Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa
File:                     3137302e38322e31362e302f32322d3232203d3e20323636343337.roa (raw, json)
Hash identifier:          sxeTFoeJxCIGCsSIBZfUNeVE0H8paY5n5luXbI/3Fu0=
Subject key identifier:   CE:6E:2E:CC:43:14:5D:38:FB:6D:24:3F:96:13:31:C9:A3:97:BD:5A
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       4AA1BB8520463CB5BD40BEC7D4CB3EF3E397846C
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa
Signing time:             Sun 04 Aug 2024 17:32:54 +0000
ROA not before:           Sun 04 Aug 2024 17:27:54 +0000
ROA not after:            Sun 03 Aug 2025 17:32:54 +0000
asID:                     266437
IP address blocks:        170.82.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a1:bb:85:20:46:3c:b5:bd:40:be:c7:d4:cb:3e:f3:e3:97:84:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Aug  4 17:27:54 2024 GMT
            Not After : Aug  3 17:32:54 2025 GMT
        Subject: CN=CE6E2ECC43145D38FB6D243F961331C9A397BD5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:e1:0c:93:4e:0a:8b:5d:f9:a7:2d:f3:a2:
                    00:1a:a1:4a:41:b7:2f:77:8b:bc:f5:97:bb:23:a3:
                    6b:8e:74:d5:67:53:78:75:8e:f2:24:85:2e:c8:66:
                    06:49:9c:9d:02:06:5c:cf:a4:6f:49:0c:37:ff:02:
                    f5:7e:81:ce:71:9d:18:d4:d5:5f:2c:d4:68:2b:82:
                    8a:aa:fe:6a:55:b8:68:b6:1b:6d:f6:6e:c7:31:a2:
                    e1:0c:9e:88:fd:dc:ae:6c:9a:7e:b8:dc:72:c9:cc:
                    99:36:ca:17:f9:40:27:09:9c:8b:fe:07:2b:f3:4a:
                    ec:f4:fa:16:93:34:b2:76:9c:0a:e2:19:a6:34:f7:
                    5e:7c:12:6d:29:4c:53:68:10:b7:c2:e6:35:48:41:
                    7f:8a:09:a4:2d:ad:06:d2:10:12:00:2a:de:3c:80:
                    ae:e5:89:16:20:38:12:5a:57:a4:cf:da:d9:20:73:
                    2e:93:d5:91:b1:a3:7b:c0:46:db:ea:f1:8e:35:00:
                    39:cf:86:cb:be:15:7c:4f:ab:47:82:54:81:42:25:
                    ce:83:ab:f2:f0:26:c2:94:a1:4c:98:6f:ab:ab:98:
                    83:3d:dd:a9:3d:1f:a8:0a:73:89:04:f2:0a:d2:cc:
                    c9:70:51:43:21:97:34:f1:1f:9d:c4:9c:3e:2d:be:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6E:2E:CC:43:14:5D:38:FB:6D:24:3F:96:13:31:C9:A3:97:BD:5A
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:ef:5f:b0:01:18:57:80:94:cf:ef:00:4c:0c:5a:d8:ee:
         28:3c:48:7d:e8:12:97:fb:a5:e7:73:8d:f6:3e:b5:f0:37:31:
         27:b5:93:d3:ca:99:b0:8c:21:d0:7c:f5:86:ab:6b:d0:53:cf:
         b8:57:eb:20:4d:3a:35:af:75:34:b7:2d:52:e5:56:b3:6c:11:
         d4:46:78:00:a1:45:ea:22:34:a1:f9:50:52:ec:1d:ca:54:e3:
         85:5d:46:e7:60:46:5d:a7:79:f1:ae:ad:28:d0:6e:18:96:45:
         f5:d0:6f:4d:bc:eb:c4:f3:33:fd:50:8d:a0:ca:cf:3f:48:ad:
         09:ab:9f:2e:15:cc:c9:28:67:cf:ab:73:36:e6:c1:a9:26:8d:
         c0:e9:93:3b:88:d0:b0:f9:1f:ef:ae:20:b3:b7:4f:66:0d:ea:
         c6:6f:83:f4:82:9c:69:b0:4a:31:04:b0:12:35:70:26:1c:08:
         17:1c:65:4a:0b:d0:d7:3c:43:59:d1:ec:70:22:3a:19:7b:9c:
         02:03:ca:5d:57:0d:27:2f:37:e2:3c:91:ec:d9:a2:59:8b:1c:
         65:6e:4c:d4:5b:10:fe:53:dd:38:f3:d5:71:1f:0f:2d:94:6d:
         df:69:1d:d1:87:2d:2d:99:ef:b3:2f:94:b9:b4:ed:9b:cf:c1:
         11:db:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org