Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa
File:                     3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa (raw, json)
Hash identifier:          a4k57lwApcoiBwdSinOtxLq1yG22Z5ze7KbPFZ30lL4=
Subject key identifier:   F3:B5:52:48:06:91:51:FB:CF:D2:D1:58:3C:E5:6B:AE:59:49:DF:E1
Certificate issuer:       /CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
Certificate serial:       2DCF8F1F3D58F00CBE45A915404D7B7EF2B4C252
Authority key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa
Signing time:             Mon 09 Sep 2024 15:04:37 +0000
ROA not before:           Mon 09 Sep 2024 14:59:37 +0000
ROA not after:            Mon 08 Sep 2025 15:04:37 +0000
asID:                     265039
IP address blocks:        170.150.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cf:8f:1f:3d:58:f0:0c:be:45:a9:15:40:4d:7b:7e:f2:b4:c2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
        Validity
            Not Before: Sep  9 14:59:37 2024 GMT
            Not After : Sep  8 15:04:37 2025 GMT
        Subject: CN=F3B55248069151FBCFD2D1583CE56BAE5949DFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:ac:98:3b:07:98:b4:a2:e7:dd:bb:3e:93:
                    eb:10:e9:ac:1a:8c:a3:05:8f:9f:9e:ff:9e:42:28:
                    59:86:94:54:85:25:01:53:05:0c:2d:04:e4:4e:40:
                    10:dc:c4:65:f2:0f:cb:0c:92:11:1a:3c:d1:7d:3c:
                    2b:16:01:55:04:ca:8f:91:52:dc:83:f8:c5:17:a1:
                    b7:72:1e:56:a8:a0:e6:71:b3:57:b3:b6:db:39:e9:
                    24:e8:e7:8d:41:dd:93:4c:f6:f5:c7:4b:ed:1a:85:
                    0f:9d:04:cb:40:73:96:de:94:d6:2e:59:26:57:5a:
                    08:3b:5d:5c:58:c1:b3:70:e5:86:82:e9:82:58:7b:
                    72:cd:60:9e:44:74:71:5a:48:15:39:9a:b3:5d:fd:
                    eb:05:ce:bb:36:a9:2f:65:74:05:19:7a:f8:55:d8:
                    8e:4b:3d:fc:81:a0:7f:2a:fe:7a:6f:a9:de:df:af:
                    a4:3a:71:7d:40:20:de:d2:66:0d:12:cc:e1:39:fb:
                    d9:78:27:e9:da:2c:13:1c:ac:2a:ab:84:d7:36:e8:
                    80:3d:fd:93:01:f5:85:3b:67:89:7e:b4:14:b3:5c:
                    00:69:df:ba:ad:5f:09:4c:ca:d5:ff:4b:d2:24:d3:
                    ad:fd:00:40:ce:c8:c6:64:33:4d:ea:d2:95:ba:5f:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:52:48:06:91:51:FB:CF:D2:D1:58:3C:E5:6B:AE:59:49:DF:E1
            X509v3 Authority Key Identifier:
                keyid:8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:0c:d0:d6:69:93:f8:dc:3a:c8:10:04:4f:84:c1:b8:b5:
         f1:71:1e:57:82:34:f1:39:59:9f:29:f3:cb:20:77:f5:de:5d:
         c7:a8:af:dd:58:9c:f8:fe:30:4c:b5:b7:c1:a3:4d:28:59:67:
         ae:06:3f:88:94:70:f1:df:7d:c7:07:9e:7b:da:a5:87:95:4b:
         d3:a8:ff:41:a5:e5:e6:5d:81:b8:95:5e:79:5d:aa:5e:72:e4:
         d3:28:f1:e9:30:8d:3e:d7:c7:18:01:a8:a3:3b:2d:00:4e:4b:
         d7:32:70:57:14:20:ed:d1:73:49:3b:db:48:8d:2f:17:24:e1:
         de:9f:ac:e2:49:82:0a:df:82:92:86:ef:e2:33:c4:fc:32:93:
         16:98:81:4c:b0:f1:85:da:f6:f2:37:9c:f7:1b:ef:66:8a:88:
         90:13:ef:2e:ed:c9:be:a0:ab:b2:4d:ef:9b:21:3d:12:d9:e9:
         f1:3f:29:e1:c8:43:94:99:3d:74:e4:a3:b7:3a:9b:9c:84:e2:
         88:52:f2:2e:cc:99:c4:b3:95:68:41:37:6a:b0:3d:47:92:9b:
         9f:df:e3:f1:3d:b8:9c:14:80:68:06:91:6a:67:51:06:3b:d6:
         f8:a4:56:dd:09:a2:44:05:bd:60:a3:86:e7:eb:2c:2c:70:08:
         83:ec:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:33 2024 by rpki-client on console-fra.rpki-client.org