Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e322e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e322e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          facxIuImkA1imgN9EHL16K+JyqiwMXZpA86VW+748ss=
Subject key identifier:   35:1C:18:55:58:0B:C3:96:38:C2:2C:2D:43:F9:15:C8:B0:B1:ED:CA
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       754A87285CB5FAE468C953D0A7AD6D0D9FA84CB8
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e322e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:38 +0000
ROA not before:           Tue 23 Apr 2024 19:08:38 +0000
ROA not after:            Tue 22 Apr 2025 19:13:38 +0000
asID:                     263627
IP address blocks:        170.80.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4a:87:28:5c:b5:fa:e4:68:c9:53:d0:a7:ad:6d:0d:9f:a8:4c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:38 2024 GMT
            Not After : Apr 22 19:13:38 2025 GMT
        Subject: CN=351C1855580BC39638C22C2D43F915C8B0B1EDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:a9:37:bf:dd:8d:2a:c1:fe:83:f8:5e:cf:
                    89:bc:09:a2:7f:00:da:45:db:1d:69:47:8f:aa:32:
                    4d:54:78:e4:8a:29:c8:b4:bc:c3:45:27:99:51:09:
                    73:e3:5d:49:27:c0:32:50:65:37:37:01:35:a8:95:
                    a3:0e:1c:1c:64:81:c1:00:f4:a6:5b:cd:7b:3b:54:
                    73:40:0e:d1:d7:49:85:b3:91:61:82:2b:4b:a4:12:
                    16:3c:2f:5a:92:45:00:05:bc:76:d1:8e:15:d5:02:
                    c8:55:35:49:82:1a:6a:a2:3f:48:0b:28:ae:fd:be:
                    f3:f4:9d:90:8b:ba:d3:75:6f:54:70:44:e6:ba:d1:
                    54:f1:c3:18:c2:f2:a6:14:3a:65:8a:07:6f:e1:b8:
                    69:b7:32:aa:8c:20:6a:84:d5:91:00:f3:2b:29:fc:
                    a4:d3:b4:12:62:75:8c:46:0c:ed:09:ca:3a:eb:a3:
                    ac:af:1b:94:34:ee:5b:eb:d7:23:30:18:c1:df:6b:
                    69:3f:c4:66:77:86:08:f8:94:ed:43:e2:ce:1f:9a:
                    7a:a9:4d:0d:79:e9:ca:ed:ed:c1:b4:2c:41:42:fb:
                    fb:4e:ea:cd:5d:53:fe:70:4f:4f:9b:f3:ed:90:cc:
                    af:cb:b4:1c:b6:b1:03:e3:77:4c:be:e8:53:7e:99:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:18:55:58:0B:C3:96:38:C2:2C:2D:43:F9:15:C8:B0:B1:ED:CA
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e322e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:e3:f5:83:30:f1:5f:d1:11:f4:c8:95:86:35:63:6d:2f:
         03:2e:46:c4:2d:ac:6f:92:ac:c1:a9:91:f3:d0:e2:28:4a:58:
         a6:a8:d8:7d:d3:47:48:fe:42:ea:fc:78:2d:4c:34:18:37:47:
         77:e0:d9:91:7f:90:31:3d:9c:46:f2:da:7a:19:3d:bc:6f:07:
         fd:db:af:40:4e:c8:95:6b:54:ce:10:f8:c2:cb:e5:ed:87:39:
         3d:43:44:da:41:94:9f:77:7a:5b:d9:10:1c:06:a6:94:fd:62:
         87:0c:37:4f:7b:c0:5d:b6:2d:cb:81:e5:c3:16:89:30:7e:4b:
         47:67:a6:91:a2:9b:28:f8:5b:94:87:ae:bc:80:c2:c6:09:12:
         e1:ea:45:65:d4:26:9c:2e:bc:03:d7:7c:62:9f:6e:79:c3:b3:
         a9:f3:cb:9e:2a:98:b6:0f:a3:e3:8f:d1:78:f5:a8:16:f1:35:
         43:b8:8c:84:ce:04:2c:13:65:34:51:a0:5a:6c:ac:25:c5:f0:
         c3:7b:0b:b3:df:64:25:29:34:f1:61:ca:00:1f:a8:58:2a:b5:
         97:a4:bd:28:52:0f:96:0d:71:06:69:0b:5e:b6:3f:22:45:af:
         02:b1:50:20:99:99:22:aa:25:6d:62:9c:20:15:a4:4d:87:85:
         cd:3e:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:09 2024 by rpki-client on console-fra.rpki-client.org