Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          aW0j8yod9w0l57+JH8I6AGNpgXGCGhPXkjNhg+lRNWg=
Subject key identifier:   06:2E:B9:43:74:AF:79:8E:9D:A1:16:67:72:CA:2B:6D:48:D7:F4:46
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       120B02E6A9C46BF8468D62E1405621CCA44F90DA
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:12 +0000
ROA not before:           Thu 21 Nov 2024 21:41:12 +0000
ROA not after:            Thu 20 Nov 2025 21:46:12 +0000
asID:                     266020
IP address blocks:        170.245.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:02:e6:a9:c4:6b:f8:46:8d:62:e1:40:56:21:cc:a4:4f:90:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:12 2024 GMT
            Not After : Nov 20 21:46:12 2025 GMT
        Subject: CN=062EB94374AF798E9DA1166772CA2B6D48D7F446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2e:02:71:dc:f9:2c:fd:0d:c0:8f:36:b3:4d:
                    dd:c8:68:4e:ab:17:99:c5:6a:fd:9c:c3:c8:a1:c3:
                    24:84:26:6c:ed:a7:a5:43:da:86:b8:fc:c4:bc:83:
                    ce:81:e6:c9:85:e9:bf:44:4a:7d:0f:ae:c7:4d:d8:
                    2d:ca:b8:d2:9d:ba:8b:c0:35:0f:11:4a:84:a2:10:
                    36:35:2b:a3:86:99:2b:4e:26:19:d2:f2:f4:81:55:
                    50:7c:c7:d7:d8:2c:7f:9e:a0:74:b3:63:ca:5f:b9:
                    cc:79:67:01:20:97:a6:ec:d0:68:2d:35:1e:c1:b3:
                    ac:99:d7:c2:3b:1a:ab:41:5e:c8:5f:ec:d1:57:c1:
                    09:87:b4:9d:06:75:09:5f:01:de:88:31:1d:04:ec:
                    96:c1:62:b2:eb:bd:50:73:ae:21:b6:80:84:bf:fb:
                    d9:0a:21:7c:ae:2d:fe:04:0b:af:7f:dd:c8:d3:85:
                    dc:d3:05:45:c5:d6:27:d3:21:3a:60:82:20:47:c6:
                    2d:30:22:13:f3:47:ab:58:d5:1a:05:96:b1:e3:fb:
                    13:cc:a3:47:21:e5:a6:fe:28:34:c4:6d:7c:34:92:
                    da:8d:9f:90:bc:d1:ca:cf:7b:eb:92:c8:58:0a:92:
                    58:33:59:fe:2f:24:b2:af:bc:34:84:a3:6c:20:93:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:B9:43:74:AF:79:8E:9D:A1:16:67:72:CA:2B:6D:48:D7:F4:46
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:17:b5:de:27:f7:47:9e:ea:2c:a2:59:b3:8a:45:e6:cf:d6:
         52:d8:cb:61:79:2a:16:48:25:34:c1:70:8a:9a:c6:3f:81:da:
         f0:36:73:3a:9c:a0:d1:c6:15:24:45:77:17:53:0c:52:07:83:
         57:4c:25:b3:13:a4:97:b6:a8:d9:b6:b9:2e:77:97:79:d3:95:
         0a:f6:a7:db:6c:7f:69:36:6b:4c:27:3e:12:b3:93:ac:b0:e0:
         27:ec:26:50:0f:02:fc:4a:e8:ea:94:4e:6b:02:74:70:1b:6a:
         ba:cb:f7:be:0e:d4:c3:39:13:92:e1:9f:60:13:a0:c7:23:6c:
         5e:b4:a5:47:b0:60:6d:23:8a:b8:92:5c:1f:99:1d:ee:67:a0:
         8e:72:cd:09:08:4f:03:40:3a:8f:3f:63:48:a2:09:e4:65:87:
         2c:56:87:4b:d2:36:7f:5b:a9:95:25:ad:a9:14:5d:86:11:52:
         fd:58:e6:47:e3:66:a6:e2:be:e6:ba:45:5a:d5:39:eb:53:7a:
         79:01:b3:32:fd:47:1d:b7:8c:a0:1d:d9:5c:fa:d7:ef:5f:c2:
         d7:2b:25:b5:e6:63:16:5d:ef:1f:93:b1:64:00:77:9f:ae:fe:
         a4:94:2d:25:e7:f8:df:58:6e:50:dc:93:05:61:cd:d2:29:1d:
         fc:ca:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:11 2024 by rpki-client on console-fra.rpki-client.org