Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa
File:                     3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa (raw, json)
Hash identifier:          AdwF/FFgIXMTyLfSsZjtwNOklLiAuXpOI/fuagZzLRE=
Subject key identifier:   9E:FD:42:21:47:00:23:D9:BD:64:2D:5F:75:8E:7C:8D:79:2D:4E:ED
Certificate issuer:       /CN=8B4136D64CC0039806002C711E0AD6370739900D
Certificate serial:       683F7A511E5F63C58A877196F5B3D922C4A61048
Authority key identifier: 8B:41:36:D6:4C:C0:03:98:06:00:2C:71:1E:0A:D6:37:07:39:90:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa
Signing time:             Wed 02 Oct 2024 19:23:04 +0000
ROA not before:           Wed 02 Oct 2024 19:18:04 +0000
ROA not after:            Wed 01 Oct 2025 19:23:04 +0000
asID:                     266470
IP address blocks:        170.83.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.crl
                          rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3f:7a:51:1e:5f:63:c5:8a:87:71:96:f5:b3:d9:22:c4:a6:10:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B4136D64CC0039806002C711E0AD6370739900D
        Validity
            Not Before: Oct  2 19:18:04 2024 GMT
            Not After : Oct  1 19:23:04 2025 GMT
        Subject: CN=9EFD4221470023D9BD642D5F758E7C8D792D4EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:c7:0b:a5:4b:dd:0f:66:5f:99:1d:68:b4:
                    e1:a4:de:25:1f:cb:7f:25:43:5e:5b:dc:8d:e1:ce:
                    c4:5b:73:36:06:2d:b9:75:ab:ea:b4:79:a1:c9:4a:
                    87:35:04:95:e5:22:8c:5e:de:9d:3f:37:85:e8:29:
                    b3:39:9e:61:57:2d:2d:48:c4:70:46:6e:c5:b6:20:
                    b2:0b:f3:9a:3d:7a:18:84:d7:b7:46:0f:30:39:2f:
                    71:2b:70:98:81:ae:f9:d5:10:9d:d2:96:f4:fc:a0:
                    1f:d3:9a:5f:54:2c:37:a5:f8:4b:e9:8b:a2:ef:89:
                    0e:32:24:77:f6:f9:0b:1e:96:3b:bd:96:5e:98:b3:
                    58:e4:d7:4d:71:57:d8:2f:cf:7f:6c:50:95:1c:55:
                    8c:b9:ae:69:d4:06:8c:fd:8d:95:15:59:4b:28:80:
                    a4:15:d2:de:b1:92:04:d7:b6:86:6e:4a:d5:4f:b8:
                    c5:98:8a:44:fb:32:a5:79:6a:d8:a9:bc:95:7a:41:
                    cd:38:4e:1f:ff:2c:51:98:ea:66:5b:33:92:1f:17:
                    07:71:a3:fd:5f:d8:8f:03:72:72:56:2c:f0:e8:10:
                    ce:59:9a:31:e0:6f:ae:e4:ef:ca:83:29:18:15:60:
                    6f:a1:73:60:86:15:25:f7:23:bc:cf:f9:8d:c0:b5:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FD:42:21:47:00:23:D9:BD:64:2D:5F:75:8E:7C:8D:79:2D:4E:ED
            X509v3 Authority Key Identifier:
                keyid:8B:41:36:D6:4C:C0:03:98:06:00:2C:71:1E:0A:D6:37:07:39:90:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:87:79:2d:b7:e7:a2:25:18:6c:dc:61:cb:a2:a6:b0:9d:48:
         0f:ab:b1:80:74:71:ed:fe:a2:c5:07:1d:26:21:a3:6f:15:47:
         fd:f3:8e:86:bc:fd:c7:24:48:40:bb:41:34:4c:f2:c6:92:60:
         84:6c:f7:62:2a:f9:41:a2:1b:52:f2:e5:05:f2:95:65:1a:53:
         8c:eb:eb:10:47:27:e8:8c:a0:d1:ce:ed:b1:b4:12:6f:76:10:
         61:e2:5b:fa:f9:4c:22:d2:59:d3:c7:b0:d1:ef:d4:8a:37:5f:
         38:e5:f6:99:0b:1d:78:4b:fd:48:1b:3e:8f:2d:f6:61:49:82:
         f2:ae:d7:22:de:f6:ea:b0:89:2e:61:38:65:aa:53:fa:4a:7a:
         05:28:4a:a6:04:fa:d0:04:a0:38:da:22:96:a6:23:d2:14:a2:
         ff:2a:2f:66:ff:f1:e6:37:03:b0:3b:92:fe:9d:1d:c0:88:f9:
         6a:a1:4b:8f:79:23:54:64:56:6d:59:3d:d5:b7:f0:8c:b0:de:
         97:50:20:55:16:51:17:5a:9c:20:ff:65:ee:36:e8:8a:bb:de:
         95:70:cd:e1:50:bf:3e:7c:9f:70:0b:b5:98:61:e7:2b:f4:97:
         f5:50:8d:63:e7:6d:cc:a8:78:d3:3c:27:0f:96:93:ac:4d:2c:
         82:03:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org