Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa
File:                     3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa (raw, json)
Hash identifier:          aRH4TPKok68ptQcOhEwB9kicJTI8a66nxZIGoyBJe0k=
Subject key identifier:   53:80:71:8E:AF:16:6A:B8:DD:56:3D:70:DE:B7:45:1C:16:E5:79:D8
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       07C3D057BBB383FEBE8A6273C890CC2620D48B06
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa
Signing time:             Thu 04 Apr 2024 08:40:47 +0000
ROA not before:           Thu 04 Apr 2024 08:35:47 +0000
ROA not after:            Thu 03 Apr 2025 08:40:47 +0000
asID:                     266514
IP address blocks:        170.244.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:d0:57:bb:b3:83:fe:be:8a:62:73:c8:90:cc:26:20:d4:8b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Apr  4 08:35:47 2024 GMT
            Not After : Apr  3 08:40:47 2025 GMT
        Subject: CN=5380718EAF166AB8DD563D70DEB7451C16E579D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:25:d0:06:90:9c:60:69:11:4c:e4:2c:87:
                    d9:58:68:99:9f:5d:f9:e6:3f:06:c1:aa:1f:32:97:
                    94:ce:2e:31:5c:89:64:12:64:89:c2:e9:c3:0e:f4:
                    02:df:d4:d0:db:ad:af:5b:ad:c4:9b:9b:c4:9f:2e:
                    4e:33:1b:1e:7b:42:e3:35:f4:7c:02:67:a2:c8:ba:
                    92:3a:ef:73:6d:cf:2c:bb:a6:92:5c:59:b3:6c:f9:
                    ce:0c:03:d1:b1:34:e9:a8:7f:bd:84:b5:b4:ab:9e:
                    c0:5e:c8:5f:5b:cd:7e:07:4b:de:84:bd:93:d6:c1:
                    ec:ba:61:41:e8:8b:70:8c:ea:87:c9:2f:27:ea:09:
                    9a:65:21:55:8f:05:c1:45:a7:3d:f8:28:0b:d5:2f:
                    15:c3:0d:2f:6e:14:e6:6a:c0:09:92:66:dd:d7:26:
                    ef:24:43:c5:81:23:b9:18:2e:d4:50:7b:14:83:b6:
                    4e:ee:5c:1e:1b:4f:f9:99:b4:68:b5:13:fc:87:ef:
                    59:78:2e:4d:75:8f:00:49:19:90:1e:86:0b:2f:13:
                    03:c4:a1:27:78:22:20:6f:08:79:2f:b9:b0:66:63:
                    b7:39:1d:12:59:b5:67:7e:2c:3d:5f:4c:f2:81:f3:
                    14:71:9c:e0:a1:04:41:31:d5:d3:1e:c6:4b:8f:e4:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:71:8E:AF:16:6A:B8:DD:56:3D:70:DE:B7:45:1C:16:E5:79:D8
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233322e302f32322d3232203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:94:da:0b:5a:15:c0:ef:8a:38:cb:e7:49:36:e0:cf:ed:b7:
         1c:ae:3e:9d:06:20:66:a3:d5:d6:1d:57:98:15:4d:0a:13:ef:
         a2:fd:1c:ba:56:38:1a:e5:b9:71:7c:c3:1a:c1:56:22:48:29:
         f3:dd:f3:10:4d:53:81:96:9b:97:95:b1:a9:e1:ad:af:93:29:
         68:ca:15:21:0f:8a:d4:e9:cd:dd:b6:97:bd:90:7d:4b:d6:60:
         99:65:73:d7:72:23:a4:c3:fb:5e:2f:e8:f8:35:c8:e8:46:e2:
         9a:4e:41:a3:97:02:07:0e:e8:de:15:f8:36:f2:8d:a2:4e:d9:
         4a:ac:fd:9d:97:03:de:65:36:2f:c3:65:aa:04:25:f0:6b:d2:
         b8:2b:c9:82:74:f7:83:29:70:6f:d1:d8:3d:83:41:3b:27:41:
         4a:d6:f9:1e:2c:ce:4d:97:76:d0:e5:76:ad:97:35:f8:40:0f:
         ad:5d:fe:85:64:89:49:7b:10:47:0c:00:5f:f6:17:e9:b1:3a:
         3d:71:17:2c:e4:81:95:c5:aa:50:be:e7:a7:d0:98:9e:04:54:
         17:ad:45:32:02:ee:65:e0:8d:ed:a0:d4:b5:22:88:a5:3c:ff:
         0a:e7:ce:6f:09:fe:32:ca:1b:70:fd:d7:5d:f7:85:aa:12:95:
         e7:80:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:45 2024 by rpki-client on console-fra.rpki-client.org