Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e302e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          1hig1vxKFAwGT13paaxHtAfHx4ENo6Rb79ToaUgPEpc=
Subject key identifier:   3A:F8:C0:E0:60:D5:CB:9F:D8:7C:D0:D5:DB:E5:8C:17:86:CA:3E:5B
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       328FC07EE817F55874005F566E87CD0628A8CB33
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:41 +0000
ROA not before:           Tue 23 Apr 2024 19:08:41 +0000
ROA not after:            Tue 22 Apr 2025 19:13:41 +0000
asID:                     263627
IP address blocks:        170.80.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8f:c0:7e:e8:17:f5:58:74:00:5f:56:6e:87:cd:06:28:a8:cb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:41 2024 GMT
            Not After : Apr 22 19:13:41 2025 GMT
        Subject: CN=3AF8C0E060D5CB9FD87CD0D5DBE58C1786CA3E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:03:be:97:fc:9a:1d:7f:4a:c7:d5:cb:ce:
                    08:4b:a6:1f:19:2a:ce:6a:f1:8e:5a:31:c3:1d:11:
                    5c:90:20:75:c7:cf:34:ec:10:7c:0b:f9:38:9c:aa:
                    7f:8e:9b:63:9b:52:23:f9:f9:17:61:1f:9c:2b:94:
                    65:b2:ea:90:25:53:4b:43:58:9b:6e:e2:45:b3:bd:
                    f3:09:ac:20:36:e3:60:50:f9:90:fc:b8:f5:3e:ac:
                    6d:9f:3f:f0:51:f7:66:0c:fb:34:53:cd:70:58:1a:
                    d3:e7:7d:f0:85:23:b2:8f:f0:2a:e8:4a:e7:f9:89:
                    f8:a7:f8:d6:79:58:01:88:04:66:e0:ec:3b:48:39:
                    49:b1:03:09:96:92:b7:1a:63:08:3a:39:c2:32:6f:
                    a0:21:09:e6:8e:b5:22:97:50:8c:4d:70:27:15:b0:
                    c8:03:57:18:df:fa:9f:74:74:db:56:2c:f2:52:35:
                    bf:43:c8:fb:6d:1c:39:4b:39:68:91:84:27:b7:8b:
                    a4:03:ef:b4:ec:04:53:cd:79:09:84:16:b3:21:db:
                    5f:64:33:24:9f:ab:3f:ca:31:89:ca:73:a0:dd:6d:
                    35:78:bd:ad:3b:e2:df:38:55:12:80:10:cd:80:54:
                    96:55:6f:6a:eb:2e:7b:c8:f1:b4:82:d8:b1:6a:24:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:C0:E0:60:D5:CB:9F:D8:7C:D0:D5:DB:E5:8C:17:86:CA:3E:5B
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:0b:98:db:32:31:56:67:c6:2a:12:b5:90:be:e4:55:ab:
         56:83:ee:fa:c4:17:62:3c:28:1a:92:0d:c2:2a:ba:e1:56:dc:
         f1:23:9f:69:8d:de:1e:1f:a1:e1:78:ca:a2:c6:9d:d0:bc:77:
         59:d3:03:32:5b:1a:c0:fb:6a:af:14:a6:80:fd:3a:b7:23:46:
         29:0e:71:20:eb:3d:57:63:6b:5a:c2:18:33:38:b5:1f:2a:e0:
         bb:19:f2:94:d3:63:6e:7f:51:a3:fe:da:74:80:86:90:4b:c6:
         56:ad:9b:b7:60:1c:de:5f:60:cc:be:c1:da:70:2a:19:c1:de:
         a3:ae:8c:82:38:09:93:03:7a:3d:6d:77:a8:66:d6:82:35:4c:
         87:dc:a4:99:21:e0:a1:f7:ec:3c:cb:ef:99:33:19:3c:64:fe:
         15:09:17:c0:33:ac:ba:36:9b:7e:fa:2e:c9:28:ad:61:1d:94:
         fc:77:8e:34:30:c3:98:bc:94:2c:eb:52:e1:17:6a:59:06:01:
         55:a6:3f:ae:b1:42:1a:6c:33:2a:eb:93:54:f4:ad:d7:7b:8a:
         c4:85:de:c4:46:0b:23:ef:16:1d:f6:af:fd:0c:f4:93:b5:5e:
         15:99:ad:20:02:e8:6d:67:d8:0b:fd:47:d2:c0:28:e4:49:58:
         30:ec:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:41 2024 by rpki-client on console-ams.rpki-client.org