:02:50:16:69:6d:
                    5b:cb:e9:b6:96:62:21:5f:e5:13:e9:1b:17:05:b0:
                    9c:16:57:57:30:fe:df:cf:f9:23:d7:5e:a1:6f:c4:
                    58:a0:86:39:d2:ca:76:7b:01:57:3c:a1:be:09:88:
                    d0:fd:79:76:78:ba:5f:28:d2:bf:96:24:88:bc:00:
                    17:a8:28:37:65:cd:79:4e:33:7a:98:3b:4e:ba:20:
                    8c:fe:1a:96:2c:33:0a:bb:03:82:db:75:b5:92:3f:
                    2f:e5:58:a9:25:c0:d4:d0:7a:86:28:7b:8f:e4:3b:
                    4c:2c:fd:2a:13:e8:48:aa:15:fb:9b:25:2e:f9:f4:
                    ca:b0:5e:fd:26:65:7f:74:d6:b2:63:c8:1a:4f:06:
                    b4:94:1f:6a:31:25:46:f6:33:91:36:3a:02:51:54:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:19:21:52:86:02:10:A3:C3:E6:6F:EC:6D:74:99:4F:93:5F:7C
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:fa:d0:ae:c6:52:43:2b:d1:a9:2a:e6:04:01:73:b4:95:
         3f:96:ff:e1:68:3e:b6:0d:fa:dd:ca:0d:e4:a6:b7:17:61:7e:
         17:f5:dc:c1:8c:43:56:0f:43:7f:1a:d2:2f:bc:60:f9:a3:7a:
         00:d2:14:29:91:49:67:d9:6a:95:3d:d1:bf:08:24:0c:a6:2a:
         02:99:fb:ce:7a:9b:13:0f:8d:cb:ac:51:7c:ae:bd:89:f3:f6:
         b4:1a:21:57:5f:7e:be:21:26:04:d0:a8:f7:6f:d1:be:34:43:
         b5:81:e6:a0:b2:d6:dd:d0:19:30:b3:91:31:f6:cc:ea:e0:c7:
         f9:1e:1d:ef:2e:3f:44:83:c4:3f:4c:0b:7e:c7:11:0d:24:0e:
         b1:06:d5:6f:d7:de:4a:d2:03:f7:b5:24:6a:7a:23:12:bb:0a:
         1e:22:de:63:78:cd:50:3a:0c:6e:64:1f:b4:6d:0b:0f:f9:9b:
         a0:af:3f:f3:f2:df:76:cf:9e:38:dc:c7:08:c0:60:2a:ba:cf:
         0c:47:43:d5:6f:6a:41:ae:df:64:c8:86:65:af:a6:af:36:d0:
         d4:de:da:63:98:85:2f:15:1a:24:50:6c:fa:e8:d8:df:70:68:
         ae:d3:06:c9:76:3d:71:c0:38:8a:2a:24:e3:58:c3:98:01:86:
         f4:31:52:23
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC7LQhp0z4R42iny4eZsqeg/AYQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNDA0MjMxOTA4MzlaFw0yNTA0MjIxOTEzMzlaMDMxMTAvBgNV
BAMTKEVBMDMxOTIxNTI4NjAyMTBBM0MzRTY2RkVDNkQ3NDk5NEY5MzVGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZmxDQccUuBfUzI+lsc+iB9Nq
YpckYz7LYQVpYZlxX31wuu7VZlaalF6QkZNjDy3U9IgcP6bPes2woBR/TwJIDVlM
VEMFR4l//l5rwVMyFPYbzU3O76JqaW+sC2cjn3UMwOoCUBZpbVvL6baWYiFf5RPp
GxcFsJwWV1cw/t/P+SPXXqFvxFighjnSynZ7AVc8ob4JiND9eXZ4ul8o0r+WJIi8
ABeoKDdlzXlOM3qYO066IIz+GpYsMwq7A4LbdbWSPy/lWKklwNTQeoYoe4/kO0ws
/SoT6EiqFfubJS759MqwXv0mZX901rJjyBpPBrSUH2oxJUb2M5E2OgJRVDZDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6gMZIVKGAhCjw+Zv7G10mU+TX3wwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzEzNzMwMmUzODMwMmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM2
MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKpQATANBgkqhkiG9w0BAQsFAAOCAQEALSb60K7GUkMr
0akq5gQBc7SVP5b/4Wg+tg363coN5Ka3F2F+F/XcwYxDVg9DfxrSL7xg+aN6ANIU
KZFJZ9lqlT3RvwgkDKYqApn7znqbEw+Ny6xRfK69ifP2tBohV19+viEmBNCo92/R
vjRDtYHmoLLW3dAZMLORMfbM6uDH+R4d7y4/RIPEP0wLfscRDSQOsQbVb9feStID
97UkanojErsKHiLeY3jNUDoMbmQftG0LD/mboK8/8/Lfds+eONzHCMBgKrrPDEdD
1W9qQa7fZMiGZa+mrzbQ1N7aY5iFLxUaJFBs+ujY33BortMGyXY9ccA4iiok41jD
mAGG9DFSIw==
-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:22 2024 by rpki-client on console-ams.rpki-client.org