Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/3137302e38302e38302e302f32322d3332203d3e20323636343130.roa
File:                     3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (raw, json)
Hash identifier:          coNkrQnzuhBUhs1pFZs2aqYIc+FRFTNpxaNh7RB2oJw=
Subject key identifier:   5C:5F:56:70:A9:18:D6:5A:87:E9:2A:BA:F2:A5:74:02:B4:C5:FB:0F
Certificate issuer:       /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial:       01BC744702F7EEC413DAC3ABC917263000778761
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/3137302e38302e38302e302f32322d3332203d3e20323636343130.roa
Signing time:             Thu 04 Apr 2024 00:41:43 +0000
ROA not before:           Thu 04 Apr 2024 00:36:43 +0000
ROA not after:            Thu 03 Apr 2025 00:41:43 +0000
asID:                     266410
IP address blocks:        170.80.80.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
                          rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:74:47:02:f7:ee:c4:13:da:c3:ab:c9:17:26:30:00:77:87:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
        Validity
            Not Before: Apr  4 00:36:43 2024 GMT
            Not After : Apr  3 00:41:43 2025 GMT
        Subject: CN=5C5F5670A918D65A87E92ABAF2A57402B4C5FB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:c9:14:e7:04:30:92:1e:6c:50:bc:4d:b2:
                    24:81:bd:53:83:2c:b5:4c:b1:90:1a:67:02:9c:55:
                    17:5e:16:84:5c:33:70:21:6b:d8:ee:3e:99:78:b7:
                    ab:d3:dd:cb:89:fc:d4:2d:99:b3:53:02:fe:75:46:
                    72:fd:5d:ca:de:61:32:50:5d:cb:5b:78:07:da:64:
                    c6:a0:1b:54:b3:f4:66:82:25:2f:b1:7e:18:52:84:
                    3b:b1:59:fc:a6:00:66:6e:c1:46:49:ca:e8:53:ac:
                    2b:48:26:90:50:1d:de:f4:4b:f8:95:b5:d4:86:c9:
                    dc:92:47:e4:02:b8:02:77:4e:94:99:7f:a9:7d:db:
                    d6:3a:af:00:3a:14:8c:03:de:e3:cf:5f:16:32:de:
                    21:23:2c:2b:60:4a:f7:78:6f:fa:8a:eb:0d:29:bd:
                    10:23:57:d5:6d:96:4f:e3:c9:94:31:6c:75:66:bb:
                    74:71:42:4f:ee:82:0e:55:33:4a:70:32:84:1c:01:
                    1b:09:0e:b8:7b:59:3c:81:f4:b1:0f:b0:e1:c4:47:
                    89:13:d2:6a:91:e1:b5:99:b5:ec:f7:d5:10:23:c5:
                    b6:f8:92:81:45:bd:9f:34:03:5f:7c:c4:3e:04:80:
                    e2:8c:e0:50:90:86:4a:4e:92:7e:29:4e:2d:ed:a9:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5F:56:70:A9:18:D6:5A:87:E9:2A:BA:F2:A5:74:02:B4:C5:FB:0F
            X509v3 Authority Key Identifier:
                keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/3137302e38302e38302e302f32322d3332203d3e20323636343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:ce:cb:d5:4f:cd:e4:89:a3:fd:1f:25:da:37:ee:b7:f0:
         25:15:8a:5b:c2:ba:2a:a9:2c:5a:de:77:81:38:74:eb:13:36:
         14:62:d8:a8:82:30:a5:ca:e0:7c:3f:7a:a5:64:c7:34:99:0e:
         da:b7:b6:5a:d4:e8:78:b3:f9:21:a1:ff:3e:91:b2:1e:0a:8a:
         6e:a3:0b:0b:39:99:d4:35:52:44:82:5b:18:d4:62:26:a3:b4:
         c1:ca:af:c0:02:f8:f4:dd:22:de:3b:ef:19:be:7e:de:44:53:
         50:1b:ed:14:e8:13:e7:19:2f:1f:4d:f5:ec:c2:bc:e0:54:32:
         64:ac:fc:a0:1e:4e:de:20:a9:80:7a:38:be:74:4c:de:d5:31:
         2b:60:45:52:e3:0d:f4:d1:a6:7d:d5:dc:01:1b:da:9a:8e:ca:
         88:ca:2c:38:6d:07:3d:b2:85:57:18:03:3a:94:c8:ad:81:19:
         b7:9a:f2:72:b0:83:4a:91:1c:26:e8:e0:18:66:f8:5d:e8:8d:
         4e:2d:87:74:74:b1:73:b5:af:01:7a:17:a5:58:93:64:4d:87:
         3a:69:b8:14:1f:82:1a:4e:f3:9b:32:46:fe:27:80:84:49:b7:
         dd:82:f3:17:75:06:56:e5:75:b9:d5:ba:e4:33:83:fc:47:b8:
         86:0b:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:18 2024 by rpki-client on console-ams.rpki-client.org