Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa
File:                     3137302e38312e302e302f32322d3232203d3e20323632323936.roa (raw, json)
Hash identifier:          rbBm5FarsI2bTzDKbTdC78pAkI5eCwEXYc4pmSBxa/E=
Subject key identifier:   EF:27:EF:91:ED:26:8A:E3:E1:A2:20:D0:68:CA:6C:2C:2B:07:46:91
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       163238204A5862FFB00A74767BB38AF4BF844C9B
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:38 +0000
ROA not before:           Fri 20 Sep 2024 16:22:38 +0000
ROA not after:            Fri 19 Sep 2025 16:27:38 +0000
asID:                     262296
IP address blocks:        170.81.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:38:20:4a:58:62:ff:b0:0a:74:76:7b:b3:8a:f4:bf:84:4c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:38 2024 GMT
            Not After : Sep 19 16:27:38 2025 GMT
        Subject: CN=EF27EF91ED268AE3E1A220D068CA6C2C2B074691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:7b:0d:cd:11:9c:b2:56:8b:1c:41:de:f3:
                    ee:e5:e3:ea:bf:4d:de:a1:0e:40:cd:e2:c3:80:ed:
                    b9:07:d2:77:a9:9d:0c:fa:a2:72:f0:01:8b:2d:18:
                    69:8c:b8:e3:8f:a6:f3:77:d5:02:32:04:70:a0:9b:
                    b0:34:24:ef:b1:c3:c5:da:a6:bc:37:7c:e5:dd:a8:
                    8f:88:d4:52:6b:67:23:9f:77:d8:6d:3f:66:12:23:
                    48:8f:82:4e:c9:e0:5d:a5:95:3f:f4:e4:8d:e0:67:
                    bb:ee:b8:c3:c9:5a:48:2d:ba:fe:d8:4e:21:8c:dd:
                    3f:d7:e0:b8:40:8b:78:16:33:8b:63:b2:3f:75:da:
                    94:ba:89:f7:10:50:9f:85:8e:70:40:c1:65:9f:76:
                    17:1c:da:7f:60:c5:9f:a6:4f:39:d6:b7:4f:8f:b7:
                    b4:a5:de:ba:5c:cd:f5:ec:eb:18:ad:a7:12:26:4e:
                    a7:8f:a7:e5:61:20:a4:38:67:c9:33:b1:86:5f:6d:
                    4a:11:1d:da:f8:26:ba:30:29:81:ed:ce:56:0f:d9:
                    36:db:f7:28:d2:56:30:6e:fd:78:d8:91:b1:95:82:
                    1f:29:09:56:09:29:c9:cb:6e:47:2f:bf:6a:d4:74:
                    1a:d0:e5:ff:05:8b:a9:80:8e:d7:70:38:e6:dc:7b:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:EF:91:ED:26:8A:E3:E1:A2:20:D0:68:CA:6C:2C:2B:07:46:91
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:38:b5:9a:a0:e5:39:ed:60:1b:26:eb:15:ca:21:18:09:66:
         10:1b:d5:82:0d:1b:20:34:1a:14:31:cb:ae:15:a2:65:3f:8b:
         b6:b9:64:4f:6c:b7:d3:0b:93:c8:f2:5d:a8:3d:a4:46:2f:2f:
         51:af:43:1c:19:4e:1e:9d:75:1a:1b:7e:f2:27:af:5a:2e:53:
         92:72:0a:93:f7:3a:ad:29:d5:47:47:3a:bb:6b:88:11:eb:8d:
         15:d5:59:3f:22:df:76:66:69:f0:55:d3:02:17:ad:e8:ff:5b:
         de:b0:a6:9b:24:dd:ff:24:eb:27:94:39:f6:d6:9e:eb:7d:dc:
         6c:43:83:52:03:31:c7:44:9a:8f:e2:2d:34:72:48:89:a1:cd:
         47:b3:e7:d6:9a:68:d0:9d:8e:a4:0d:8e:ef:1d:e0:2d:e4:e7:
         36:26:f0:c3:4e:47:f9:d0:4f:33:64:cb:f0:ad:4f:e4:b2:65:
         e3:de:d9:22:f9:de:2a:cb:73:d2:35:44:ed:a8:d1:f7:9a:35:
         dc:ae:77:fc:95:09:30:fe:d0:67:aa:f6:c4:18:b4:46:c2:c8:
         15:43:fa:64:8b:38:e4:80:94:ef:6c:3f:dc:45:69:cc:05:25:
         65:22:ae:54:5a:33:fc:cc:61:22:4a:90:f7:76:7b:a7:f0:85:
         bc:00:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:04 2024 by rpki-client on console-ams.rpki-client.org