Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          BJLxWobzq8Q52fxD7sYhrDB/cpAk6RxkAcNH8vm4DBE=
Subject key identifier:   F3:27:65:62:5D:8F:DC:06:23:F5:96:91:B9:87:1A:7E:D2:E6:0A:45
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       10B589E0777991A6AC3908EA01F7915BD73D6BA2
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 24 Apr 2024 14:20:07 +0000
ROA not before:           Wed 24 Apr 2024 14:15:07 +0000
ROA not after:            Wed 23 Apr 2025 14:20:07 +0000
asID:                     266374
IP address blocks:        170.80.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b5:89:e0:77:79:91:a6:ac:39:08:ea:01:f7:91:5b:d7:3d:6b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr 24 14:15:07 2024 GMT
            Not After : Apr 23 14:20:07 2025 GMT
        Subject: CN=F32765625D8FDC0623F59691B9871A7ED2E60A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:23:a8:e8:3e:c7:4c:cf:16:90:1e:ac:0e:
                    7c:48:5b:a3:6b:9a:68:5a:17:2f:18:86:a9:93:b5:
                    e9:86:59:a8:5e:ce:bf:e8:da:62:fa:da:6f:5b:cb:
                    29:48:55:00:c5:3d:ba:79:cc:2a:de:ed:3c:7f:be:
                    12:50:ac:20:b4:71:cb:d1:54:e4:9d:2e:3a:32:2d:
                    97:93:ec:d9:a8:ac:51:1d:bd:b1:72:16:e6:85:e9:
                    90:67:78:2f:39:b6:50:a1:2b:7a:87:a2:63:a7:ec:
                    d1:40:06:88:d9:35:c1:37:08:5e:2a:ac:23:85:44:
                    de:fe:a2:26:a5:af:fd:d5:88:a1:52:d3:33:b4:26:
                    5e:e5:20:ce:c2:c8:dd:86:63:3d:1e:28:07:eb:2f:
                    7c:54:af:fa:ca:5f:0d:1b:d1:b5:50:70:7e:59:4b:
                    f1:b9:1f:1f:20:72:be:6f:74:f2:0b:2f:06:12:b8:
                    57:31:0e:41:31:d8:43:f3:c4:49:ce:bc:bb:f3:84:
                    61:b8:62:55:56:df:39:7e:f2:52:00:ad:f4:06:48:
                    02:10:55:00:6e:34:e1:92:a1:ae:b3:38:35:17:aa:
                    40:c8:85:ef:64:5c:13:e1:8e:9a:bd:ce:16:3d:83:
                    d0:ab:32:9f:c5:8d:ff:15:2e:5d:b3:d6:7f:56:b0:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:65:62:5D:8F:DC:06:23:F5:96:91:B9:87:1A:7E:D2:E6:0A:45
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:c1:f2:52:a2:b0:c8:4d:22:f0:06:0b:2f:df:79:1f:8c:
         6a:6b:b7:bb:09:98:65:7b:e2:fb:ff:51:a6:a3:2d:19:83:aa:
         24:12:68:40:05:0a:c7:42:82:d7:86:76:65:58:ed:b8:05:64:
         83:8b:12:0d:c5:c1:3c:80:e2:3e:e3:60:3b:c5:c7:4b:30:73:
         b2:f9:3c:30:40:a1:c5:64:28:c3:17:28:8e:92:93:2a:da:11:
         9c:70:6c:ba:0e:55:ba:75:58:53:97:21:67:d7:fc:a1:c9:ec:
         39:00:30:36:f4:95:f7:d8:5d:29:3e:7f:46:ae:b5:30:eb:df:
         c8:ea:10:fc:66:07:93:5c:c2:7c:25:46:b7:91:44:26:9b:b7:
         20:1d:a4:4b:f7:90:b0:fd:7a:de:70:2a:9e:e2:05:cf:1a:cc:
         fa:40:70:e6:c0:9d:03:7a:3f:79:4a:17:af:a4:b1:90:5b:94:
         bc:c4:e3:67:32:6d:6a:85:aa:44:ac:6e:c5:89:13:4e:9b:45:
         1b:6a:5d:e2:3c:0c:23:ad:c6:3f:bd:bc:0b:87:18:7f:83:61:
         6e:7b:1a:a0:df:ed:45:39:12:52:41:d6:77:dd:7f:7b:11:03:
         88:64:bb:4f:c2:8d:13:e0:c4:f6:3a:b7:f9:26:b1:d2:7e:e7:
         d9:cd:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:54 2024 by rpki-client on console-fra.rpki-client.org