Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa
File:                     3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa (raw, json)
Hash identifier:          fdfzLPEeWVlNfYGCe0TgP7cK/Jy/inpMxiKv51d8RfI=
Subject key identifier:   8F:90:66:57:15:FE:26:6D:00:52:D1:BF:7F:2C:EA:8F:24:C1:CD:9B
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       2C36026AFD08B165F1276A572E570A6D47D6C658
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa
Signing time:             Wed 08 Jan 2025 02:08:17 +0000
ROA not before:           Wed 08 Jan 2025 02:03:17 +0000
ROA not after:            Wed 07 Jan 2026 02:08:17 +0000
asID:                     266020
IP address blocks:        170.245.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:02:6a:fd:08:b1:65:f1:27:6a:57:2e:57:0a:6d:47:d6:c6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Jan  8 02:03:17 2025 GMT
            Not After : Jan  7 02:08:17 2026 GMT
        Subject: CN=8F90665715FE266D0052D1BF7F2CEA8F24C1CD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:54:47:7f:c5:cd:9d:76:50:98:4a:89:75:
                    4a:b8:90:db:42:6e:96:7e:ba:b7:a8:10:48:3d:42:
                    63:7d:c4:91:72:24:2c:a9:bd:05:69:68:8f:a6:41:
                    a6:0f:02:12:6d:18:99:d9:66:25:80:e1:d2:1b:a8:
                    3c:65:09:da:22:49:10:40:9e:13:bb:2f:8c:a5:74:
                    f7:9b:95:a3:13:e1:33:7b:ca:57:64:10:08:20:7d:
                    4a:1e:e5:ef:32:51:59:ef:03:ea:3f:f3:a9:b1:ea:
                    e6:9f:4d:b4:ae:86:49:08:bb:2a:80:32:bf:a1:e8:
                    9b:8b:5c:39:4f:7b:3b:4e:a1:b0:8e:6f:c8:39:cb:
                    ef:a7:1e:10:4d:a4:16:6c:ec:5d:88:13:cc:2e:17:
                    8b:e3:3e:c4:77:97:02:38:2a:3f:31:92:22:6d:56:
                    e2:45:e4:00:5c:aa:2b:dc:17:99:f0:d3:80:b3:c8:
                    32:46:64:16:56:3e:7f:f8:33:52:cf:64:fe:db:59:
                    9c:21:8d:44:f8:27:4b:ee:74:5c:1e:f4:8d:3f:16:
                    33:9b:08:ef:59:df:96:4d:87:ef:fd:6a:97:8f:34:
                    30:67:ba:f9:7c:ac:32:8a:1e:2c:a3:5e:d0:48:62:
                    58:d6:df:93:aa:1e:58:93:0a:d2:4b:81:45:93:46:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:66:57:15:FE:26:6D:00:52:D1:BF:7F:2C:EA:8F:24:C1:CD:9B
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:43:6d:c2:9a:7c:bb:7e:17:87:2d:15:57:ed:29:9a:b9:a4:
         b3:69:96:bf:19:83:7d:42:51:ac:37:2f:7e:20:88:00:7b:e6:
         1f:9c:37:3d:ad:2a:ca:38:98:b1:0f:5b:5b:76:ee:a2:3c:2c:
         9e:37:c9:1e:56:89:26:e3:3e:01:81:f5:74:32:00:19:71:33:
         8f:f6:27:1a:7a:a9:70:f0:57:2b:5c:2b:86:e0:f9:c9:8f:e0:
         49:9d:32:e7:6c:4d:32:94:69:a0:7f:01:53:87:4b:d4:39:b2:
         a7:d6:db:ab:1c:1b:f6:2a:65:de:7d:c6:a8:d0:9e:30:75:49:
         19:a5:1d:99:dd:99:c8:77:28:8a:c8:7f:dd:8a:19:9a:d1:f8:
         10:ab:3d:f8:3b:c6:73:a2:9c:f0:62:1e:e8:af:80:b9:6d:a2:
         b0:8c:ad:ec:bf:6b:ec:75:75:87:1d:70:5d:b3:fc:f4:16:bf:
         1b:b0:15:e8:2a:cc:df:a9:5f:0a:1b:7c:26:20:1a:85:5a:fb:
         5c:1f:a8:8b:11:61:d9:4a:54:9c:0d:01:61:e0:50:8e:73:92:
         50:fa:af:c0:5b:d5:f3:bc:e9:fe:a6:b6:0c:0d:cb:a8:40:50:
         bb:f8:f1:50:7e:ce:6b:84:3d:34:0e:fc:c7:2e:ba:0e:c1:2d:
         cc:5c:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:47 2025 by rpki-client