Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
File:                     3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          FoeBUqpX9duQf8o2TgNsA01ND4PEBEbqjLAuqtQBRIE=
Subject key identifier:   D3:84:07:69:5B:C8:16:3F:20:C3:A4:38:5B:A2:2D:57:B8:F1:FA:0B
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       10EEAFB8D9D2FD663683B48780D4C71D544B116E
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:17 +0000
ROA not before:           Mon 09 Sep 2024 14:55:17 +0000
ROA not after:            Mon 08 Sep 2025 15:00:17 +0000
asID:                     28270
IP address blocks:        170.245.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ee:af:b8:d9:d2:fd:66:36:83:b4:87:80:d4:c7:1d:54:4b:11:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:17 2024 GMT
            Not After : Sep  8 15:00:17 2025 GMT
        Subject: CN=D38407695BC8163F20C3A4385BA22D57B8F1FA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:e4:78:ff:32:e3:0a:c5:75:20:e6:6f:a6:
                    23:cb:05:29:f0:5b:c5:96:c2:7f:a1:b4:a9:56:e0:
                    0a:06:8b:86:85:9a:d6:d2:7a:e4:de:7a:8d:45:bf:
                    55:78:e5:78:61:91:73:94:55:9d:c9:ba:5b:90:b2:
                    56:d6:1b:c3:ba:f9:b8:42:df:e1:d9:61:94:b1:10:
                    d4:4c:0d:1b:c4:f9:2c:6b:c7:26:93:66:18:3e:e2:
                    9a:81:2a:2c:f5:38:9e:1c:e9:3a:44:b4:2e:ae:70:
                    d5:a8:2a:ad:39:c7:c7:2b:3e:4b:19:c0:f4:6c:7b:
                    77:81:9b:58:5d:01:ff:55:6d:d5:c4:e1:33:59:ab:
                    e9:0a:d8:e0:98:d3:7e:a3:b3:6c:df:53:fc:34:b7:
                    8b:99:1c:4d:18:63:ee:2e:e5:71:60:4c:a3:c9:90:
                    99:95:79:04:08:b8:b5:ea:91:4b:45:a5:f3:ac:c4:
                    3d:27:21:29:56:e8:d2:1c:f7:b5:a8:e1:2e:71:ae:
                    c9:bc:07:e3:e4:ac:ce:0b:fb:28:b7:91:1b:fc:0f:
                    59:f3:47:84:4a:71:38:4e:66:b3:30:8f:ae:e1:07:
                    c6:46:8f:20:e2:50:78:6c:60:b2:1c:21:ff:cd:c2:
                    df:4e:d9:56:ed:09:03:17:8b:80:f5:24:9f:d5:79:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:84:07:69:5B:C8:16:3F:20:C3:A4:38:5B:A2:2D:57:B8:F1:FA:0B
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:21:68:bd:c1:76:13:46:5b:2d:fa:60:86:83:4e:8e:ee:
         9f:f5:9d:98:38:c6:09:a2:83:10:f0:b8:d5:2d:b6:25:14:16:
         17:fa:ee:10:77:b9:ff:3d:47:bb:86:4a:10:e8:27:bc:82:29:
         20:de:9e:d8:e5:78:e5:e0:da:3b:91:11:31:43:8c:b2:1f:e3:
         db:d3:11:8d:b3:95:82:7a:b0:9c:1c:15:5d:a9:40:30:76:a6:
         91:44:04:6e:16:94:cf:95:fa:51:bd:cc:61:a8:8d:13:40:e5:
         ea:e8:fc:ad:51:d7:88:da:49:dd:4e:86:33:22:b0:da:f5:98:
         fb:d8:35:3a:9b:c9:a2:2e:27:10:a9:84:fb:66:c5:0a:cc:a7:
         73:82:f1:1d:b0:5e:5c:64:da:d4:b1:2b:6d:e5:cd:c2:b0:8c:
         06:31:01:11:28:3d:5f:8f:bb:fb:13:7d:3e:d9:81:3c:cc:46:
         ac:da:74:ae:65:92:cc:03:71:13:29:6e:cb:ad:ae:97:a1:5f:
         d3:7d:5d:d0:31:79:1b:5a:1f:d3:e1:bc:ff:dc:fa:a4:59:73:
         d3:a7:04:a5:d4:0a:ba:5b:4b:4e:f0:85:67:14:74:d8:e3:06:
         25:60:8d:89:23:b9:8f:90:4b:10:7a:91:e9:bd:c0:0b:1d:9b:
         3e:c0:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:27 2024 by rpki-client on console-ams.rpki-client.org