Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138352e302f32342d3332203d3e20323634383830.roa
File:                     3137302e3234362e3138352e302f32342d3332203d3e20323634383830.roa (raw, json)
Hash identifier:          vKQzC8kdawTEvlIYmIAk6cywKRtUWWgPJ78l4OSGd/A=
Subject key identifier:   EC:84:3F:AE:F9:C2:CD:77:22:02:5C:96:94:B8:B4:D9:FA:0C:26:65
Certificate issuer:       /CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
Certificate serial:       46F142F4C37A4951DC44B85DFD00DE0598EF7636
Authority key identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138352e302f32342d3332203d3e20323634383830.roa
Signing time:             Thu 25 Jul 2024 19:37:06 +0000
ROA not before:           Thu 25 Jul 2024 19:32:06 +0000
ROA not after:            Thu 24 Jul 2025 19:37:06 +0000
asID:                     264880
IP address blocks:        170.246.185.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl
                          rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f1:42:f4:c3:7a:49:51:dc:44:b8:5d:fd:00:de:05:98:ef:76:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
        Validity
            Not Before: Jul 25 19:32:06 2024 GMT
            Not After : Jul 24 19:37:06 2025 GMT
        Subject: CN=EC843FAEF9C2CD7722025C9694B8B4D9FA0C2665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:a5:7b:85:bc:89:df:2f:98:88:6b:17:9a:
                    a0:da:a5:63:68:bd:1b:ec:0c:e9:e6:f9:b7:00:5d:
                    4b:50:4d:08:97:25:0c:b5:1a:74:a9:bb:8c:95:cf:
                    3b:86:57:5c:2a:80:c3:dc:8c:0d:d8:60:dd:91:db:
                    2e:f9:13:42:aa:fc:84:bd:3a:2d:dc:53:49:51:c1:
                    86:c9:12:c3:34:b5:28:8a:1c:3a:ac:2f:2d:d7:2f:
                    aa:1b:3b:95:e9:2e:44:66:ed:57:ae:38:ca:a4:bf:
                    52:11:63:fd:c4:fa:47:0b:38:3d:45:5e:f2:3a:fa:
                    0e:65:e7:f5:e4:63:b1:12:87:c9:55:fa:04:8a:b4:
                    44:86:54:1d:a3:dd:f3:e2:f1:f7:b8:f7:4a:80:68:
                    a0:82:28:9e:4b:89:7c:a8:bf:29:5d:be:da:44:5d:
                    7b:ee:f7:80:88:71:80:d5:3a:fc:21:4a:92:e7:99:
                    de:4e:e1:a4:b7:62:3f:da:6e:ca:71:ea:55:c7:c5:
                    81:fa:85:ac:5a:98:37:a5:47:98:6f:47:13:00:4c:
                    a1:2a:f9:14:53:64:01:6a:9b:5f:ee:c0:1b:69:85:
                    f2:0d:9e:95:fc:29:d4:10:70:e1:8e:d9:28:85:63:
                    8f:56:3c:30:33:c2:f5:b7:97:3e:6a:9a:9e:43:6a:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:3F:AE:F9:C2:CD:77:22:02:5C:96:94:B8:B4:D9:FA:0C:26:65
            X509v3 Authority Key Identifier:
                keyid:8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138352e302f32342d3332203d3e20323634383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:29:0e:9e:93:d5:74:88:be:76:2f:f4:9f:a8:af:83:d8:
         d2:12:c9:9f:f7:0a:e9:f1:bd:c5:d6:70:35:70:78:89:09:3f:
         cf:6b:0b:01:85:22:c2:e9:1c:21:1a:13:a8:fb:da:a8:5a:1c:
         61:ba:4f:ce:55:12:15:85:95:ca:12:32:66:75:3c:dc:46:79:
         ff:de:ea:30:c5:1b:60:9a:91:b8:8d:47:4c:ff:c3:8c:49:62:
         93:e4:4d:9f:fc:e3:f5:29:04:73:e1:b4:57:90:29:0a:6a:cc:
         a9:28:9c:44:c7:02:c7:cf:9a:6e:ca:fa:89:3a:66:b1:ba:09:
         eb:85:f6:83:2a:7b:e8:ed:f9:e4:10:7d:91:10:ea:5d:5e:59:
         5b:68:03:82:6a:6f:99:a0:b1:78:b6:b6:32:fc:9f:a2:1d:8d:
         cb:91:71:3d:7a:05:80:e6:a3:6b:f9:6e:a9:92:8c:c3:be:a3:
         32:8d:38:93:31:ba:63:0b:07:07:1e:d2:fa:5e:dc:48:c5:a0:
         24:a1:10:89:6b:45:70:6b:84:47:9e:c6:4c:a5:30:41:1f:a0:
         66:78:05:00:ae:c7:dd:df:38:3c:5c:74:4d:ed:0c:f4:4b:2f:
         5f:b4:25:6d:90:6c:95:16:2d:a4:be:16:da:69:a5:bc:be:6c:
         32:36:1e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org