Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233392e382e302f32322d3234203d3e203631393432.roa
File:                     3137302e3233392e382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          3JYUAANsBAULh3GlOIbdjv57/PDQRFJz+F8tnO0XcXU=
Subject key identifier:   A2:91:B0:51:73:FB:57:93:72:47:7A:3C:DA:62:D6:F1:91:51:1B:C1
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       57B2BA6388DD884F46302D1CC9821A8B34EC4A15
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233392e382e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 22 Apr 2024 14:25:25 +0000
ROA not before:           Mon 22 Apr 2024 14:20:25 +0000
ROA not after:            Mon 21 Apr 2025 14:25:25 +0000
asID:                     61942
IP address blocks:        170.239.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:ba:63:88:dd:88:4f:46:30:2d:1c:c9:82:1a:8b:34:ec:4a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Apr 22 14:20:25 2024 GMT
            Not After : Apr 21 14:25:25 2025 GMT
        Subject: CN=A291B05173FB579372477A3CDA62D6F191511BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:13:d1:1a:42:f7:fd:e8:06:6e:78:b2:8d:
                    cf:0b:38:08:8b:ef:2c:0f:70:ea:7c:ef:22:9d:d5:
                    3d:bd:4a:6a:a6:a4:79:6b:1d:45:74:b9:01:92:81:
                    0b:34:d7:1c:09:fa:42:df:8b:3d:06:21:bb:d2:0f:
                    c9:c0:13:ea:09:a9:96:c9:a0:98:f6:64:3a:ab:fa:
                    c6:33:00:55:67:ab:6b:1a:b4:68:3d:fd:eb:00:35:
                    69:f6:fc:54:8e:75:be:2d:b9:62:9b:58:84:6e:50:
                    d6:4e:3e:ca:ce:66:5e:3b:de:19:fa:eb:05:c5:88:
                    05:00:fd:c3:89:3f:96:77:be:0b:5d:21:69:57:77:
                    a6:2d:f2:a6:31:35:73:71:48:d6:c0:e5:a5:5c:18:
                    c6:73:ad:3c:5f:a2:14:8a:b8:eb:78:e9:e5:6e:ac:
                    91:76:48:cb:44:7a:02:fa:a2:26:44:4e:5b:43:93:
                    89:b8:57:b4:90:69:1c:ba:60:8f:a8:55:2e:85:56:
                    da:68:d4:5c:80:66:8a:7c:5e:8b:97:6d:a7:0c:94:
                    6f:f6:2b:6d:ed:b5:86:1b:5d:e0:d8:36:3d:c5:ad:
                    78:26:8d:1b:9e:e6:26:38:b9:80:e1:7b:ef:d3:3e:
                    65:36:e1:44:bb:f9:0a:9e:8d:77:36:c1:84:6b:26:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:91:B0:51:73:FB:57:93:72:47:7A:3C:DA:62:D6:F1:91:51:1B:C1
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233392e382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:f9:49:39:c4:0f:0e:9f:9e:93:54:0a:cb:fa:98:ad:cc:18:
         49:b2:33:4e:10:b2:54:1c:be:be:92:13:14:10:77:db:07:2a:
         b5:80:c9:47:52:99:06:ac:ad:c2:38:84:54:d3:ae:13:b4:da:
         e7:44:df:81:90:18:40:33:6e:06:64:ce:d8:03:f5:a9:58:f4:
         da:ae:9d:5a:db:4f:ab:e9:79:1c:d1:ef:65:9d:30:d7:ed:bf:
         89:0d:78:f7:08:06:6d:49:e6:6d:cb:eb:14:1d:4b:a3:98:b4:
         f7:08:29:4a:82:eb:b0:ca:70:69:24:42:c0:c4:75:a8:33:5f:
         ea:c1:70:b7:37:ab:31:12:75:73:4c:fa:f8:1d:d9:73:49:ff:
         10:ca:f1:36:6b:df:cb:d9:a6:8f:5f:9a:9f:fd:81:ca:63:8e:
         d7:b7:27:e7:d8:e7:41:02:76:b0:8b:2d:18:ad:6a:db:0f:7c:
         a8:94:ab:18:76:fa:0f:91:26:de:8a:85:1c:a9:e5:52:5c:b5:
         85:2a:53:1c:34:f0:a9:e1:61:f6:17:75:3d:6b:ab:e3:62:aa:
         c5:6c:96:39:0c:d6:49:d4:b8:d6:03:11:17:65:a1:06:a2:ac:
         ee:f5:24:d8:4b:84:84:45:53:4a:a4:5d:d4:87:b1:76:1c:e4:
         7f:30:cf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:40 2024 by rpki-client on console-ams.rpki-client.org