Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=
Subject key identifier:   90:39:CA:20:EC:2E:E1:C9:03:9C:A0:B4:15:D8:B6:57:39:65:C4:7E
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       6EA8137F888967BCA193A1C9547F310C7ECBC227
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 22 Nov 2024 11:10:52 +0000
ROA not before:           Fri 22 Nov 2024 11:05:52 +0000
ROA not after:            Fri 21 Nov 2025 11:10:52 +0000
asID:                     266440
IP address blocks:        170.82.20.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a8:13:7f:88:89:67:bc:a1:93:a1:c9:54:7f:31:0c:7e:cb:c2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:05:52 2024 GMT
            Not After : Nov 21 11:10:52 2025 GMT
        Subject: CN=9039CA20EC2EE1C9039CA0B415D8B6573965C47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:d4:9e:4e:ef:21:c6:c5:5f:2f:29:00:73:
                    63:3f:c9:43:4b:a5:3c:db:e3:a4:72:d6:af:d0:8b:
                    4a:f0:cc:0a:f1:77:e5:29:e0:d6:cb:73:9f:3d:b2:
                    3b:c8:c2:a9:a9:8d:45:cf:40:86:67:7f:8b:0a:77:
                    80:66:1c:ad:e0:f8:96:09:b5:9c:e1:98:8d:f3:95:
                    d5:e1:5c:c0:c3:c6:90:4d:23:b8:de:43:49:27:59:
                    fa:96:07:fc:fa:26:87:3f:e0:b9:24:94:d0:71:a2:
                    0c:c1:d6:0e:f9:19:5b:19:27:5a:cb:f0:78:3a:cd:
                    53:b8:fe:64:f4:ab:cb:0f:e3:33:5b:cc:7a:b1:94:
                    89:3f:b6:22:9b:81:ec:4f:3e:66:76:b5:38:77:f3:
                    15:5a:05:9d:b8:c1:3f:e3:e1:22:db:15:0f:e8:cb:
                    d7:a7:f9:6e:a4:21:60:45:cb:a6:33:d2:52:8e:b3:
                    74:d8:44:c3:a0:f8:4a:59:36:43:89:0b:8b:ff:2f:
                    e3:1d:95:de:7f:03:24:77:4d:19:af:ac:b4:28:62:
                    03:92:7e:a7:4f:2a:33:a6:47:07:04:ca:cf:7b:0f:
                    d9:0a:cd:a6:9c:63:45:10:0f:d8:46:45:43:ac:6d:
                    36:79:c5:a6:ac:2f:fe:a1:1d:0a:2b:d4:ce:c8:96:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:39:CA:20:EC:2E:E1:C9:03:9C:A0:B4:15:D8:B6:57:39:65:C4:7E
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:75:ad:63:f0:73:c1:ac:fa:14:73:60:45:8a:fa:d4:27:
         10:8f:56:2e:14:b5:f1:99:98:c7:ed:1b:ee:de:58:5f:f5:f1:
         5d:b7:65:72:9a:5f:4d:51:7a:be:c4:c2:20:67:80:1a:b2:8a:
         22:93:79:60:8e:97:d2:77:d2:92:5d:19:35:16:14:65:cb:b0:
         69:3c:3a:d2:e4:1f:ca:08:b2:1e:27:46:ce:bf:f4:bb:49:9e:
         61:d5:81:a8:13:9f:dd:cc:bf:93:18:a4:40:9f:5b:27:8e:64:
         9c:39:b2:6e:a3:39:c4:3f:95:e1:25:83:02:38:62:e7:cb:0a:
         4a:d5:bb:f3:4d:3a:4a:33:67:10:15:05:46:f6:62:1d:15:bd:
         b7:61:79:54:4f:8a:e7:4b:a3:05:b6:cf:84:a1:37:e5:88:11:
         c9:3e:a4:3d:96:26:77:72:86:b0:d7:02:a3:36:af:90:b1:0d:
         b9:96:da:ee:e6:34:39:90:9a:43:d4:5f:20:6d:02:f6:85:2f:
         eb:f8:ea:a6:c1:80:21:0e:6b:57:a5:97:ff:0a:76:64:5e:11:
         46:7e:3a:f9:b9:76:7c:5b:82:88:ed:ed:75:57:b1:a7:76:60:
         3a:f0:cf:c5:23:99:d8:5c:ad:ba:ba:ef:70:d1:57:c5:22:0b:
         43:dc:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org