Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa
File:                     3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (raw, json)
Hash identifier:          JvNutHO6dlPs37OfGQecm4v/EcpQJ1cEgn/pzXObylA=
Subject key identifier:   D9:23:D4:DD:41:A1:10:69:25:12:8F:70:69:68:9F:1A:47:0F:33:C6
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       7C9DECCEC0B2810FA1EBCC3CD5A59749570BE871
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa
Signing time:             Thu 04 Apr 2024 17:22:35 +0000
ROA not before:           Thu 04 Apr 2024 17:17:35 +0000
ROA not after:            Thu 03 Apr 2025 17:22:35 +0000
asID:                     264993
IP address blocks:        170.84.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9d:ec:ce:c0:b2:81:0f:a1:eb:cc:3c:d5:a5:97:49:57:0b:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Apr  4 17:17:35 2024 GMT
            Not After : Apr  3 17:22:35 2025 GMT
        Subject: CN=D923D4DD41A1106925128F7069689F1A470F33C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:5f:87:1f:e6:54:db:19:39:d3:44:fa:97:
                    a3:f0:d4:d1:40:f3:c4:6e:a2:23:77:96:2e:53:0e:
                    af:59:96:c7:77:2c:97:ad:72:b6:85:0b:9f:5f:e6:
                    c1:37:eb:53:9f:a7:31:e6:f0:f1:6b:ff:71:46:21:
                    9a:89:b7:3c:d5:cf:71:29:72:31:c9:df:13:c4:4d:
                    af:bc:66:c1:4d:fa:dc:37:5b:8d:de:7f:d2:24:8a:
                    dd:d5:02:89:7f:24:7a:c7:bf:25:0f:70:db:c8:e3:
                    89:7f:29:be:5e:67:38:a6:89:13:da:ff:44:80:37:
                    92:fa:66:c0:d2:de:c1:76:81:7d:99:95:71:d2:4f:
                    95:1d:c2:23:1a:1e:e8:07:35:6f:e3:9c:f9:9f:d0:
                    c7:a4:70:2d:94:88:a9:93:6d:43:58:88:50:9c:57:
                    5b:40:f9:68:9c:60:08:ef:ef:3a:32:27:43:89:c5:
                    a4:c9:18:51:d2:45:ef:a1:64:04:3a:bd:44:f1:5c:
                    fa:04:2c:9d:63:c5:7a:41:fa:0d:dd:cf:b7:9c:61:
                    17:ca:50:be:47:0f:34:be:02:47:08:d2:df:a0:a6:
                    32:98:bb:47:da:d0:25:e7:ec:aa:4c:eb:3c:b4:72:
                    66:fc:b6:8f:7a:85:30:87:25:11:af:b6:32:28:df:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:D4:DD:41:A1:10:69:25:12:8F:70:69:68:9F:1A:47:0F:33:C6
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:54:b3:84:9f:25:48:88:35:9a:2e:e4:52:45:85:d7:53:8e:
         97:b0:c4:a5:6e:2f:24:7f:d7:33:21:e5:ec:73:95:93:d2:88:
         25:b3:b9:64:ba:9c:fc:a0:fe:60:9e:d6:15:52:76:8a:93:34:
         3b:1e:99:7f:f1:e7:c5:b2:f6:e2:bf:b8:21:44:43:fd:fa:08:
         86:b2:30:09:08:47:b0:38:19:d1:80:04:68:30:45:3b:7e:eb:
         67:91:47:24:d3:bc:b4:a0:4b:fd:59:ed:7c:04:37:ed:f6:8e:
         0d:62:58:4b:12:75:83:1f:91:0a:c8:10:c2:ef:1e:af:4a:a3:
         4e:2a:e9:af:72:fd:75:aa:80:16:f8:24:0a:30:42:85:c0:f7:
         e4:3f:fa:f2:87:4a:68:c3:5b:78:3b:63:a9:ff:de:ed:e3:e2:
         12:31:82:d9:4d:b7:71:af:12:26:b5:9c:d2:68:8b:f8:ac:47:
         8d:18:d0:62:c8:2a:d9:28:93:50:af:bd:4f:5e:8f:db:90:42:
         e1:6a:16:8a:f9:a0:fb:8e:b0:f2:f6:b6:f6:7e:7d:ac:97:b8:
         fc:ee:dd:81:f2:b9:6c:ec:aa:28:35:b1:12:e1:2a:0f:28:d9:
         c3:ff:c8:31:43:66:b5:a0:65:5e:bb:40:36:b9:a1:02:c8:7d:
         76:6e:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:24 2024 by rpki-client on console-fra.rpki-client.org