Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3234203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (raw, json)
Hash identifier:          8vwwo/SaNUCndqLG1W6S/xt9MVBLLG9Ywm1/OLdTEj8=
Subject key identifier:   33:41:2E:09:16:C6:19:2E:BD:A3:BA:EB:C6:6F:52:D7:96:7E:6B:63
Certificate issuer:       /CN=5429A630D95311C5AADAF5AC62BF18BF86863194
Certificate serial:       3DD73374FDE1C4664BFCFEE7238AC6FE0EDEA3C7
Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3234203d3e203532353933.roa
Signing time:             Thu 19 Dec 2024 19:44:42 +0000
ROA not before:           Thu 19 Dec 2024 19:39:42 +0000
ROA not after:            Thu 18 Dec 2025 19:44:42 +0000
asID:                     52593
IP address blocks:        170.83.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d7:33:74:fd:e1:c4:66:4b:fc:fe:e7:23:8a:c6:fe:0e:de:a3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194
        Validity
            Not Before: Dec 19 19:39:42 2024 GMT
            Not After : Dec 18 19:44:42 2025 GMT
        Subject: CN=33412E0916C6192EBDA3BAEBC66F52D7967E6B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:ce:77:7a:e1:4c:1d:ed:a3:a0:3a:35:54:
                    32:b0:f0:41:02:4e:78:b5:3f:ba:ad:28:67:f3:2b:
                    1c:a8:cb:6d:57:81:39:94:ec:4c:73:32:bb:af:a4:
                    52:84:16:d2:67:8f:2f:6f:4b:6c:34:41:51:46:fb:
                    66:43:39:d8:07:38:45:f2:99:ec:80:fa:31:ac:3c:
                    3f:ca:45:c0:42:16:6c:0f:82:c5:be:37:6b:b5:5f:
                    bd:02:55:f9:2d:7d:e5:32:19:43:b1:14:4b:d7:15:
                    5e:47:0a:db:d4:06:84:3b:8d:fe:44:ec:b0:5b:54:
                    4b:74:00:ce:d6:c7:9d:82:04:85:a8:82:36:43:44:
                    81:85:1d:00:c3:ca:12:8d:4b:0e:0c:88:af:c5:0d:
                    30:3f:a7:ae:03:b0:de:04:6a:7b:07:39:6a:68:c7:
                    28:66:93:d8:7f:5e:9e:f0:f1:2b:e1:93:fd:23:07:
                    7d:16:f9:62:3c:3d:e4:84:d7:69:1c:0d:7c:53:af:
                    8a:e8:47:b8:78:1d:24:d5:ba:85:ed:b4:67:fb:25:
                    c6:9c:05:76:ef:1e:1b:27:b7:2b:95:4a:a9:73:50:
                    59:de:02:6f:83:1b:6f:6a:b1:e6:56:ee:7b:db:4f:
                    ef:98:0f:07:92:63:55:cf:6f:e3:00:99:02:81:0f:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:2E:09:16:C6:19:2E:BD:A3:BA:EB:C6:6F:52:D7:96:7E:6B:63
            X509v3 Authority Key Identifier:
                keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3234203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:25:86:eb:e2:41:a4:e9:26:91:58:e1:ef:87:55:8f:1c:7d:
         56:5f:fa:a2:3c:ef:7a:5a:6b:3d:44:da:f4:d4:88:b8:b3:11:
         38:59:e4:ad:0c:62:b8:f4:9f:d9:3e:fc:b9:0a:8c:ea:2c:d0:
         a4:85:75:d5:64:8a:49:03:ff:4a:12:f8:a1:df:e6:f7:d1:ff:
         fb:b8:98:86:d1:46:bf:1e:35:e2:09:1a:20:cc:bd:45:d2:aa:
         35:4b:5d:b5:7b:02:96:af:5c:5c:a9:20:a3:65:b0:ee:87:ad:
         0e:0a:8e:bc:2a:df:8a:b8:78:7d:86:bb:ab:95:aa:38:5b:53:
         ef:8b:13:3f:fa:a6:34:39:73:bb:5a:6e:55:6b:ef:f3:07:7a:
         cd:f5:3e:31:5c:43:74:91:f3:52:28:c6:99:36:7c:54:b3:d8:
         c8:22:41:66:57:9c:7d:45:5a:6c:c0:8a:a4:e4:78:ba:6a:8d:
         d1:c7:db:7c:fc:48:ee:2e:c7:2b:ef:08:4c:13:45:03:19:ee:
         f2:1d:d1:bc:2c:78:e3:f7:d9:5a:f4:05:de:58:ce:48:f7:f5:
         2b:81:ab:8e:5e:6f:0e:00:6f:e0:c7:e3:9e:a6:fa:3d:0d:9b:
         26:fc:95:c7:3d:2f:dd:96:40:f9:62:17:9b:78:37:18:65:07:
         e9:68:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:50:40 2025 by rpki-client