Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa (raw, json)
Hash identifier:          jkoEPVj5CwO+UHZUwS1R8VzH1Md5GDd+v74YV5Y+1eE=
Subject key identifier:   92:16:E1:3E:48:37:EC:76:3C:C1:77:D8:43:EE:31:70:10:97:13:05
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       2B43D866BE9A0009D8B702488B6B7A08129B3A85
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
Signing time:             Wed 08 Jan 2025 02:08:07 +0000
ROA not before:           Wed 08 Jan 2025 02:03:07 +0000
ROA not after:            Wed 07 Jan 2026 02:08:07 +0000
asID:                     266020
IP address blocks:        170.245.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:43:d8:66:be:9a:00:09:d8:b7:02:48:8b:6b:7a:08:12:9b:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Jan  8 02:03:07 2025 GMT
            Not After : Jan  7 02:08:07 2026 GMT
        Subject: CN=9216E13E4837EC763CC177D843EE317010971305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:00:0f:bc:d7:30:e5:1f:06:b7:29:a8:51:
                    31:08:25:37:7e:a3:a6:9f:39:85:19:77:8f:1e:43:
                    0d:77:8b:5e:18:1b:72:7c:ed:b8:ef:3e:66:b1:3b:
                    d3:73:3e:d9:9b:01:1b:f6:89:1c:93:6a:cf:6a:06:
                    c6:73:3b:c3:e0:01:45:97:a1:a9:51:77:99:b1:3b:
                    da:bf:03:f7:18:b6:e3:df:2d:9a:70:ea:51:2a:c6:
                    60:af:24:e5:c4:61:33:36:8a:98:ec:4b:9f:54:26:
                    91:e4:ba:33:cc:91:5c:9d:c2:8d:d9:87:43:5d:60:
                    43:10:05:ca:66:8f:df:14:b7:c9:d8:e0:ed:10:c5:
                    3d:5e:ee:11:3d:fe:d6:e1:9f:71:f2:15:52:ef:39:
                    34:d2:09:63:9b:9c:bb:88:59:dd:82:b4:f2:94:d5:
                    74:2e:f3:b7:43:24:41:a9:80:8d:ff:43:68:5d:ec:
                    02:b0:ac:09:ae:d3:07:2f:b1:46:a8:9e:a9:af:5f:
                    8c:c6:89:7b:0c:34:a4:d7:12:ff:4a:4a:a4:c2:65:
                    76:f6:7c:26:50:c3:ea:b5:92:97:3b:51:11:16:e2:
                    2d:6e:5a:40:3f:7c:2e:83:62:71:0e:f0:33:5b:f5:
                    c3:1b:79:de:cc:26:9a:1f:27:7c:80:84:fb:00:73:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:E1:3E:48:37:EC:76:3C:C1:77:D8:43:EE:31:70:10:97:13:05
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:71:d5:a0:10:9d:49:26:b4:f3:d4:4a:f6:1c:97:df:1d:
         78:f3:fc:a4:79:e7:e5:2c:cf:6c:56:01:e2:13:2e:1d:d0:b2:
         18:e1:92:74:7a:8e:5e:65:7c:d1:78:95:b7:e4:da:87:10:e1:
         af:ab:0c:00:48:30:c8:a6:88:7b:7a:8c:1b:2c:f2:f6:99:1a:
         4d:8a:0a:1c:f5:6f:14:48:5e:9f:f2:ad:e4:44:9f:66:27:47:
         73:4b:3c:58:88:17:0e:43:7a:c0:58:43:42:fe:41:03:78:2f:
         97:c4:39:e0:3e:58:4e:67:a8:d0:b0:8d:ba:42:80:ea:a7:f9:
         6c:3a:e2:98:07:c7:88:77:3f:bf:21:6a:0d:97:97:01:39:ce:
         9d:ae:78:b1:88:b7:ab:0c:27:a0:2e:4b:a9:4b:fd:92:e3:d8:
         28:65:4f:8a:5e:b7:5b:ab:f5:b5:03:91:01:ce:82:f0:dc:86:
         d2:aa:e9:43:12:13:48:44:e7:64:c8:9f:b5:43:89:9d:1a:ea:
         df:5d:b9:2a:15:37:d8:38:e1:2a:4e:7c:07:65:92:28:fb:a5:
         98:40:bc:73:f2:70:d9:9c:6c:bf:d6:77:4a:de:5e:04:20:df:
         1f:02:90:ba:1d:c8:54:3a:10:00:69:13:dd:c9:79:69:41:d1:
         d9:79:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:50:27 2025 by rpki-client