Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa
File:                     3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          YILAUx4plUH/ABpgtURNmkfcPjd0iSMlhbL2Lkzvf2A=
Subject key identifier:   84:9E:41:E8:BD:0D:CF:27:58:E0:D3:E1:03:DF:F7:B7:24:F8:B7:76
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       2C0725B0388743E15D73708770342C9B36D3FD95
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:29:11 +0000
ROA not before:           Fri 18 Oct 2024 11:24:11 +0000
ROA not after:            Fri 17 Oct 2025 11:29:11 +0000
asID:                     263338
IP address blocks:        170.78.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:07:25:b0:38:87:43:e1:5d:73:70:87:70:34:2c:9b:36:d3:fd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:24:11 2024 GMT
            Not After : Oct 17 11:29:11 2025 GMT
        Subject: CN=849E41E8BD0DCF2758E0D3E103DFF7B724F8B776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:20:ae:29:3e:1c:3e:e3:ac:a5:99:3f:d2:
                    d2:d4:61:0b:3d:30:a1:b3:24:fb:1d:d8:56:61:94:
                    e7:dc:d9:dc:4c:20:a4:3d:92:fe:38:6c:45:e5:f7:
                    68:e3:22:34:2d:73:81:3d:d4:25:8f:aa:8c:05:87:
                    27:bd:9a:32:6a:f9:30:01:2b:9d:75:3c:5b:e4:dd:
                    a1:a6:16:ec:f1:2c:89:9a:b1:a7:24:d8:d1:69:27:
                    97:49:e8:ec:5e:03:81:38:46:89:96:17:6e:34:04:
                    6d:f0:9c:44:38:3c:73:99:42:54:0d:a8:ba:21:0b:
                    ea:16:6f:77:cc:81:72:77:40:88:ba:69:b0:de:54:
                    c0:c2:32:df:16:cd:c3:04:45:d5:6e:7a:77:0e:a8:
                    27:2e:3e:31:f0:51:d7:b1:eb:e7:46:ae:93:69:7e:
                    ef:89:8c:ab:b9:f5:d9:cf:6a:84:68:58:0a:63:d8:
                    fa:88:40:ba:7d:04:97:45:e7:1b:58:c7:22:c3:aa:
                    e4:07:a3:7a:20:dd:b9:6e:30:0d:1a:6c:6a:25:62:
                    b9:1c:92:88:56:74:9b:ef:9a:61:06:0e:0c:a8:fe:
                    20:4a:09:36:3f:bd:85:aa:e4:d3:fe:4b:5b:e0:48:
                    f9:9f:58:e0:d9:aa:8d:37:f3:00:31:57:a4:dc:cc:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:41:E8:BD:0D:CF:27:58:E0:D3:E1:03:DF:F7:B7:24:F8:B7:76
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:e4:18:62:8a:ed:31:31:af:30:25:18:f3:32:22:9f:9e:
         0d:5e:2c:d8:c9:9b:6e:a8:63:c9:8e:29:09:a1:11:d9:60:56:
         97:b8:35:d6:81:db:16:cc:11:d3:64:51:60:64:4a:1e:5e:b4:
         d4:90:44:cd:b3:15:d3:e2:f3:ed:1e:66:64:99:ca:3d:4b:f2:
         8f:4b:f1:78:1d:05:5a:2e:eb:a9:c6:d7:5c:85:bf:6b:68:6e:
         c5:47:d2:d3:b8:e8:ad:a4:3b:37:37:84:ae:57:14:9e:1f:51:
         1b:70:3c:e1:fe:f5:66:a9:c5:2b:e7:cf:68:3b:a7:ec:fc:9c:
         02:3d:4e:9c:a7:97:11:17:44:47:db:76:6d:75:5c:b6:59:43:
         fa:6a:a2:0f:f3:89:fb:f2:8c:d1:58:bc:b8:c6:49:fa:cd:d8:
         38:c6:fa:83:7d:8c:e3:68:67:8d:47:ac:d0:34:ea:75:67:57:
         31:94:3b:4c:e7:ba:b5:85:ae:f7:54:9a:37:ee:27:02:cc:e0:
         c0:04:0f:2f:83:14:f7:98:c8:58:49:2d:58:ae:e5:5e:e6:02:
         66:ef:78:0c:11:62:b3:7f:9a:72:76:6a:6d:01:56:31:c0:0d:
         f4:5d:46:cf:05:b7:ca:4c:df:25:fb:8d:1f:e0:ed:45:4d:94:
         30:9e:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:17 2024 by rpki-client on console-ams.rpki-client.org