Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/3137302e302e36382e302f32322d3332203d3e20323634393633.roa
File:                     3137302e302e36382e302f32322d3332203d3e20323634393633.roa (raw, json)
Hash identifier:          F0NweVL9JT1PH4P4nU3SBVhyJI6QMp7yhppzgl+J06o=
Subject key identifier:   88:25:26:38:53:83:28:C0:89:55:67:C1:AD:76:41:C2:A7:D5:71:BC
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       416FF6B35BBD353F20D55ADB1F281ACA36AE37C8
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/3137302e302e36382e302f32322d3332203d3e20323634393633.roa
Signing time:             Thu 04 Apr 2024 17:15:45 +0000
ROA not before:           Thu 04 Apr 2024 17:10:45 +0000
ROA not after:            Thu 03 Apr 2025 17:15:45 +0000
asID:                     264963
IP address blocks:        170.0.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6f:f6:b3:5b:bd:35:3f:20:d5:5a:db:1f:28:1a:ca:36:ae:37:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Apr  4 17:10:45 2024 GMT
            Not After : Apr  3 17:15:45 2025 GMT
        Subject: CN=88252638538328C0895567C1AD7641C2A7D571BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:8d:23:e7:95:c3:bf:a5:9d:a3:34:8b:3e:
                    75:71:94:5f:6c:af:01:41:bd:a9:7c:ce:0a:84:31:
                    55:a6:f0:8c:8c:11:46:52:f4:f4:79:f7:e1:82:a2:
                    7e:01:83:71:c8:1c:ba:65:d8:47:db:f6:1c:7b:83:
                    99:25:4e:fd:03:f8:c9:a4:2d:e0:aa:29:9b:f4:20:
                    69:30:87:df:af:48:7e:6d:f0:ce:94:f6:4f:d7:d3:
                    23:76:f5:f7:59:64:21:9c:50:a1:b8:da:8f:00:af:
                    21:e9:ca:01:02:71:82:6f:a7:7e:d5:d1:89:cc:41:
                    dc:fd:1b:0c:e1:1c:98:f2:45:86:74:97:92:d9:97:
                    55:0f:fa:11:d3:41:fc:01:2f:e1:c8:2d:4c:09:3c:
                    8f:41:c7:ba:29:d2:37:fd:6c:f8:59:99:d9:12:38:
                    c0:bc:62:5b:e4:44:16:f0:58:21:17:3c:9b:e9:3c:
                    d9:6c:d9:f0:a3:6f:2a:d5:3b:25:0a:6b:18:f4:ad:
                    9d:82:1a:0c:0f:a5:41:2e:3a:89:fd:17:f8:ad:e3:
                    23:67:c6:83:1e:ae:ec:1b:0b:54:d0:e1:b8:7c:ba:
                    a9:2c:21:33:62:b4:f6:55:0f:76:01:3d:21:a1:47:
                    3f:d7:aa:df:a0:40:a3:3c:5c:2d:cc:a9:03:29:9b:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:26:38:53:83:28:C0:89:55:67:C1:AD:76:41:C2:A7:D5:71:BC
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/3137302e302e36382e302f32322d3332203d3e20323634393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:88:9c:e6:1b:5c:ff:33:d7:6f:36:bb:fd:f8:ae:b2:ed:2c:
         56:74:9b:21:39:46:a2:91:4d:41:e4:c1:08:62:c9:ff:0b:66:
         1f:8f:fa:7d:b1:19:71:91:45:34:4f:da:57:fe:7d:27:3a:41:
         74:f4:08:13:b5:06:b4:f7:3c:9c:c6:88:ca:67:d4:2a:e8:61:
         06:0b:93:52:e9:86:53:b1:1a:4d:c1:4f:9e:cd:a4:ac:47:ec:
         85:d6:63:f7:03:e0:0b:f7:52:d9:a9:d4:82:70:39:27:f4:c5:
         dd:6e:1b:ab:d0:05:02:1c:e7:06:13:e6:34:69:20:01:cf:dd:
         ca:6b:1c:37:ad:c0:85:63:af:1a:d2:f1:cf:9c:0d:1c:6e:1d:
         57:ad:e6:9a:99:f3:48:b3:1c:5d:77:22:67:0f:77:97:ec:8a:
         9b:de:4e:ae:7d:9c:dd:9e:39:11:9a:e5:04:5e:ba:f9:31:f7:
         a3:32:36:d8:f3:ba:81:44:88:98:17:01:f9:3a:4e:e6:4a:1c:
         e7:ee:43:6d:e9:e9:92:6b:13:4d:99:d3:81:83:b4:a4:f5:55:
         44:51:98:fb:c7:be:25:fd:7b:ea:4a:ed:14:de:03:01:95:73:
         03:53:3c:f4:ef:5d:50:4f:b6:2c:71:d7:a0:35:26:e1:39:84:
         ad:47:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:44 2024 by rpki-client on console-ams.rpki-client.org