Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=
Subject key identifier:   81:53:9C:A3:A1:34:EF:F1:29:D3:2A:0F:AA:37:24:6A:B7:23:3B:43
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       083C5AB94CDF7D143AED022851FDA2E330E8D851
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 22 Nov 2024 11:11:24 +0000
ROA not before:           Fri 22 Nov 2024 11:06:24 +0000
ROA not after:            Fri 21 Nov 2025 11:11:24 +0000
asID:                     266440
IP address blocks:        170.82.22.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3c:5a:b9:4c:df:7d:14:3a:ed:02:28:51:fd:a2:e3:30:e8:d8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:06:24 2024 GMT
            Not After : Nov 21 11:11:24 2025 GMT
        Subject: CN=81539CA3A134EFF129D32A0FAA37246AB7233B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:a9:f3:dc:b5:0e:d2:cf:64:f2:50:e0:c1:
                    59:ab:22:43:8a:c2:d3:23:b9:26:f3:ef:90:13:27:
                    c3:8d:c0:d2:b3:47:3f:13:31:37:d8:fc:cc:06:1f:
                    35:71:fd:cd:d3:21:7b:61:00:eb:4b:13:ee:55:d0:
                    2d:70:87:a4:5e:7f:7f:ea:40:74:31:99:96:02:37:
                    e4:fd:75:4c:81:a5:dd:f1:a3:26:7f:8f:93:a3:ec:
                    cd:86:cc:f7:d0:00:8a:ef:17:20:a9:3a:1b:31:bf:
                    82:43:49:4e:76:27:a5:09:8f:88:f9:51:bb:b9:53:
                    1c:21:fe:6c:ad:17:e7:0f:0d:52:3f:7f:51:ef:e3:
                    cf:5d:ca:31:31:b2:df:a7:98:27:5c:b6:0e:10:f9:
                    0d:f7:74:08:ad:fb:b2:ae:dc:7f:1c:7e:aa:24:f9:
                    95:ff:8f:f0:35:9c:4c:4d:61:23:57:05:c9:91:bc:
                    7b:ea:35:18:4b:3b:0d:1e:d8:be:78:3c:b4:12:e1:
                    ba:72:a8:6d:45:e8:f6:ce:14:0c:a9:d2:81:ca:9e:
                    5a:0d:1a:48:f7:9a:ab:10:b7:ac:18:44:b5:5c:76:
                    11:0d:a0:f6:0a:dc:db:5b:09:3c:15:49:e3:32:37:
                    67:99:fd:f8:05:33:1c:f3:07:f3:64:87:cf:a7:3a:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:53:9C:A3:A1:34:EF:F1:29:D3:2A:0F:AA:37:24:6A:B7:23:3B:43
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:95:89:76:a1:c7:3f:39:3b:b4:f6:79:76:03:f3:cd:bf:
         d5:6d:7a:b0:cc:1f:6d:a5:c8:45:59:d8:91:a0:41:41:d8:68:
         44:e1:5a:74:13:ff:26:b6:79:b4:8b:81:af:d6:ed:75:a9:a6:
         a9:69:e7:2e:06:00:6f:d8:5a:ad:17:6b:35:22:42:74:e4:cc:
         ac:ba:38:6b:e9:5d:7d:bf:1e:57:dc:4b:c2:82:ad:7f:78:71:
         8b:07:ee:e3:4b:55:92:0c:2e:be:6c:2b:eb:5d:3d:a3:70:3b:
         7e:34:be:ca:0a:74:65:7c:0a:7d:b0:bc:f7:0f:ba:38:bc:9f:
         4f:fe:09:2f:10:cb:a4:9b:0c:c9:1d:1c:c5:1d:35:c0:67:97:
         58:1e:7a:4a:88:fa:ff:ef:30:f4:c9:5c:c1:f5:c3:a4:cf:07:
         d9:ef:f7:bc:4a:a1:d3:78:b7:67:61:67:4e:59:64:ef:b3:ab:
         66:60:6a:88:28:7a:f4:e8:b1:2a:ca:04:fe:96:2b:67:20:60:
         51:79:38:b6:4f:74:55:85:56:ad:0d:13:b1:ab:30:a6:16:d3:
         56:55:2d:1d:fc:c2:77:3b:69:f1:51:6c:3e:85:89:9b:bb:37:
         18:4d:ac:d2:d5:44:b1:86:90:82:29:40:48:2b:b7:eb:af:ea:
         47:d8:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org