Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3137302e38312e37322e302f32322d3234203d3e20323632343931.roa
File:                     3137302e38312e37322e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          As3uzUKdPFwl7nbrWkc1xfJHfpKF2vZUo5riZbQ/eFQ=
Subject key identifier:   7E:A0:70:42:70:15:CE:2F:05:3C:9E:B5:A1:57:4F:DA:BF:F4:A0:E0
Certificate issuer:       /CN=FA1BB5615A4C0E692CEE2AF571867C35017ED68A
Certificate serial:       2F3C3A9A73BDC868BCD06CC29161DA1BF0E0DB73
Authority key identifier: FA:1B:B5:61:5A:4C:0E:69:2C:EE:2A:F5:71:86:7C:35:01:7E:D6:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3137302e38312e37322e302f32322d3234203d3e20323632343931.roa
Signing time:             Thu 04 Apr 2024 14:53:47 +0000
ROA not before:           Thu 04 Apr 2024 14:48:47 +0000
ROA not after:            Thu 03 Apr 2025 14:53:47 +0000
asID:                     262491
IP address blocks:        170.81.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.crl
                          rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3c:3a:9a:73:bd:c8:68:bc:d0:6c:c2:91:61:da:1b:f0:e0:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1BB5615A4C0E692CEE2AF571867C35017ED68A
        Validity
            Not Before: Apr  4 14:48:47 2024 GMT
            Not After : Apr  3 14:53:47 2025 GMT
        Subject: CN=7EA070427015CE2F053C9EB5A1574FDABFF4A0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:cf:a3:39:3c:06:67:d0:80:b9:83:90:cf:
                    47:f3:31:b2:a9:96:64:c7:89:66:2a:27:92:a9:1d:
                    64:9f:e8:15:44:4f:41:65:7b:cf:6d:4f:d9:fd:91:
                    11:c7:6c:7f:0c:5e:f9:4c:5c:00:41:d5:4d:6e:d2:
                    f4:0a:5e:f6:a0:5e:91:47:be:56:bb:c5:86:9c:a9:
                    ac:41:7e:ac:e4:b7:f1:b8:15:19:67:86:d1:f4:a2:
                    54:61:46:53:b5:61:5b:78:a1:d5:71:45:e6:69:c1:
                    08:d1:c9:b0:f4:13:d6:c2:75:2b:21:7f:6c:25:ee:
                    bb:db:e1:82:dd:82:6d:d9:93:23:bb:9e:38:38:1c:
                    46:61:29:10:f5:0e:73:fb:98:8e:92:39:86:dd:87:
                    91:32:78:85:2a:12:91:7b:a9:a3:e7:7d:1c:9a:17:
                    df:14:ab:3a:35:1f:a5:39:a0:19:48:fc:51:ad:4c:
                    b1:e2:aa:8a:88:40:4a:92:cf:b5:62:17:ee:2b:70:
                    b4:0c:4f:82:8e:88:4f:a4:aa:ed:74:05:26:4d:97:
                    54:01:fc:a6:87:0f:ed:f2:b2:02:41:7d:1b:03:76:
                    70:22:5c:58:77:f4:f0:68:4a:a3:ff:e8:be:2a:0c:
                    46:25:40:5a:1b:87:57:16:76:d8:30:d8:59:84:b8:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A0:70:42:70:15:CE:2F:05:3C:9E:B5:A1:57:4F:DA:BF:F4:A0:E0
            X509v3 Authority Key Identifier:
                keyid:FA:1B:B5:61:5A:4C:0E:69:2C:EE:2A:F5:71:86:7C:35:01:7E:D6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3137302e38312e37322e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:46:73:27:4d:ae:45:aa:c4:dc:4e:60:13:b0:43:9f:3b:aa:
         bd:66:5f:8a:30:19:b9:2e:4c:09:15:93:4a:73:29:2b:6d:81:
         2a:0a:a0:db:50:74:a7:5d:17:b8:d1:cf:bb:75:31:72:90:d1:
         2d:f5:c3:25:37:97:86:e8:bd:c4:6e:55:60:d6:7e:5d:cc:7d:
         92:a1:52:7a:80:e9:8c:c6:2d:03:f2:a8:f0:03:eb:70:4c:62:
         40:1a:6b:d3:c8:2a:d2:83:35:b7:95:e5:9d:ec:98:a2:62:c2:
         18:10:3d:be:db:19:70:81:34:88:7a:f4:5a:b8:dc:ef:6c:40:
         0e:52:86:2b:49:89:6a:f0:6e:0a:c2:c6:db:f8:e3:04:e7:d8:
         c5:4b:0e:c6:8c:a5:06:60:f1:c0:1c:97:57:c2:01:65:a5:bd:
         cf:75:0e:27:5b:62:45:b0:a3:a8:dd:05:28:b0:fa:4c:63:ca:
         87:89:d4:f8:4d:b0:2a:55:cb:49:23:47:de:72:69:ef:87:d3:
         80:f5:fe:e0:07:9b:4d:d4:29:47:96:46:f1:77:31:3d:0a:b1:
         f4:61:5a:76:33:af:01:1b:49:01:4a:d4:6e:9f:89:41:dc:8b:
         f9:b6:2b:4b:46:19:de:cb:a6:36:d3:04:3b:3d:99:7a:b7:7b:
         fb:a2:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:48 2024 by rpki-client on console-fra.rpki-client.org