Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier:          LAv4T0i+vJTItz1OdeV7QWK9ZgSOIJBikSAJn7XVtu4=
Subject key identifier:   68:22:C6:BC:FC:AF:ED:8F:3C:E2:9C:FB:6A:58:85:C0:81:15:B7:1C
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       287CD6E08DF0AA67372D1DA240A885B4DF9DDA37
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
Signing time:             Wed 03 Apr 2024 23:28:26 +0000
ROA not before:           Wed 03 Apr 2024 23:23:26 +0000
ROA not after:            Wed 02 Apr 2025 23:28:26 +0000
asID:                     203
IP address blocks:        179.49.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7c:d6:e0:8d:f0:aa:67:37:2d:1d:a2:40:a8:85:b4:df:9d:da:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Apr  3 23:23:26 2024 GMT
            Not After : Apr  2 23:28:26 2025 GMT
        Subject: CN=6822C6BCFCAFED8F3CE29CFB6A5885C08115B71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:19:57:af:1f:b7:38:d5:fd:b2:d5:34:49:
                    43:c4:d7:64:5b:ef:64:94:c3:8f:70:46:69:78:3e:
                    5a:ad:3f:40:1f:72:55:40:e6:f7:8e:82:27:78:4c:
                    5c:ae:ee:eb:72:5a:19:e8:4d:be:51:ce:16:36:01:
                    f1:50:70:a5:3d:66:9c:03:48:ff:a8:d3:6e:f5:55:
                    03:14:43:b5:3f:00:51:46:83:3d:0c:c3:29:2a:08:
                    0b:9c:44:3e:b1:5e:c1:b0:fc:f9:25:0e:60:1c:3d:
                    01:b3:55:0e:35:6e:8a:20:b8:0a:b7:cf:3f:30:42:
                    fd:dd:ed:2c:bf:a6:ec:b2:b5:51:3d:1e:92:9f:07:
                    21:4c:c5:44:05:8d:7c:63:65:06:d8:17:5a:65:0a:
                    53:c0:bd:7c:e1:5e:06:f7:1b:fa:0d:df:7e:b8:93:
                    d9:67:46:e5:16:11:0e:14:a1:3d:56:9d:d8:21:a9:
                    88:9a:4e:54:5e:4c:8c:22:18:ff:a7:f4:77:a1:d2:
                    8b:cc:e9:7a:cd:30:47:d6:b7:38:bc:5e:b4:45:4d:
                    35:ae:47:5c:a3:6e:c6:fc:0f:81:8f:83:b2:e7:b8:
                    fa:ad:b1:30:1e:04:9a:1f:c9:07:f7:84:4c:8d:60:
                    aa:07:28:9f:74:f2:a7:92:78:b4:0b:20:4b:f6:5e:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:C6:BC:FC:AF:ED:8F:3C:E2:9C:FB:6A:58:85:C0:81:15:B7:1C
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:96:ec:73:1c:6f:6f:f2:17:73:66:90:49:70:35:06:37:
         6f:47:e4:62:96:8c:82:6a:8b:bb:43:ee:a6:1b:eb:b5:0b:1f:
         c4:a6:e9:f3:8d:b3:80:5f:4a:89:0b:82:66:5e:f8:48:f9:8d:
         ea:ff:92:2a:59:61:19:ad:b5:ee:c9:fe:1d:45:83:ab:61:e7:
         9d:12:e6:94:91:54:33:be:96:b5:d4:b9:12:20:17:aa:5e:4e:
         74:3c:85:fa:39:cc:c6:98:64:ab:dc:e9:73:b9:99:99:9c:d1:
         aa:1c:08:37:5b:16:4a:63:f9:44:33:cf:88:11:a6:d4:d7:3b:
         49:96:d5:d3:22:dd:1c:35:e3:f0:c2:78:a0:0a:e1:30:ef:d7:
         93:21:7f:30:91:a6:c2:c3:cb:4c:41:80:e6:1d:04:be:73:0d:
         75:83:ef:39:d0:68:61:04:e1:5d:8e:91:0b:e2:63:a6:d7:02:
         df:33:f7:b3:f9:a6:bf:98:27:db:f6:12:78:3b:9c:64:71:53:
         48:45:46:7a:28:6a:d0:6e:01:e7:61:7d:be:a9:6f:0d:09:ee:
         5f:67:ee:18:de:b6:13:d1:51:6f:3c:d1:40:3a:90:16:63:24:
         69:69:fc:bc:9c:1a:70:67:a0:a8:9f:6c:d6:4c:70:47:50:c2:
         39:72:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:36 2024 by rpki-client on console-fra.rpki-client.org