Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32312e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=
Subject key identifier:   28:99:B6:6E:30:90:FB:D4:F0:99:B3:F5:7B:E4:FE:9F:33:A8:F1:2C
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       06ADEDE2571801A9AC154E49EF96434A11E3A726
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32312e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 22 Nov 2024 11:11:06 +0000
ROA not before:           Fri 22 Nov 2024 11:06:06 +0000
ROA not after:            Fri 21 Nov 2025 11:11:06 +0000
asID:                     266440
IP address blocks:        170.82.21.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ad:ed:e2:57:18:01:a9:ac:15:4e:49:ef:96:43:4a:11:e3:a7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:06:06 2024 GMT
            Not After : Nov 21 11:11:06 2025 GMT
        Subject: CN=2899B66E3090FBD4F099B3F57BE4FE9F33A8F12C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:08:1e:2d:dc:c3:ba:19:33:e2:4f:07:d7:
                    76:bd:47:34:9a:bc:3a:dc:b1:da:59:a8:32:5d:66:
                    bb:b2:31:9d:39:7b:78:24:e6:30:61:51:4a:49:d5:
                    74:0e:c7:40:1c:e2:a6:26:0f:15:f3:ae:ec:b9:b2:
                    12:91:05:0f:e8:7c:73:c2:69:2a:ac:24:e2:86:22:
                    0b:5b:fc:e3:d8:25:c3:63:64:fd:62:51:3c:8b:20:
                    4c:b1:2c:3c:e4:50:54:2a:7d:8d:1d:db:a3:11:d5:
                    aa:76:31:78:f1:6c:c0:3c:2a:8e:75:41:f7:d7:36:
                    0e:ed:15:9e:5e:9a:75:f7:d3:3c:61:ec:4d:4a:9f:
                    c0:68:66:5c:7e:e5:da:dc:17:99:d0:d0:65:11:6e:
                    ac:68:52:37:73:63:4f:fe:67:0c:e6:e8:35:89:7c:
                    98:32:d7:44:53:35:7a:5e:f3:bc:e7:00:5c:fd:6a:
                    da:3e:88:1b:d3:33:f0:66:8b:57:e6:59:c8:78:91:
                    34:65:5e:6d:40:bd:67:6c:5c:d1:06:3e:ed:f7:4d:
                    77:b2:7a:3f:fb:b7:da:6e:01:91:48:f1:94:56:8b:
                    e6:d9:95:6c:9f:65:5f:da:d0:a8:ef:32:75:32:45:
                    aa:6b:fb:3f:2b:c0:85:53:e0:3e:f3:00:77:57:14:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:B6:6E:30:90:FB:D4:F0:99:B3:F5:7B:E4:FE:9F:33:A8:F1:2C
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32312e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:cf:b2:5d:11:55:c1:54:97:b3:0a:d6:ac:4a:15:da:ef:
         4f:36:05:70:9c:b1:5c:73:f6:31:83:e8:f0:35:f9:74:ca:75:
         a1:41:65:ad:2f:e7:d8:7a:45:d5:5c:20:c9:bf:2e:6d:6f:70:
         30:5a:7b:ae:e2:85:54:c4:67:bc:ae:aa:54:75:86:2b:f8:7e:
         02:f9:ff:79:89:9b:28:83:e4:37:6c:ef:e3:7b:04:26:be:82:
         76:6b:50:99:e2:5b:67:ea:10:1d:d8:25:1e:e1:42:3a:3c:e5:
         b8:f8:aa:af:f4:7d:61:00:54:9f:c7:ed:75:cf:e8:ba:38:71:
         e1:6c:55:38:43:a4:c4:55:9b:81:d1:8b:60:f0:eb:fd:58:f5:
         d2:55:b9:38:82:32:62:4d:0e:3a:80:a5:5f:f2:d5:a8:7e:2f:
         fb:dc:4f:c4:27:c1:0d:ff:bb:66:ee:70:1b:df:fa:13:cb:a2:
         a9:34:22:03:57:0f:8e:a5:e8:68:b0:59:88:d2:b1:45:3d:34:
         07:2d:85:3c:aa:3d:e4:0f:55:a9:90:4d:38:f4:eb:11:63:bf:
         89:c0:08:e6:d0:06:b2:f2:f2:18:5d:97:6e:54:f7:7e:9b:48:
         bc:f9:00:09:3c:97:ba:4d:8c:59:b4:a7:dd:25:cb:2a:e9:d8:
         a1:e9:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org