Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa (raw, json)
Hash identifier:          3vJBHi+tyGdF+uMpX7tmeHbPzzXNn99wPJF24FkVcqs=
Subject key identifier:   18:89:33:8D:7B:6D:6E:4A:6C:1C:BA:CB:B7:94:01:FA:B0:AD:B5:74
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       7B0113FC78BCE20940D6F9010D661886BFFE262F
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:18 +0000
ROA not before:           Mon 27 May 2024 21:46:18 +0000
ROA not after:            Mon 26 May 2025 21:51:18 +0000
asID:                     265010
IP address blocks:        170.84.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:01:13:fc:78:bc:e2:09:40:d6:f9:01:0d:66:18:86:bf:fe:26:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:18 2024 GMT
            Not After : May 26 21:51:18 2025 GMT
        Subject: CN=1889338D7B6D6E4A6C1CBACBB79401FAB0ADB574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:d4:8d:d9:50:af:c5:65:42:79:1c:c2:f2:
                    ff:18:c5:ab:b7:67:27:42:c3:c5:cc:28:06:a6:b5:
                    fd:37:15:49:15:03:8e:cc:eb:a9:d7:d4:da:f7:03:
                    70:8a:e9:db:95:8b:f7:06:ff:56:ee:cd:36:ca:75:
                    07:8c:72:0e:b2:7a:90:57:ec:88:ab:53:e1:38:f8:
                    22:02:7a:ce:ff:4e:a8:1e:8b:a8:83:8e:b4:e6:07:
                    42:b9:30:36:53:8d:a2:4a:68:74:14:db:5f:bf:6d:
                    48:03:12:ba:98:2b:bc:5a:6e:81:69:dc:06:80:34:
                    66:b2:1a:0e:1d:a8:91:2d:60:e4:16:92:9c:d0:16:
                    5b:46:2b:e4:84:e9:1a:14:9a:c3:a4:93:85:a6:ce:
                    10:30:79:c6:02:d0:bd:84:02:95:e9:d6:9f:5c:c5:
                    90:ac:54:fd:d3:b2:5b:01:c4:c4:60:16:4b:02:6a:
                    cb:c9:cd:42:9d:7c:93:8c:d1:03:49:f6:9b:fb:a6:
                    db:ee:88:a3:a4:5c:be:83:7d:ad:15:a5:4c:30:e5:
                    fc:6a:92:03:b6:10:0d:ef:86:1f:5e:59:4f:3e:0c:
                    d3:9c:84:b1:b6:49:93:cf:0b:d1:10:43:85:f4:44:
                    77:74:97:d0:d7:a5:b9:ce:a8:3d:f4:fa:cc:6c:0b:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:89:33:8D:7B:6D:6E:4A:6C:1C:BA:CB:B7:94:01:FA:B0:AD:B5:74
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:2f:de:7f:19:57:c4:4b:38:ec:a8:a7:5b:4a:d6:6e:37:d6:
         bd:c7:1e:1e:5e:98:54:5c:b2:5a:41:94:9f:1f:4b:78:79:d0:
         0f:91:70:61:15:a0:dd:8f:b1:62:f1:09:4d:72:11:eb:ee:5c:
         88:3f:c7:5c:3f:a5:ad:d3:67:43:6c:3c:3a:4b:50:85:4b:84:
         48:15:3b:6c:31:94:03:20:bf:30:a3:4b:de:f4:e7:ae:da:44:
         3b:1e:63:9c:23:aa:f0:9f:54:5e:92:ec:51:40:17:51:ee:90:
         b6:ea:a2:2f:ef:4b:02:13:7f:78:4d:00:ac:91:6b:f9:c4:a0:
         23:0d:d2:35:44:d5:9f:3c:32:9b:89:9a:f5:f1:07:f8:7c:9c:
         4c:0f:44:85:ff:2b:21:70:e3:78:96:e1:50:44:3d:79:28:e7:
         31:0e:68:70:a8:4c:ba:b5:e1:60:26:97:3a:b0:ae:03:a4:6b:
         a4:47:ad:c2:d6:13:e8:9b:3c:50:7d:f8:3d:1b:b9:b2:fb:26:
         c9:46:c0:61:d8:1d:6d:60:32:97:53:bb:fa:d1:5d:c0:33:aa:
         ac:02:22:9c:6a:e7:b5:0c:d0:9a:ea:d5:a5:48:9d:0d:8e:b4:
         f6:ba:47:39:2f:8d:ef:c7:dd:a8:ba:0c:13:c3:66:b1:7a:5b:
         65:53:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org