Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa
File:                     3137302e38302e34342e302f32322d3232203d3e20323636333638.roa (raw, json)
Hash identifier:          9WQ1vfzP3B8mzKPm3T4ASYlavXL/t85h4Je9sVkZ3Mk=
Subject key identifier:   54:AB:F5:3E:91:2E:F6:BE:3B:2D:04:A5:05:2C:56:2D:89:27:6B:C9
Certificate issuer:       /CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
Certificate serial:       3DD8732452DEAFC6DC0E0BBF8F5BF34F40833F65
Authority key identifier: A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa
Signing time:             Tue 19 Nov 2024 15:52:29 +0000
ROA not before:           Tue 19 Nov 2024 15:47:29 +0000
ROA not after:            Tue 18 Nov 2025 15:52:29 +0000
asID:                     266368
IP address blocks:        170.80.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d8:73:24:52:de:af:c6:dc:0e:0b:bf:8f:5b:f3:4f:40:83:3f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
        Validity
            Not Before: Nov 19 15:47:29 2024 GMT
            Not After : Nov 18 15:52:29 2025 GMT
        Subject: CN=54ABF53E912EF6BE3B2D04A5052C562D89276BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:73:12:c6:03:67:62:b9:fa:38:fb:06:d9:
                    f0:31:e0:c4:78:e5:af:16:7c:b8:b6:71:a3:8b:7f:
                    4e:d9:99:ed:76:fb:10:0d:14:57:67:4a:81:20:51:
                    0c:41:80:e0:0a:fa:97:ce:a3:ac:e4:32:ff:7e:a5:
                    95:02:7d:97:e9:11:ce:7e:ed:f9:8b:82:e4:77:ee:
                    76:f0:31:70:e0:6f:85:ac:c0:4d:3b:fd:13:dd:c5:
                    5d:96:5d:97:ed:d9:f2:69:ef:8c:89:09:30:23:c4:
                    c5:31:da:28:4d:4e:02:01:56:a2:ff:ec:68:52:e9:
                    a7:c1:9f:59:7a:4a:54:64:13:58:a5:79:29:24:6d:
                    a8:50:3a:78:9a:95:7f:a5:7e:24:99:92:03:1d:6b:
                    3a:65:96:35:1b:7b:00:bd:20:0a:e9:af:5a:d7:b9:
                    30:23:4f:e5:ac:62:ed:56:0b:54:59:f8:7e:b4:9e:
                    d0:53:c7:d9:73:e0:d6:f5:16:ee:70:d1:75:11:30:
                    9c:f5:09:3b:4f:35:e7:89:47:c3:00:dc:0e:49:27:
                    5c:dd:f0:31:12:3d:70:cd:f8:ed:4c:3c:f8:b8:72:
                    a1:3b:e4:e0:d0:0c:32:c6:12:31:1c:50:0b:ec:de:
                    95:d0:8c:e9:18:4d:d9:c0:ab:82:84:98:97:18:2c:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:F5:3E:91:2E:F6:BE:3B:2D:04:A5:05:2C:56:2D:89:27:6B:C9
            X509v3 Authority Key Identifier:
                keyid:A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:86:84:4c:13:6d:1f:15:4d:bf:11:d0:db:75:db:f8:c4:de:
         78:ee:fc:8f:ec:91:94:1f:52:d5:0d:c6:64:ef:5c:71:39:1e:
         f7:01:fe:ea:57:88:d0:f2:2d:06:ca:a7:f5:95:5c:84:2e:9e:
         df:af:8e:00:ef:9f:b6:fa:da:d7:2a:b6:fc:d6:17:38:f3:a0:
         8d:b8:84:0a:04:cd:b3:cb:c4:a3:0f:0b:79:fe:ed:7a:e5:47:
         75:30:e6:f3:8c:fb:36:31:d5:43:90:bf:c4:ec:87:4d:20:ec:
         9b:41:74:e7:83:e7:61:91:5c:30:90:e3:e7:55:05:26:5a:15:
         38:a3:68:96:2c:47:e6:13:18:b8:4a:f7:66:f4:ec:9c:e6:f0:
         73:0a:48:ec:bb:6a:ba:9f:43:1a:f7:00:9a:7a:77:87:2b:78:
         26:d0:bd:8d:e0:9d:ff:0e:f8:03:1f:df:21:f1:a6:63:34:f8:
         86:71:60:c1:7a:ab:87:7e:aa:42:58:18:02:b7:d1:c5:a5:d6:
         02:b9:17:88:18:74:fd:d8:5f:64:cb:12:b5:b3:45:bd:c6:20:
         fc:80:6a:e0:a0:6f:3e:44:70:77:4e:44:31:e2:14:fa:ad:12:
         0d:25:06:40:7a:70:19:b6:49:e1:0e:3d:43:ca:bd:e3:ba:f7:
         7e:70:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org