Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa
File:                     3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (raw, json)
Hash identifier:          olUPs7ys3HmcdKF0q1GTWGfzA2e7urPFD4dxfUjurKI=
Subject key identifier:   92:02:1A:9D:DD:3B:AC:61:E6:BF:4A:B9:29:AA:FB:09:F9:D6:C6:15
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       1A90585FC16FDDD153B402957748EBEE4CB3828A
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa
Signing time:             Wed 03 Apr 2024 18:32:35 +0000
ROA not before:           Wed 03 Apr 2024 18:27:35 +0000
ROA not after:            Wed 02 Apr 2025 18:32:35 +0000
asID:                     265100
IP address blocks:        170.254.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:90:58:5f:c1:6f:dd:d1:53:b4:02:95:77:48:eb:ee:4c:b3:82:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Apr  3 18:27:35 2024 GMT
            Not After : Apr  2 18:32:35 2025 GMT
        Subject: CN=92021A9DDD3BAC61E6BF4AB929AAFB09F9D6C615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:66:e3:bb:0c:6f:51:db:7f:1c:13:1f:74:
                    89:10:b9:2f:ef:d1:fd:ef:8f:da:bf:0a:41:00:5b:
                    85:3c:71:31:f3:9e:7c:03:7d:c3:a4:b7:fb:80:ca:
                    7a:51:7b:12:e1:56:5f:d9:bc:ea:12:6d:b8:a8:f3:
                    37:29:05:0a:e4:38:bd:7e:76:70:98:a8:4c:ef:d9:
                    2f:56:40:7f:b8:86:b0:58:28:97:3f:31:bc:dc:cf:
                    8d:ba:11:10:48:7b:16:4c:2c:c2:24:09:0c:9a:0f:
                    b9:78:b7:a4:e3:60:f9:2a:13:26:e8:dd:bb:85:d6:
                    ca:8e:ad:de:b2:3b:d8:8b:fa:9a:7c:a6:25:31:10:
                    00:b0:53:cb:9c:4b:ed:f3:e9:f6:26:dd:13:42:f2:
                    35:9f:b3:8f:a5:4e:6b:63:b0:3c:16:31:e7:fb:2e:
                    f7:f2:d8:90:39:8c:f4:85:e9:ef:df:89:b8:67:fd:
                    e4:b5:06:bc:4e:c6:ac:07:08:e0:37:58:80:b0:74:
                    42:e0:6c:41:c0:9e:25:92:5a:f4:09:8c:b3:da:4b:
                    08:da:37:01:e3:a6:08:8c:85:f4:29:83:d7:a9:bd:
                    fd:c7:4d:58:5d:3b:e4:6f:cc:82:5e:f8:41:d4:d1:
                    0d:7a:4d:c0:b3:53:04:56:1d:fc:34:78:0b:2f:0f:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:02:1A:9D:DD:3B:AC:61:E6:BF:4A:B9:29:AA:FB:09:F9:D6:C6:15
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:31:b4:23:db:28:bb:ec:f5:0f:38:67:d1:36:71:79:c7:c5:
         da:2f:35:11:b8:67:7f:bc:60:f5:c2:a1:bf:73:c6:26:a1:2f:
         e0:fa:fb:ed:fc:f2:a1:c0:8b:b0:da:f3:b8:e0:1c:3f:b3:c3:
         42:a5:13:ff:a2:3b:fc:fe:a6:f3:40:67:cb:e9:d3:fa:1c:71:
         dc:3b:a0:5d:31:3e:c8:77:b1:41:09:20:99:c1:41:b8:b0:2c:
         aa:26:76:57:44:de:9d:fd:47:c9:e3:ad:f8:a2:71:39:85:98:
         cf:9a:de:fe:c9:53:ef:2a:d9:f2:b0:f3:4c:2f:a9:fa:65:65:
         51:f5:f5:aa:4f:1e:76:e9:e9:47:27:c5:79:84:f4:d2:1c:d3:
         b1:d8:23:2a:30:cf:90:4e:da:29:8a:80:74:fa:01:4e:4a:d4:
         44:fa:c6:02:cc:aa:10:90:de:88:90:10:32:ac:24:9b:2a:39:
         24:69:01:7d:b5:3e:94:9b:1d:bd:87:d1:e4:ac:fa:05:f1:9c:
         5a:09:90:7d:0a:83:12:c3:2f:7e:7c:19:e4:7c:0a:cd:07:72:
         92:21:67:0e:15:7d:e1:1f:c1:0a:2e:dc:ff:e5:1c:c1:a9:96:
         13:37:9f:88:17:d6:01:00:91:9d:63:82:97:c8:c2:97:de:e4:
         ed:bc:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org