Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32332e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=
Subject key identifier:   CF:A5:6F:65:CB:8D:95:49:B8:6D:98:05:26:E0:B4:1D:07:32:5B:35
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       5D387510778510CACFA244C43CC9AE7894E883ED
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32332e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 22 Nov 2024 11:11:47 +0000
ROA not before:           Fri 22 Nov 2024 11:06:47 +0000
ROA not after:            Fri 21 Nov 2025 11:11:47 +0000
asID:                     266440
IP address blocks:        170.82.23.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:38:75:10:77:85:10:ca:cf:a2:44:c4:3c:c9:ae:78:94:e8:83:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:06:47 2024 GMT
            Not After : Nov 21 11:11:47 2025 GMT
        Subject: CN=CFA56F65CB8D9549B86D980526E0B41D07325B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:23:e3:68:90:1f:72:5c:77:16:d1:55:41:
                    b2:df:88:14:9e:30:2a:22:7e:59:d9:bb:e4:31:e9:
                    c6:08:76:ae:20:0d:2a:f7:50:5e:c8:19:22:69:67:
                    1c:77:a9:f8:e6:aa:db:61:f3:7d:b1:eb:18:95:0a:
                    0a:9e:3e:7b:29:f9:24:ee:75:a2:ea:d8:4d:4a:5a:
                    7f:4d:10:e3:0f:25:85:17:97:43:9a:d8:f0:4b:f2:
                    2b:52:6b:ba:cd:91:f3:3f:29:fd:88:3e:9b:31:dc:
                    75:2e:11:83:1d:bc:60:94:05:97:bb:19:64:a5:88:
                    01:d0:37:ff:49:d6:dc:51:05:a2:a5:c3:c6:b9:dc:
                    ef:d2:ba:e3:0c:71:3d:8f:fa:60:3e:0b:d8:27:86:
                    16:95:a1:c8:02:a0:ac:6c:08:31:80:79:2a:7e:a5:
                    dd:08:7d:96:13:35:26:bb:37:b9:c2:1c:b9:fd:e6:
                    92:85:39:ae:b8:e6:d9:68:f5:5a:73:2c:ff:4e:4e:
                    c8:f7:f0:8b:c9:08:d3:e0:b2:79:10:93:08:38:55:
                    10:32:e0:27:a2:fe:7d:6f:f9:6b:df:be:df:e6:d7:
                    ec:d0:2c:89:2d:05:ea:a9:b4:2f:34:9d:81:0e:89:
                    19:1b:2e:3f:b9:ce:1d:e2:18:c9:fc:78:91:7e:b8:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:6F:65:CB:8D:95:49:B8:6D:98:05:26:E0:B4:1D:07:32:5B:35
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32332e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:68:8e:d4:89:91:93:a1:73:c1:e7:75:bb:95:99:c6:81:1a:
         66:50:50:51:ba:ca:b9:51:5f:85:71:8e:a4:8c:d3:3e:46:00:
         90:cb:18:0c:1a:fb:42:77:99:f5:11:4f:70:ae:b5:9e:51:e2:
         b8:5e:cd:25:bd:d7:3a:04:54:fb:8e:c3:2f:45:d5:17:7c:09:
         5f:4c:85:ec:9f:1d:cb:f5:a0:20:8e:18:4e:36:4e:ff:e5:09:
         21:56:b8:17:a8:9d:94:27:6c:46:71:b8:d5:d9:39:4d:e6:00:
         0e:e9:2b:25:98:b3:9d:3a:cb:58:28:23:7f:26:2c:8d:6f:66:
         50:95:3b:43:9f:5e:fd:7a:bb:91:17:f2:04:20:26:3b:32:51:
         0e:b5:9c:9c:3f:c7:c1:6c:8f:b6:d5:58:91:21:60:ba:2c:af:
         9a:74:c1:a7:79:2c:8e:6a:7e:f6:a1:a7:20:db:6e:6d:63:34:
         41:d9:f5:c3:77:98:05:09:6a:f7:05:9e:bd:75:b9:a3:db:06:
         03:4f:04:d7:10:67:a0:aa:4a:48:2c:a0:c7:c9:27:48:2d:bb:
         eb:d6:9d:80:a2:d6:1e:ed:8f:6a:76:27:94:7c:18:7d:e4:74:
         dc:ac:9b:08:b2:10:56:5f:7e:c4:32:3c:02:5b:44:09:c5:5a:
         c1:5b:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org