Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa (raw, json)
Hash identifier:          EUji/GneUnjyFaAgZTwNl6o61YH8Aj23/rl9t7Cc554=
Subject key identifier:   05:ED:E5:6A:21:35:BE:5C:B3:C7:51:D3:02:DC:4C:CC:F3:F7:70:8D
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       48A0EF07987B33D5E54E6F83FAE08757B04D1F18
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:05 +0000
ROA not before:           Thu 21 Nov 2024 21:41:05 +0000
ROA not after:            Thu 20 Nov 2025 21:46:05 +0000
asID:                     266020
IP address blocks:        170.245.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a0:ef:07:98:7b:33:d5:e5:4e:6f:83:fa:e0:87:57:b0:4d:1f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:05 2024 GMT
            Not After : Nov 20 21:46:05 2025 GMT
        Subject: CN=05EDE56A2135BE5CB3C751D302DC4CCCF3F7708D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:92:56:14:1e:e5:8d:34:2e:19:01:1a:b8:
                    48:49:57:80:05:a6:e5:03:df:6e:ba:ba:a8:81:8f:
                    ae:b7:bc:1f:83:9f:c4:70:35:17:03:02:d7:7f:bd:
                    9a:d0:9b:5a:36:b2:97:17:4a:ca:ef:18:19:0a:64:
                    4e:bc:7c:ac:bf:1d:57:32:be:56:d1:03:61:f3:e0:
                    5a:52:af:fb:04:41:06:25:33:f3:e0:70:78:bd:a3:
                    0a:49:5e:2a:77:38:4e:af:4d:ab:20:11:64:b6:25:
                    10:0d:7a:37:f5:9d:41:9c:0f:fc:2a:60:44:8a:9c:
                    fc:4d:09:e1:c1:79:85:19:d5:26:e7:bc:8f:84:48:
                    7e:70:8e:60:b6:04:08:c3:ab:c8:40:68:5a:9e:04:
                    25:b7:f5:ba:13:54:45:89:10:86:70:45:14:f3:f6:
                    dd:28:0f:2f:d3:45:c0:3d:67:2a:32:56:6b:be:15:
                    6e:06:31:47:27:f6:4b:12:43:f7:3c:f0:4a:f3:57:
                    78:a3:5e:76:5d:68:3c:38:75:ed:72:ac:10:68:61:
                    73:ea:23:fc:b0:0b:29:7d:d3:bb:c3:c8:fa:bd:8c:
                    1c:f6:af:33:61:2c:da:83:1d:31:83:ab:02:9b:58:
                    00:ff:83:cd:4e:e8:fc:b4:78:b7:75:65:18:83:07:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:E5:6A:21:35:BE:5C:B3:C7:51:D3:02:DC:4C:CC:F3:F7:70:8D
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:ff:af:31:23:02:78:f9:ef:5f:b2:13:94:d0:9c:b4:ea:
         f9:db:2c:8e:45:2e:6b:72:50:a9:71:09:25:f8:67:fb:22:76:
         c2:e4:95:6e:c2:f1:a9:c5:8c:95:41:f3:f9:cd:a0:82:44:a0:
         45:13:f2:49:30:04:e8:aa:58:37:42:78:c2:4e:5b:4d:14:ea:
         07:22:03:69:e1:c8:8d:2d:0e:d9:3a:09:b6:04:40:85:92:59:
         d6:4f:6f:5a:58:d0:18:a7:4d:be:4e:72:d3:ed:47:4a:d3:4e:
         47:01:c2:99:7b:7e:ae:a0:f1:a2:a9:24:94:5d:c2:a9:d9:2f:
         51:ec:c6:54:32:d2:0b:5c:29:86:9d:3f:4e:e6:24:11:47:32:
         80:81:20:92:e5:49:0f:b3:14:10:12:ac:dc:fd:33:f6:4a:38:
         71:94:9b:8b:c5:aa:6e:bf:ea:14:1d:48:49:a2:10:f7:17:55:
         d7:e3:ab:89:86:c9:13:4c:60:c1:d0:09:d0:3d:fc:5b:df:03:
         4f:71:88:ec:4d:9b:a2:75:b0:59:ac:19:2b:f7:fc:49:08:75:
         8d:08:24:97:99:64:a4:64:9d:dd:db:77:a7:09:1b:e9:0c:5f:
         26:fc:98:b3:12:70:be:9e:16:6e:d7:cb:f7:c2:7f:b4:be:fe:
         66:6a:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:05 2024 by rpki-client on console-ams.rpki-client.org