Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          HxqMo2cr2jH5H7gas1sgWkhpgnI9m0zIgpzdb8GzRhU=
Subject key identifier:   5C:69:61:6D:11:71:1C:D9:D0:B4:3F:00:63:44:13:5A:D3:E3:5C:7F
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       1885AA4F6F3D10A78F0EF8DC174DBF7426B2455E
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:02 +0000
ROA not before:           Tue 29 Oct 2024 12:26:02 +0000
ROA not after:            Tue 28 Oct 2025 12:31:02 +0000
asID:                     265010
IP address blocks:        170.84.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:85:aa:4f:6f:3d:10:a7:8f:0e:f8:dc:17:4d:bf:74:26:b2:45:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:02 2024 GMT
            Not After : Oct 28 12:31:02 2025 GMT
        Subject: CN=5C69616D11711CD9D0B43F006344135AD3E35C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:91:53:53:b6:e4:d7:7d:c8:6a:78:e2:ce:
                    0f:88:e1:b8:40:a0:79:37:64:95:10:21:d2:e1:6f:
                    e0:28:71:23:fc:ba:b1:2f:ea:ae:74:b3:3f:04:f9:
                    98:22:5b:09:55:9e:29:e2:39:f9:8f:47:9b:16:5e:
                    de:c6:bc:78:35:cd:8a:1b:61:52:87:3d:e1:9b:79:
                    38:a9:dd:bd:e4:44:cd:39:7f:da:ca:df:52:e1:f2:
                    c0:b7:cd:46:b3:66:89:02:a2:df:8c:5e:47:66:75:
                    4a:fc:3a:01:48:0d:ee:90:68:ff:a1:f1:b6:0b:1f:
                    42:7b:23:fe:40:5e:14:ff:b7:23:2a:53:84:57:2d:
                    07:53:e4:96:32:29:e7:75:9c:97:38:93:d3:a6:f8:
                    bc:78:b2:8f:94:7f:7d:d0:2d:d4:6f:ce:f9:dd:22:
                    3e:c1:d4:7a:2b:12:f0:80:bf:ea:11:78:30:69:44:
                    86:8c:98:17:98:bf:f7:90:60:1e:21:b6:9b:0b:77:
                    e3:55:86:c2:42:f7:be:f5:a7:ac:e4:a0:e0:66:14:
                    2b:87:fa:59:4c:5b:0b:dd:7e:23:64:61:4e:d7:23:
                    17:31:ef:a8:91:d0:71:ad:35:03:16:2f:98:6a:7a:
                    34:67:f6:ee:78:0c:b5:bb:07:d6:cf:72:fc:f5:a5:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:61:6D:11:71:1C:D9:D0:B4:3F:00:63:44:13:5A:D3:E3:5C:7F
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6c:c2:1c:53:76:48:62:1f:81:f1:67:2f:47:66:0b:d5:3d:
         fe:d2:a6:8e:d3:e8:13:af:93:ab:0d:a9:10:03:a4:04:69:4b:
         51:f5:f8:a9:02:5a:44:fe:11:0d:92:02:1a:39:22:d3:e9:91:
         2a:93:f9:8d:5b:43:c0:fb:e2:95:bb:20:f0:d1:71:dc:ac:69:
         6c:cf:91:45:b5:ec:12:dc:7a:e8:f2:e6:26:8f:d8:03:ef:09:
         11:73:f8:dc:05:cd:f4:ce:9a:e1:9b:b6:4d:f2:20:17:02:c2:
         69:44:38:8b:1a:50:38:9b:64:2f:23:26:11:8e:1e:3b:9a:79:
         f8:78:4c:2d:40:cd:a8:ca:fb:88:1a:97:9b:02:6e:46:89:3f:
         7e:92:ed:67:04:84:6c:e6:77:84:7f:73:41:df:4d:8f:b2:b0:
         bc:38:f7:d0:6c:ba:5a:08:b7:92:48:0c:e1:dc:e3:ea:b4:9a:
         fc:57:e6:b4:f4:80:0c:f9:53:dd:53:ed:7b:d5:f8:d1:26:74:
         56:de:e9:47:4c:9f:b1:ce:b6:08:54:46:cc:50:03:e3:13:06:
         bd:6a:71:ab:d8:e7:f5:3a:0b:c6:e7:31:d0:b5:12:ca:d3:3e:
         73:cf:39:bf:77:94:4b:7e:42:75:13:72:27:d8:cd:55:5c:3a:
         63:e2:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:53 2025 by rpki-client