Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa (raw, json)
Hash identifier:          MHfM+U1yUiD+1Q4s6FQ9g1b8qPC19xQj06OAx9g18Lo=
Subject key identifier:   49:07:CE:99:98:A1:17:2A:99:A1:16:9E:8B:7C:FC:D6:45:48:1E:15
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       01CC67516DB3EED630D5D70CA44B6D585F0057AB
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:14 +0000
ROA not before:           Tue 29 Oct 2024 12:26:14 +0000
ROA not after:            Tue 28 Oct 2025 12:31:14 +0000
asID:                     265010
IP address blocks:        170.84.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cc:67:51:6d:b3:ee:d6:30:d5:d7:0c:a4:4b:6d:58:5f:00:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:14 2024 GMT
            Not After : Oct 28 12:31:14 2025 GMT
        Subject: CN=4907CE9998A1172A99A1169E8B7CFCD645481E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:52:25:3f:e1:99:46:57:2e:56:7d:ab:74:
                    31:ad:bd:08:c0:c0:30:98:a9:49:bc:40:a3:53:e7:
                    57:07:75:f3:fc:4f:d9:45:64:d3:56:e5:98:04:09:
                    94:fd:a9:1d:4a:34:06:82:36:ec:48:cd:c9:a8:54:
                    80:bd:dc:49:9f:dc:b4:4e:74:7d:81:63:c4:02:5e:
                    f4:f5:04:a4:36:c9:5f:60:c3:f6:ef:2b:ba:42:fe:
                    3d:10:4c:7a:a3:3e:69:cc:49:57:2b:93:ce:74:89:
                    fb:87:d3:b0:3a:94:0f:12:87:80:2b:70:2c:4b:72:
                    5b:a8:f4:10:ef:fd:f6:c9:d4:19:88:e7:33:a7:d6:
                    2f:18:53:bb:ff:5a:28:68:71:37:dd:a4:c8:bd:4d:
                    85:74:40:99:55:3b:da:a6:ff:0a:cc:23:a0:c4:9b:
                    d7:22:3e:64:74:8c:da:2e:77:28:6a:bf:5f:77:b4:
                    8e:0d:0b:40:30:5f:0e:d2:c3:3b:74:9b:0d:95:a4:
                    99:5a:7e:2e:c6:3d:da:0b:36:e0:de:13:3d:b1:46:
                    c4:2b:1f:ba:72:84:78:15:23:26:2f:44:e7:4e:cf:
                    39:c7:54:d6:30:69:20:46:dc:e5:0a:70:d7:61:01:
                    55:98:aa:77:ed:26:65:62:a5:d3:29:5c:f8:6b:c4:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:07:CE:99:98:A1:17:2A:99:A1:16:9E:8B:7C:FC:D6:45:48:1E:15
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:58:21:8d:99:8c:75:de:35:5b:db:55:40:e0:93:bb:6c:
         65:4e:ed:e7:52:d8:b4:ee:d5:34:3d:6a:e8:c0:86:55:99:c7:
         2d:87:6a:dd:c3:1c:df:c8:4d:cc:ea:a3:f3:be:99:e7:02:18:
         00:b2:6b:b4:c9:7f:15:e0:dc:fc:68:cd:be:f2:c6:d1:fe:55:
         a5:48:57:c3:6c:d8:f3:20:33:0d:96:63:b7:af:00:82:c7:6f:
         68:e7:b2:8d:e5:98:ba:43:cc:e5:03:3b:f8:8b:d4:cc:d4:ec:
         1f:37:51:65:f3:51:0c:05:f7:65:bf:8e:80:82:0f:19:7c:55:
         66:ad:26:0b:27:57:d5:76:f1:a3:ed:ae:3d:10:3d:e0:22:66:
         54:8b:6d:65:0e:86:64:1b:15:cc:74:69:61:b7:ce:81:09:c6:
         8d:43:00:43:d2:eb:bd:03:0c:4c:40:b0:50:61:1b:19:97:b7:
         79:0c:30:c0:7f:62:00:6e:fe:36:64:c0:c8:50:82:c1:6d:90:
         1e:db:56:7c:f1:b5:f5:3e:c3:8a:74:69:05:56:ce:46:eb:b6:
         46:f9:61:7e:bb:62:3f:a4:ec:29:da:2d:a9:a2:38:dd:75:e1:
         bd:7a:a7:cb:04:34:aa:77:eb:f8:2a:ca:7b:c2:dd:32:5c:d1:
         f7:c5:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:11 2025 by rpki-client