Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31382e302f32342d3234203d3e20323636343337.roa
File:                     3137302e38322e31382e302f32342d3234203d3e20323636343337.roa (raw, json)
Hash identifier:          9D9yrio2hwVTCSwFJ+JgQeUhzLmeA1n5BDn/tZdnKiI=
Subject key identifier:   8E:8E:7C:1A:F9:14:73:FD:DF:7A:AA:4C:82:EB:03:E1:75:E1:3C:D6
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       3B333B4634F88EA9B16031528913E9A1B78113B2
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31382e302f32342d3234203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:46 +0000
ROA not before:           Thu 04 Apr 2024 16:40:46 +0000
ROA not after:            Thu 03 Apr 2025 16:45:46 +0000
asID:                     266437
IP address blocks:        170.82.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:33:3b:46:34:f8:8e:a9:b1:60:31:52:89:13:e9:a1:b7:81:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:46 2024 GMT
            Not After : Apr  3 16:45:46 2025 GMT
        Subject: CN=8E8E7C1AF91473FDDF7AAA4C82EB03E175E13CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:ed:02:6c:3f:bf:12:ef:b3:e4:84:ef:27:
                    42:02:05:91:ea:a3:e8:77:73:62:a4:31:95:73:7c:
                    8a:31:79:d6:68:d5:db:c3:2b:48:e0:79:d1:ed:19:
                    13:5f:6c:56:76:3a:82:3f:62:f2:fb:81:d0:22:a7:
                    36:0b:c8:d9:0f:66:f9:86:dd:be:41:8c:9b:47:42:
                    3c:54:9f:87:aa:ae:a5:e0:ed:f4:84:50:b5:2f:65:
                    a7:ab:81:a5:b5:3e:59:bd:f4:7b:86:83:bf:e2:59:
                    44:53:d5:fd:08:41:e3:9a:1f:75:56:00:81:c4:95:
                    98:65:bd:a4:ad:3d:bb:99:c3:6d:7f:a6:a6:96:32:
                    72:15:76:28:4c:46:d3:a8:76:62:ac:0a:cd:69:f0:
                    d2:d1:d8:8f:17:b5:2b:eb:26:36:f3:65:4c:2a:27:
                    fb:38:ab:97:59:03:93:8c:eb:d4:a6:0a:ad:5d:57:
                    5e:0b:1f:bf:87:26:d2:8f:61:c9:9c:86:05:e2:f8:
                    40:bb:e3:0a:8c:9e:9b:ad:4f:96:40:e2:83:1c:a8:
                    48:76:e5:e7:70:63:c3:7c:fd:c8:17:99:46:77:c5:
                    90:12:bb:c0:8d:83:d2:af:6e:b4:b4:cb:a0:99:5c:
                    1a:67:19:9a:11:22:0f:63:20:86:6c:b8:e8:cd:42:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:7C:1A:F9:14:73:FD:DF:7A:AA:4C:82:EB:03:E1:75:E1:3C:D6
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31382e302f32342d3234203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4a:11:fe:7e:92:1c:5d:24:d4:b5:0a:1a:cb:f4:a5:95:de:
         61:75:04:19:20:87:d3:a4:3b:46:90:f3:fb:2f:c3:28:e6:e6:
         7b:88:f9:ed:f1:2f:61:9b:7e:43:72:f9:06:b9:02:27:1d:b9:
         9b:a4:a8:9c:bd:8e:60:26:4c:31:43:d8:1c:5e:5b:96:09:9f:
         1b:de:43:92:45:f9:ca:0c:56:0a:b5:5b:3e:94:32:ec:e0:c7:
         06:db:83:c9:a6:5e:67:04:6c:c3:80:63:ee:94:60:1f:3e:7b:
         26:a1:34:c7:ba:d1:ad:e7:e4:cb:62:8f:2b:e3:6f:6b:60:e1:
         58:8c:50:d2:40:2c:6c:6a:f3:cf:85:65:a7:b1:18:4b:ec:6a:
         3d:fe:41:da:ea:ae:08:ee:1a:df:9a:18:a0:f8:c5:e7:7a:35:
         32:a4:c1:5c:74:ab:99:dd:a5:e2:e6:e2:bc:37:1a:ee:a4:fa:
         5d:f6:01:3d:61:af:48:92:9d:d6:70:47:93:9b:ff:d4:e5:f0:
         db:9d:12:0d:01:17:ce:e3:37:b9:c9:04:c4:3e:b4:85:0b:49:
         34:75:48:8e:d8:0c:f9:44:56:f8:ee:df:b1:46:a3:7e:74:e7:
         e7:d0:af:d9:5c:56:f7:bd:d5:9e:17:e5:ae:fb:f8:05:47:8d:
         63:5a:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org