Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa
File:                     3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (raw, json)
Hash identifier:          lXFqDJqFTV03GvEbpjass+8DqzqGC8Z9LWxa8lKtPd8=
Subject key identifier:   E8:AF:0E:AA:EF:69:F2:22:DC:31:95:0D:BF:CB:A7:71:A2:3A:C0:28
Certificate issuer:       /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial:       1255F473F1992226D61D67E657306F2384646339
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa
Signing time:             Thu 04 Apr 2024 09:56:23 +0000
ROA not before:           Thu 04 Apr 2024 09:51:23 +0000
ROA not after:            Thu 03 Apr 2025 09:56:23 +0000
asID:                     263668
IP address blocks:        170.82.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl
                          rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:55:f4:73:f1:99:22:26:d6:1d:67:e6:57:30:6f:23:84:64:63:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
        Validity
            Not Before: Apr  4 09:51:23 2024 GMT
            Not After : Apr  3 09:56:23 2025 GMT
        Subject: CN=E8AF0EAAEF69F222DC31950DBFCBA771A23AC028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:43:bc:04:8c:61:34:8c:a6:79:38:c2:95:
                    68:cf:64:64:57:c8:5c:5d:c3:a5:e5:17:c4:fb:6a:
                    43:58:86:ca:b2:7d:37:91:54:8b:d7:87:05:ab:d7:
                    7d:93:a8:6c:c3:31:96:12:b0:c4:6a:a0:da:08:70:
                    af:2d:9a:f7:95:d4:44:a1:7f:3c:49:d6:df:32:aa:
                    2f:3b:0a:a2:43:4c:b8:0a:a3:47:e4:f7:5b:c6:0e:
                    bf:0a:0b:0e:22:3c:25:e0:5a:e9:bd:3f:b5:33:51:
                    ca:24:0d:16:03:b1:99:eb:56:c1:e0:53:cc:f6:10:
                    02:d6:51:03:0e:13:64:22:ee:51:fa:46:8f:a4:78:
                    da:26:00:c7:38:2d:12:e5:93:6d:70:2d:df:b1:41:
                    4e:28:b0:1b:5e:4f:c4:5d:19:6b:4c:d4:d3:85:1c:
                    28:f4:37:81:b9:3d:82:6e:c0:52:1f:28:61:76:23:
                    c7:a8:db:a7:87:fa:6b:84:e0:27:d6:ce:1c:f7:51:
                    23:35:d9:44:0a:7c:f1:c8:f0:dd:7d:a4:18:70:c2:
                    07:69:bb:9d:28:a0:c7:00:b9:c9:ca:b9:5c:d5:bf:
                    a5:73:fb:e7:d5:0f:37:a5:46:b9:e4:70:8f:c9:fb:
                    a4:b7:d6:31:dd:bf:dc:a9:d1:e0:33:14:6d:91:f6:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:0E:AA:EF:69:F2:22:DC:31:95:0D:BF:CB:A7:71:A2:3A:C0:28
            X509v3 Authority Key Identifier:
                keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:35:5f:ab:eb:73:d5:b8:0b:38:79:6c:ec:b5:ee:5b:f9:0f:
         85:ec:31:48:51:96:3d:d0:3c:e9:14:1c:89:08:12:e4:fc:56:
         28:b0:af:93:38:fa:cb:fd:66:19:35:10:b4:fa:0d:bb:f4:15:
         5e:ad:df:e9:5e:93:ac:93:b1:ca:fe:0b:c9:88:36:f7:de:c4:
         a9:26:53:ca:de:28:7f:48:dd:31:73:c7:7a:c3:b3:c4:1b:6e:
         64:13:db:bc:86:24:9a:79:d6:0a:57:33:d4:9b:89:e9:4a:a5:
         8b:5a:d5:f6:ad:af:29:2b:10:8d:a6:18:93:9c:63:9e:0d:05:
         b9:3a:48:06:a5:2d:43:e0:c4:b3:90:27:92:4e:45:34:50:db:
         d6:20:79:e5:d7:88:d7:72:be:8c:c4:d6:b4:c1:de:0d:9b:c8:
         d9:5a:1b:90:4f:8e:ef:5b:41:59:b6:76:a2:e6:34:17:4a:00:
         af:df:a4:3c:1c:10:67:ee:95:6f:54:c6:c5:35:9a:46:71:e1:
         52:e8:a2:1f:6d:3a:22:30:8c:48:4c:ea:76:c1:8f:af:9a:c4:
         7e:bf:4f:52:08:f0:5d:d6:e0:74:2f:fd:8e:af:22:fd:7c:32:
         5a:83:b7:1a:57:95:a1:6b:63:ce:f0:9e:5c:b4:e1:01:93:f2:
         21:71:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org