Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          gAU3swAklwRgiBFoZ8du2zlEhA8+XiXmMAHPZxMtTts=
Subject key identifier:   A7:91:0E:FC:8B:43:71:94:FB:DD:9D:FC:75:79:88:B8:92:9E:14:3B
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       27AE107FD19D4EDF5F08EB8FDEDDF51E23496228
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:10 +0000
ROA not before:           Thu 21 Nov 2024 21:41:10 +0000
ROA not after:            Thu 20 Nov 2025 21:46:10 +0000
asID:                     266020
IP address blocks:        170.245.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ae:10:7f:d1:9d:4e:df:5f:08:eb:8f:de:dd:f5:1e:23:49:62:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:10 2024 GMT
            Not After : Nov 20 21:46:10 2025 GMT
        Subject: CN=A7910EFC8B437194FBDD9DFC757988B8929E143B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:92:7d:20:c7:ab:d2:d1:6f:af:db:b7:71:
                    47:7e:fe:f2:a1:07:63:df:13:89:ba:ed:18:40:b6:
                    ad:5a:78:a8:a6:85:c4:7c:fc:38:e8:a4:71:03:bd:
                    56:30:29:01:ca:d6:c7:29:b6:db:3a:14:4a:c6:ff:
                    c3:71:d4:5b:f2:82:0f:6a:d3:76:2d:f0:37:d3:0e:
                    3c:45:d9:f5:e6:57:6b:a3:9e:4b:68:2b:dc:d2:37:
                    a2:17:cb:82:95:37:30:49:0a:7f:c0:d0:52:2e:91:
                    2d:df:42:14:bd:1c:55:f1:6b:b0:85:ed:27:66:f1:
                    44:e1:7a:d0:a8:9c:31:09:b1:85:86:71:07:b3:71:
                    1a:d6:40:7a:7e:08:92:e0:52:2e:01:e8:e3:3f:50:
                    0e:7a:9f:7e:6c:b5:d2:d0:95:3f:34:e6:af:ed:95:
                    7d:aa:0a:8b:a3:5a:2f:44:bc:9f:ac:59:0b:3a:f9:
                    20:ad:e7:15:a9:f1:63:dc:72:01:81:42:16:63:ce:
                    b0:c5:3f:a2:12:b8:4d:35:a1:98:af:fa:b9:21:82:
                    e1:c8:8a:fa:1b:5c:9b:26:82:9f:ee:f2:a7:df:68:
                    79:14:8a:9c:6a:73:96:da:d4:ac:29:40:76:da:44:
                    34:46:95:51:65:e8:0e:eb:f7:98:27:93:be:a2:00:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:91:0E:FC:8B:43:71:94:FB:DD:9D:FC:75:79:88:B8:92:9E:14:3B
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:93:c7:48:84:3f:03:87:a5:07:7a:42:fd:84:a5:c1:91:
         c5:05:c4:a0:79:e8:17:d9:02:83:04:71:3f:fb:f4:91:11:ce:
         c9:3c:da:3f:d1:bc:2a:b4:2a:2c:84:1f:5e:7f:dd:81:2a:f7:
         aa:9f:13:0f:02:3c:19:c2:62:71:73:9f:cc:ce:ea:d4:ac:12:
         00:a7:df:9f:36:1d:b9:64:a0:af:f7:c9:6b:27:36:54:59:f9:
         37:ae:ce:4c:74:76:e5:48:f2:c1:36:89:86:01:06:d6:d4:72:
         cb:52:9a:06:e7:74:5e:0b:bb:c1:57:3c:db:7d:d6:5a:21:2f:
         3f:45:76:83:a7:88:03:4d:6a:0f:63:35:06:a5:6b:b6:cb:61:
         81:4c:bb:96:06:68:d6:03:f1:23:95:19:ff:c1:f2:d4:9b:17:
         18:59:69:36:61:14:08:9e:8c:a7:f9:a8:ee:87:3b:f9:df:57:
         85:7d:74:0e:f4:af:7c:bf:ff:06:35:c2:a6:9b:7c:20:b3:59:
         c8:23:87:60:c5:65:5a:3e:4a:40:b1:c6:99:8f:f8:12:d6:48:
         26:e4:5b:d7:8d:1e:dc:33:5e:dc:63:63:97:2a:f4:09:ba:19:
         87:3b:1b:7f:b0:8a:b8:b1:9d:34:5e:dd:91:8b:ae:11:b0:22:
         67:bc:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:11 2024 by rpki-client on console-fra.rpki-client.org