Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e332e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          tPZoIl1XisNqzmb1/4+5+1lXWv3akPHNK8L7cvWCmHA=
Subject key identifier:   F4:B5:B0:82:D4:48:C9:3E:9F:28:84:58:93:44:F5:DE:97:FA:10:93
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       3A62F9A6C377C7AD67EDF554ABEA5D838C663F35
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:38 +0000
ROA not before:           Tue 23 Apr 2024 19:08:38 +0000
ROA not after:            Tue 22 Apr 2025 19:13:38 +0000
asID:                     263627
IP address blocks:        170.80.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 22:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:62:f9:a6:c3:77:c7:ad:67:ed:f5:54:ab:ea:5d:83:8c:66:3f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:38 2024 GMT
            Not After : Apr 22 19:13:38 2025 GMT
        Subject: CN=F4B5B082D448C93E9F2884589344F5DE97FA1093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:f8:81:6d:32:de:66:2e:b1:29:65:30:fd:
                    e5:26:bf:bd:14:b2:ba:f7:ea:03:67:75:58:ff:52:
                    d9:de:bd:ed:36:7e:a8:44:af:da:58:02:d5:43:f6:
                    f9:b6:6f:70:0a:93:86:fb:bc:42:89:9b:56:e4:ce:
                    45:94:e3:8d:2b:d8:77:6c:e4:d8:31:e2:63:5e:23:
                    7b:2f:3e:5b:52:d2:df:ec:93:ef:a7:4b:2d:71:18:
                    a8:16:4f:47:4c:5b:18:d9:8c:8b:ef:0e:6c:86:59:
                    34:bd:99:41:ea:bc:6c:85:5e:e5:77:a5:3d:d7:49:
                    48:61:e8:60:64:d7:0f:1c:f6:ab:b8:13:9f:3c:cb:
                    67:6e:53:99:6f:6e:2b:57:cf:0d:08:c0:1f:b4:89:
                    da:de:5d:30:9c:25:b6:00:63:60:7c:63:94:8e:4d:
                    92:f0:33:66:da:e5:93:60:8a:d6:da:b9:96:cc:b0:
                    e2:87:5f:5f:cd:60:03:bb:b4:fa:e1:9b:13:2c:35:
                    e0:f6:96:b7:da:66:45:b5:19:8a:91:e1:1f:8f:6a:
                    98:28:f1:0a:31:26:71:68:83:29:4a:40:a1:67:d2:
                    33:c5:90:3c:8a:d2:e1:81:3e:29:c9:44:c5:44:83:
                    96:90:8b:bd:27:c5:da:5b:c5:9b:39:ef:2f:e0:a1:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:B0:82:D4:48:C9:3E:9F:28:84:58:93:44:F5:DE:97:FA:10:93
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:5e:ea:12:27:ad:b3:f4:5e:08:17:ba:9d:ac:d6:a9:8d:
         16:62:9f:2b:fd:d7:f4:7e:ab:17:4c:2e:aa:7f:de:89:8f:09:
         2c:9d:ae:1d:42:86:c7:f1:b6:69:42:61:3b:a7:d9:cf:88:09:
         21:b7:a3:e5:79:7e:20:9b:04:0f:ef:25:e8:23:fd:bb:98:14:
         f5:13:48:a2:69:2f:b3:b0:ee:a7:73:51:87:e5:af:96:91:37:
         43:de:f0:70:c7:48:ba:46:25:5d:bc:a6:29:c5:18:e7:bb:9f:
         ae:94:bd:27:03:c3:c6:37:a0:bb:f1:c8:90:6b:7c:ed:50:ba:
         06:24:20:73:7d:5e:66:a2:89:54:03:2a:9e:37:46:49:9a:1f:
         ff:3f:bd:15:c8:ca:c0:c8:60:17:7d:22:f7:c3:86:71:76:76:
         a5:9e:9e:6a:e2:cd:e4:f0:28:12:0c:99:5c:6f:02:70:04:40:
         48:f8:3f:b5:83:12:97:55:35:6e:00:b2:2c:32:25:83:e1:66:
         cf:b8:5c:82:04:6c:3b:95:fc:b5:d4:e2:11:ac:14:a7:59:a7:
         5b:b9:5d:cb:73:81:76:e5:cd:fa:d7:d7:8d:a5:71:72:29:9f:
         b0:42:9d:cd:07:19:d1:67:5a:d8:04:af:6d:69:31:0f:6c:7e:
         80:8d:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:54:49 2024 by rpki-client on console-fra.rpki-client.org