Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/3137302e38332e3135392e302f32342d3234203d3e20323636343833.roa
File:                     3137302e38332e3135392e302f32342d3234203d3e20323636343833.roa (raw, json)
Hash identifier:          QVL8hVPJHmt0pkKafc+g1K001hpkmPtmBpDOveEoigQ=
Subject key identifier:   1A:14:65:55:7D:4A:39:FA:84:37:16:29:F1:36:7D:2E:78:4A:A9:20
Certificate issuer:       /CN=045C70D44AB71632AB16AA37E88D48AC51F08992
Certificate serial:       395DD41AC0F6F797C69938507FFD4BAB90EA58F4
Authority key identifier: 04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/3137302e38332e3135392e302f32342d3234203d3e20323636343833.roa
Signing time:             Mon 11 Nov 2024 12:22:41 +0000
ROA not before:           Mon 11 Nov 2024 12:17:41 +0000
ROA not after:            Mon 10 Nov 2025 12:22:41 +0000
asID:                     266483
IP address blocks:        170.83.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl
                          rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5d:d4:1a:c0:f6:f7:97:c6:99:38:50:7f:fd:4b:ab:90:ea:58:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045C70D44AB71632AB16AA37E88D48AC51F08992
        Validity
            Not Before: Nov 11 12:17:41 2024 GMT
            Not After : Nov 10 12:22:41 2025 GMT
        Subject: CN=1A1465557D4A39FA84371629F1367D2E784AA920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:4d:e1:1e:95:43:10:4f:ca:51:ab:08:36:
                    11:86:51:89:c6:ea:a5:36:06:2f:34:f0:12:55:22:
                    52:d0:86:cb:1e:27:0a:fd:ba:1a:84:95:68:a1:70:
                    b0:44:84:ea:4d:8f:03:2b:f6:5e:b9:e3:e6:7d:e3:
                    5a:e7:df:1f:00:fc:33:7b:c3:8b:a5:0b:29:e2:06:
                    98:b4:0a:a6:fe:3c:9a:b2:32:50:29:0e:0c:b2:c8:
                    11:b7:e8:58:6d:af:3b:93:49:d8:14:9a:27:4c:0a:
                    f1:02:f8:79:7b:e9:6c:d5:ab:8b:3e:d7:d1:82:bc:
                    df:56:a6:b9:04:f3:a6:e7:c2:0e:e2:42:32:ef:68:
                    b4:42:0d:37:fc:db:80:ca:63:bd:a9:9f:07:14:77:
                    10:d9:86:df:08:39:69:d1:f7:62:28:e4:df:73:de:
                    db:e9:8e:3d:43:75:e9:d7:c8:f6:b1:8e:86:8b:69:
                    4c:51:f6:7c:df:e1:17:de:fc:0f:da:68:f2:ed:3c:
                    77:57:3f:3a:a6:3c:f9:a9:bf:99:cc:1f:6c:0f:3b:
                    52:0a:1f:fa:93:2d:16:21:bd:77:33:9c:78:7c:ea:
                    70:20:9c:02:04:cd:f7:51:4f:f7:ed:70:0d:f0:8c:
                    3e:f2:ae:6f:51:91:ee:1e:fb:4b:5f:23:34:1e:28:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:14:65:55:7D:4A:39:FA:84:37:16:29:F1:36:7D:2E:78:4A:A9:20
            X509v3 Authority Key Identifier:
                keyid:04:5C:70:D4:4A:B7:16:32:AB:16:AA:37:E8:8D:48:AC:51:F0:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/045C70D44AB71632AB16AA37E88D48AC51F08992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/045C70D44AB71632AB16AA37E88D48AC51F08992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvFoodmrvtW77P2dLTPcGuvgjUtAJKjKJBGWPJb41YFZ/0/3137302e38332e3135392e302f32342d3234203d3e20323636343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:f0:51:00:8b:28:a7:3e:59:42:74:0b:c6:fd:98:2f:8c:a4:
         83:25:d6:ff:06:58:71:1a:c6:a8:71:3e:86:c7:16:be:d3:89:
         b0:88:65:41:ed:93:86:0c:2b:15:c6:80:98:a8:75:e6:e4:5c:
         08:93:34:62:3f:59:4e:61:0a:76:ac:f0:60:6f:74:2d:c0:b3:
         e0:10:bb:14:8f:ff:0e:d0:29:f5:d2:76:24:e9:92:dd:3e:a9:
         80:4a:0a:ab:39:13:f4:ca:26:d2:fa:dc:5b:75:a2:8a:e0:09:
         4d:65:14:6b:ff:8b:3e:cf:6c:a2:99:1e:b7:09:98:5b:80:79:
         a0:26:62:3e:56:a3:fa:6a:db:d9:30:c7:70:80:19:34:a9:69:
         0b:6c:bc:66:05:3d:ea:7f:4e:66:84:4e:a0:9b:1d:48:bf:3c:
         a8:5b:44:e8:95:08:ff:4c:c4:8e:01:d5:53:5d:5e:5a:c1:bb:
         e6:a2:4a:75:69:7a:5e:1d:50:e1:d2:f0:f9:12:49:3c:b9:5c:
         f2:82:4d:a1:d6:cf:dc:a9:d5:68:49:bc:d3:35:98:de:9d:b5:
         ef:24:d1:8a:48:bc:2b:69:1a:1f:6b:d9:15:32:57:75:9c:88:
         ab:5d:4d:21:0d:06:3a:4c:21:40:7e:f2:86:a5:cc:8f:1e:c2:
         77:50:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org