Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          0cVG1VAi6edaihtQhMjjdaASYgiKfSPCNGtQU8r0l04=
Subject key identifier:   A7:54:46:BD:96:24:D5:1A:15:86:CF:AF:97:8F:73:7B:9F:E6:2B:D6
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       47C72FC0F8C581C1550448242D8D28AF2C517F4D
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa
Signing time:             Thu 04 Apr 2024 04:15:08 +0000
ROA not before:           Thu 04 Apr 2024 04:10:08 +0000
ROA not after:            Thu 03 Apr 2025 04:15:08 +0000
asID:                     266448
IP address blocks:        170.82.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c7:2f:c0:f8:c5:81:c1:55:04:48:24:2d:8d:28:af:2c:51:7f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Apr  4 04:10:08 2024 GMT
            Not After : Apr  3 04:15:08 2025 GMT
        Subject: CN=A75446BD9624D51A1586CFAF978F737B9FE62BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:51:96:f9:28:b7:67:d4:72:4d:fb:ca:3a:
                    24:e3:07:9c:de:1c:29:43:fe:83:71:67:f2:bb:8e:
                    30:8e:f9:55:f4:91:53:e0:30:e3:d4:80:c9:79:75:
                    ed:f4:2e:6f:a3:94:da:45:33:a1:2e:33:2a:70:af:
                    19:d5:cd:01:db:f1:8d:03:7b:96:be:2c:4b:f8:6b:
                    ec:a2:81:6e:d7:50:65:3f:c3:53:65:16:64:af:c9:
                    d3:2b:9a:e2:e1:ef:4f:d5:27:c4:1c:ce:8e:8a:ec:
                    49:fb:20:4c:ea:6c:2a:c6:ef:b1:e0:b4:13:85:60:
                    c3:00:43:00:7b:79:87:ff:f1:da:33:02:0e:d1:fb:
                    32:23:6f:28:39:17:88:a0:a2:0e:00:ad:eb:e2:2e:
                    bd:a8:70:7d:71:d8:ee:08:ab:06:5c:67:dc:17:04:
                    10:ed:fc:6f:fb:03:42:ea:ba:d8:bc:61:df:dd:3c:
                    6f:92:aa:e8:2c:58:d0:2b:b4:19:b3:39:ad:c1:ae:
                    8b:0d:75:a0:ef:7d:4a:c0:29:31:07:d9:3c:66:cd:
                    d6:19:68:d3:24:92:e0:c0:6b:d3:be:67:3b:15:00:
                    a6:7d:63:94:b8:2b:df:4c:82:35:54:7c:60:72:96:
                    6c:2a:92:17:8b:de:58:72:8a:2f:f8:8c:5a:1d:58:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:54:46:BD:96:24:D5:1A:15:86:CF:AF:97:8F:73:7B:9F:E6:2B:D6
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:da:f5:33:2f:8f:bc:a5:76:bb:57:8c:f6:0c:d4:b1:94:13:
         4a:f5:a3:02:fc:75:e6:f7:d1:5c:3e:88:4c:6c:4d:a3:35:b2:
         57:23:88:80:66:bc:27:9a:4d:31:41:25:a1:9a:b1:26:e7:22:
         3c:c0:8f:53:a8:4c:f1:eb:c7:81:7c:04:87:c3:82:19:d8:f5:
         22:22:98:45:26:6b:e8:a3:02:a8:05:71:aa:f5:0d:d2:8c:1e:
         8c:cd:b7:85:35:f8:0e:64:6a:3e:8b:ca:89:2f:75:f4:1d:14:
         ce:b5:e5:10:98:bd:42:31:e0:76:90:57:8d:38:0a:56:3f:bb:
         03:9d:44:6d:e3:3f:43:11:7f:6c:3f:c2:20:e8:b2:8f:8e:b7:
         7d:28:ba:91:a6:dc:87:02:34:c4:ea:30:1c:27:37:fd:03:2e:
         bb:79:f2:d8:4a:e0:05:40:d8:b1:f3:61:fe:f2:b6:e6:7f:8b:
         12:39:bf:7d:63:8c:f5:4b:b5:f7:b1:3a:35:a1:f3:b4:98:63:
         d2:3f:b2:d2:ce:c3:87:0d:3e:d4:a2:42:84:6b:23:0d:7f:f0:
         48:a1:5a:36:a4:07:62:a9:d0:70:9d:a8:86:75:4a:98:39:bd:
         a6:98:c4:ee:98:8b:21:ab:9f:a4:37:a4:e2:24:12:71:9a:21:
         6f:db:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org