Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa
File:                     3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa (raw, json)
Hash identifier:          yJE7wGgwBe4FSUge8qKRX3+9hx/QzxE0E71/hHCwkTg=
Subject key identifier:   48:3E:CB:6D:CA:24:0B:46:EB:16:84:A6:4D:DB:A1:66:06:75:8E:BF
Certificate issuer:       /CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
Certificate serial:       1F6DBDC2ECF1B65CAC3C0F45022B52EF2B04CF79
Authority key identifier: 74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa
Signing time:             Thu 04 Apr 2024 07:29:45 +0000
ROA not before:           Thu 04 Apr 2024 07:24:45 +0000
ROA not after:            Thu 03 Apr 2025 07:29:45 +0000
asID:                     262880
IP address blocks:        170.82.206.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl
                          rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6d:bd:c2:ec:f1:b6:5c:ac:3c:0f:45:02:2b:52:ef:2b:04:cf:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
        Validity
            Not Before: Apr  4 07:24:45 2024 GMT
            Not After : Apr  3 07:29:45 2025 GMT
        Subject: CN=483ECB6DCA240B46EB1684A64DDBA16606758EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:e1:22:0b:f7:ba:2e:68:d2:ab:1e:d3:ff:
                    ae:43:ce:dd:49:c9:b0:6f:87:0a:92:96:95:40:fc:
                    66:96:94:b2:c6:08:55:f0:6e:51:a4:6f:97:39:ca:
                    c3:86:3f:97:b4:0a:43:da:66:30:bc:a4:4c:c9:71:
                    33:97:eb:6a:35:8a:7d:12:ae:1d:2e:75:6c:d2:02:
                    c5:3f:2b:3a:34:f8:e1:18:7a:b1:f0:ee:1e:31:33:
                    5b:a7:33:e7:21:2c:29:4b:7f:ff:87:e3:11:2f:03:
                    51:a1:7b:b9:fe:cd:fe:8d:8a:5c:67:84:b8:41:9d:
                    82:0a:bc:dd:2c:bf:01:e0:05:85:9e:af:37:f7:bd:
                    35:72:2b:6a:09:66:36:4d:a9:97:9a:9b:5f:23:f3:
                    b4:67:c6:cd:45:88:2f:34:30:05:05:20:4e:a7:a5:
                    14:3a:43:fd:24:5d:d7:a5:78:28:ec:32:96:63:8c:
                    16:69:af:35:ed:da:6d:55:dd:df:c0:16:b1:ef:31:
                    30:e6:e9:83:ff:8f:72:7c:47:cf:7b:b0:86:64:40:
                    04:65:34:21:10:bc:e3:6a:00:e4:fa:c8:f8:b7:a5:
                    c4:eb:6a:27:d9:19:c8:48:27:eb:6c:88:e1:27:ef:
                    58:e3:f5:28:c6:a0:5d:9d:de:fb:cd:5d:72:25:68:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:CB:6D:CA:24:0B:46:EB:16:84:A6:4D:DB:A1:66:06:75:8E:BF
            X509v3 Authority Key Identifier:
                keyid:74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:6e:65:57:3b:02:e0:17:1d:e6:95:31:5d:d0:70:89:c8:
         c4:f9:40:16:ca:6d:3c:90:b2:a6:8a:9f:75:34:03:51:62:cf:
         17:3f:01:ff:83:27:cd:58:50:8c:09:52:b2:47:57:a2:a5:ba:
         6c:82:78:41:5a:5e:d8:de:75:3d:35:a9:44:7e:c6:17:fc:62:
         72:2c:d0:71:05:98:31:4a:6c:7a:cb:ea:17:80:5d:db:09:f6:
         d5:0e:90:46:58:19:73:d8:de:d2:65:49:3f:cf:48:21:bb:16:
         d3:66:b0:93:da:57:53:cb:ad:a5:f0:42:54:58:96:07:10:8e:
         e7:fd:7c:02:73:a8:c9:91:f5:57:85:09:25:84:b1:b4:79:01:
         80:2f:55:4e:3c:de:06:db:11:c4:48:bd:33:34:a1:91:5e:c7:
         45:6d:32:0a:69:c8:3e:11:88:63:e9:c2:e4:6e:8a:19:5a:45:
         55:97:7b:bc:94:06:39:b3:a3:9c:e9:b5:dc:e3:0f:46:d0:8b:
         0a:16:b8:b1:51:c1:f0:17:54:1c:9c:11:fa:e8:73:e5:8b:3d:
         c6:fb:6a:cf:26:9e:48:02:50:3d:4e:80:a1:37:9e:36:c8:95:
         ce:f9:2e:d1:a3:bc:88:0c:78:dc:c6:fd:c0:2a:af:1d:78:cf:
         a5:90:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:58 2024 by rpki-client on console-fra.rpki-client.org