Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
File:                     3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          yKxzzXo02tWDW06DbJZkjeKh3fDyUJ/q7JsZxpa8TMg=
Subject key identifier:   11:A3:23:90:84:97:71:05:86:63:F6:3E:C7:C7:67:2B:FF:0C:A0:D3
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       4FCB8247E840EF9D2A71656C276147587C97CBA2
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
Signing time:             Wed 03 Apr 2024 18:32:14 +0000
ROA not before:           Wed 03 Apr 2024 18:27:14 +0000
ROA not after:            Wed 02 Apr 2025 18:32:14 +0000
asID:                     264342
IP address blocks:        170.245.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cb:82:47:e8:40:ef:9d:2a:71:65:6c:27:61:47:58:7c:97:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Apr  3 18:27:14 2024 GMT
            Not After : Apr  2 18:32:14 2025 GMT
        Subject: CN=3082010A0282010100E107097DE5F380A304171E9A22D5F58298B74A2C02AF3A567E8BEB5FE93F593A4B86BB00D3AC6532ED961DF0002DAA885F117412C43ECA4ABBFB362FF6F634611A911695B99EDC1CD63D163A5204E283FF514EC20281292229ED8487FC829FEC6DE67D3E48D72A105FFE36FF2564047436F5F01EC3BEFBB5618F586E24F29811514364FE96CE8486BFBCB7929E20D225D2AF45FCCDA50032AFE4D30BC7F09F84DACD54DBF4968E47C57B146D523F7ADFBFAEF7C2BB1BCA3E1AFDEBB90ED985C21C2BAD6A6A5DBDE91BFA69D1739C92A94AA8702FC4EB565E720B11DD673C58FAC5B429F929F51F4CEF4C42D85A519E90E770B854251088E8B1661E63A02D46B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:09:7d:e5:f3:80:a3:04:17:1e:9a:22:d5:
                    f5:82:98:b7:4a:2c:02:af:3a:56:7e:8b:eb:5f:e9:
                    3f:59:3a:4b:86:bb:00:d3:ac:65:32:ed:96:1d:f0:
                    00:2d:aa:88:5f:11:74:12:c4:3e:ca:4a:bb:fb:36:
                    2f:f6:f6:34:61:1a:91:16:95:b9:9e:dc:1c:d6:3d:
                    16:3a:52:04:e2:83:ff:51:4e:c2:02:81:29:22:29:
                    ed:84:87:fc:82:9f:ec:6d:e6:7d:3e:48:d7:2a:10:
                    5f:fe:36:ff:25:64:04:74:36:f5:f0:1e:c3:be:fb:
                    b5:61:8f:58:6e:24:f2:98:11:51:43:64:fe:96:ce:
                    84:86:bf:bc:b7:92:9e:20:d2:25:d2:af:45:fc:cd:
                    a5:00:32:af:e4:d3:0b:c7:f0:9f:84:da:cd:54:db:
                    f4:96:8e:47:c5:7b:14:6d:52:3f:7a:df:bf:ae:f7:
                    c2:bb:1b:ca:3e:1a:fd:eb:b9:0e:d9:85:c2:1c:2b:
                    ad:6a:6a:5d:bd:e9:1b:fa:69:d1:73:9c:92:a9:4a:
                    a8:70:2f:c4:eb:56:5e:72:0b:11:dd:67:3c:58:fa:
                    c5:b4:29:f9:29:f5:1f:4c:ef:4c:42:d8:5a:51:9e:
                    90:e7:70:b8:54:25:10:88:e8:b1:66:1e:63:a0:2d:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A3:23:90:84:97:71:05:86:63:F6:3E:C7:C7:67:2B:FF:0C:A0:D3
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:a3:c7:cb:d8:45:3e:63:19:99:87:07:e9:57:e6:c7:8b:
         3b:dd:e0:0f:1a:0a:9b:12:2e:96:f8:d4:ce:33:fb:86:77:40:
         54:c4:53:16:66:c6:8f:32:6d:0d:f8:46:4a:3d:0d:b0:54:f2:
         63:1b:56:ad:17:46:a4:07:eb:d1:fa:ed:06:42:a2:29:a6:ba:
         d9:93:f3:8c:7b:26:33:e7:cf:d2:83:87:e1:08:1f:db:01:0f:
         cb:ac:1f:07:92:db:8b:eb:42:df:f2:27:c4:dc:d3:d6:ca:bc:
         12:96:b9:31:86:ac:71:e8:17:c9:16:d3:4e:f1:af:39:29:56:
         f4:db:ba:e8:53:01:76:15:b5:91:4b:1d:1e:d3:3a:35:c2:14:
         d1:5e:08:ec:3a:e5:20:a3:21:76:11:ea:27:7f:aa:de:52:7e:
         55:5a:4a:1e:b0:34:3d:fa:50:34:66:bf:5f:0b:2c:48:6b:a0:
         e3:12:d8:3d:55:90:53:6e:63:e3:e8:68:e6:a6:4f:7d:af:70:
         11:18:79:81:28:ef:6f:16:8b:63:84:89:f0:06:45:7e:c1:c0:
         56:1a:bc:f8:2c:2a:db:5e:98:48:a0:4d:e9:a6:a7:f0:98:ee:
         99:4f:f2:08:0b:8a:f8:44:d7:9e:5e:31:97:fa:87:b0:b9:10:
         e3:72:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org