Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          hoefCIPsXtF4Kbnh5F5xNp96HhBi2Av02Eor+Y19s04=
Subject key identifier:   78:9B:66:82:5F:81:D0:B6:3A:F5:C9:49:5D:08:75:C1:6D:C9:FB:2D
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       4DDBCEFEF8D329C58BB10587AEBEB58A1CB350C4
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa
Signing time:             Fri 01 Nov 2024 13:10:29 +0000
ROA not before:           Fri 01 Nov 2024 13:05:29 +0000
ROA not after:            Fri 31 Oct 2025 13:10:29 +0000
asID:                     262765
IP address blocks:        170.80.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:db:ce:fe:f8:d3:29:c5:8b:b1:05:87:ae:be:b5:8a:1c:b3:50:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Nov  1 13:05:29 2024 GMT
            Not After : Oct 31 13:10:29 2025 GMT
        Subject: CN=789B66825F81D0B63AF5C9495D0875C16DC9FB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:f6:ff:39:70:c1:26:d4:fc:8c:a5:55:76:
                    83:18:d5:77:1b:8a:e8:77:11:25:fe:ca:9d:a6:b2:
                    64:62:69:54:25:33:ff:37:2d:d0:39:6a:de:4f:d9:
                    d1:a2:99:e3:92:92:43:be:85:58:36:01:d9:a6:0a:
                    8a:11:a6:05:e5:18:21:0b:6e:64:cd:a2:94:26:e4:
                    1e:73:bb:f3:9d:87:b8:ce:9e:ea:c5:fc:17:a9:1f:
                    a0:a9:de:07:ab:16:0d:5b:dd:7a:6a:3f:b5:5b:86:
                    3a:4f:ca:f4:9a:8d:3e:fa:d9:84:22:5c:55:8c:c5:
                    77:1a:4f:cc:c3:ba:5d:c5:9b:9b:8e:ab:a6:74:6e:
                    63:65:0b:59:83:e4:ce:32:4d:30:75:75:d4:b2:67:
                    0b:ce:76:68:c2:b7:6f:4d:74:72:7c:22:18:02:2c:
                    8b:4e:a1:97:a0:01:d3:c3:05:87:82:05:2b:7c:78:
                    dc:69:b2:0b:23:ff:d9:90:2a:66:de:0c:be:40:d0:
                    6a:00:6e:4a:25:6d:5a:17:2b:24:3b:79:3d:82:81:
                    a8:63:bc:b6:fb:25:2b:f1:ef:2a:b2:9a:89:12:71:
                    f4:37:58:f9:7a:b7:6d:1d:2a:d0:cc:ac:a5:f1:c1:
                    16:6b:c1:46:a2:8e:fd:08:69:dd:50:5c:36:d3:3a:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:66:82:5F:81:D0:B6:3A:F5:C9:49:5D:08:75:C1:6D:C9:FB:2D
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:31:8c:cb:be:d4:07:f3:3b:84:9e:21:88:93:86:5c:56:96:
         c8:5c:5a:65:b9:1e:07:93:84:f4:7b:13:50:f5:6d:3d:2e:4f:
         0f:eb:c6:a3:42:dd:4e:46:3f:a4:73:6d:d3:29:c5:fa:1d:ef:
         56:ac:6e:19:88:5e:ca:9f:01:1c:96:91:4d:0c:0f:8e:b4:aa:
         e0:ab:02:d9:90:8c:78:09:6b:03:41:fc:eb:10:d0:b1:a5:87:
         82:03:39:93:f1:c2:9d:01:75:d3:e6:81:c9:53:da:fe:ca:34:
         51:93:76:cb:5d:3b:15:46:a1:7f:8b:3b:4d:4a:b0:ee:03:d8:
         ff:7a:d2:29:19:78:47:e1:bf:87:4f:c9:6c:2b:c5:13:2e:d1:
         01:eb:4c:66:32:2b:b7:f3:15:38:6a:51:1f:45:da:ac:1f:02:
         39:ef:56:41:02:1d:c2:14:0e:ca:45:30:cc:24:3c:35:1f:e5:
         70:46:dc:8c:a6:8e:70:e6:f1:f2:6d:cb:10:39:0f:31:25:22:
         98:54:2c:cd:4a:48:b2:44:0d:bd:a2:61:db:31:c9:12:a3:91:
         bb:76:48:15:97:e2:3e:60:9f:0b:c8:38:3d:44:14:3f:57:57:
         31:a4:e1:70:78:2f:f8:f3:69:b9:7e:71:cb:de:bf:4e:0f:57:
         13:02:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org