Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33302e302f32332d3233203d3e20323633363038.roa
File:                     3137302e3234342e33302e302f32332d3233203d3e20323633363038.roa (raw, json)
Hash identifier:          tjOSehyMzC3W4ZDoq72L5/mW0vZDD6Irp2H7nzAoYpk=
Subject key identifier:   56:02:FE:B3:52:9C:DB:71:C5:DF:53:BB:12:75:02:12:5D:00:BF:E5
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       1241EA75AF3506483A615733F75D0C45377AD6E9
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33302e302f32332d3233203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:18:45 +0000
ROA not before:           Mon 23 Dec 2024 13:13:45 +0000
ROA not after:            Mon 22 Dec 2025 13:18:45 +0000
asID:                     263608
IP address blocks:        170.244.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:41:ea:75:af:35:06:48:3a:61:57:33:f7:5d:0c:45:37:7a:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:13:45 2024 GMT
            Not After : Dec 22 13:18:45 2025 GMT
        Subject: CN=5602FEB3529CDB71C5DF53BB127502125D00BFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:e4:dc:38:70:d8:b6:dc:4d:d1:d3:26:f1:
                    3c:de:4b:3c:0d:00:3f:4c:4d:6b:c9:87:4b:09:1a:
                    3a:98:ee:24:0b:30:01:26:3e:fb:5a:35:5d:e8:cb:
                    1e:81:fa:7f:de:52:96:18:64:2d:15:2c:b0:dc:f8:
                    74:11:f3:57:d7:3d:91:62:4b:5b:58:2a:2f:6c:4a:
                    56:8c:97:df:5b:b2:fa:52:0b:06:c3:65:ba:0c:86:
                    a5:37:9a:5e:23:f5:6a:f9:fc:54:08:f4:c6:0d:b3:
                    ec:4b:b5:7c:6e:ae:7d:1c:a6:37:da:83:2f:2f:90:
                    07:56:1f:d5:15:09:04:fd:69:fe:14:43:fb:51:dc:
                    68:c5:1b:ef:00:c9:30:30:09:0c:61:c0:e4:ec:13:
                    5f:5e:0b:0a:bf:aa:5f:98:9b:42:58:33:e8:19:a6:
                    aa:e0:f0:c1:1a:03:fb:7e:83:c5:12:7d:b7:13:ba:
                    e9:2e:10:a7:c1:22:2b:25:e2:81:7b:ff:65:76:22:
                    f6:88:ba:b0:a4:15:d9:0c:e4:f3:d6:1b:b9:d9:6f:
                    9b:6d:6b:c8:f0:84:99:22:d3:66:40:db:7a:53:39:
                    39:d9:b8:00:25:62:3e:e3:4b:9c:e2:c0:24:32:48:
                    52:9b:67:80:54:b8:ab:56:dc:e8:f2:5b:42:2b:8d:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:02:FE:B3:52:9C:DB:71:C5:DF:53:BB:12:75:02:12:5D:00:BF:E5
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33302e302f32332d3233203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:68:a3:d8:42:42:23:a2:83:4d:b0:73:78:42:f3:d8:a9:
         53:01:23:e1:82:ce:be:8f:c8:90:e0:c2:33:f9:d8:c6:0c:e6:
         81:82:3d:56:09:63:0d:b7:88:ce:33:52:91:2f:7b:db:ee:51:
         df:51:d4:2a:e5:e5:4c:8e:16:e2:46:1a:f3:5a:69:2b:73:59:
         7c:b2:81:43:ec:9e:ac:9d:f1:42:2b:1e:14:3d:60:0b:4b:75:
         24:49:ca:fa:b1:f3:78:9d:a9:d6:28:d1:d0:56:da:0a:a5:aa:
         7f:20:99:4e:cf:6e:3c:85:3d:b5:e5:1c:9a:1f:34:8f:79:b0:
         30:57:e7:45:26:8a:4a:70:60:e9:a4:1b:f3:3c:9d:c5:fe:3b:
         83:d1:2f:db:d8:67:5b:9d:a6:ee:6f:3a:fd:54:99:14:b2:d0:
         3e:7b:d1:0c:a2:71:c5:4d:8d:22:0e:bb:25:2c:0c:26:76:22:
         0a:42:9f:c7:39:34:25:b8:ba:1b:ae:c6:ea:6b:b1:79:24:d4:
         89:06:9a:55:17:09:52:2d:81:e7:51:38:6d:eb:46:e0:1c:46:
         b1:c4:52:48:f1:8b:4b:46:c8:1b:2b:7b:f6:de:87:71:ba:a1:
         14:2e:43:0c:c4:6b:26:0b:dc:99:9b:53:db:f4:5c:df:f0:0b:
         dd:e9:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:28 2025 by rpki-client