Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137302e37392e35362e302f32322d3332203d3e203532393536.roa
File:                     3137302e37392e35362e302f32322d3332203d3e203532393536.roa (raw, json)
Hash identifier:          E7d5oyQEEVhavHmyphU0tTwASzGs1IablN9WvcaoCS0=
Subject key identifier:   F3:BA:42:5D:18:24:60:A4:BE:8B:4E:FB:AF:20:66:3D:AC:D9:0C:BF
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       727B2C282140C5DF793CA2D49FB3FE3C92E85F21
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137302e37392e35362e302f32322d3332203d3e203532393536.roa
Signing time:             Wed 03 Jul 2024 15:07:59 +0000
ROA not before:           Wed 03 Jul 2024 15:02:59 +0000
ROA not after:            Wed 02 Jul 2025 15:07:59 +0000
asID:                     52956
IP address blocks:        170.79.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7b:2c:28:21:40:c5:df:79:3c:a2:d4:9f:b3:fe:3c:92:e8:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: Jul  3 15:02:59 2024 GMT
            Not After : Jul  2 15:07:59 2025 GMT
        Subject: CN=F3BA425D182460A4BE8B4EFBAF20663DACD90CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:00:b3:7f:36:bd:c2:0d:52:76:b2:e1:78:
                    fc:f7:fc:e5:75:36:7f:ed:eb:c1:f1:88:64:7b:e4:
                    9d:a8:ee:11:56:31:51:09:49:0f:8b:7d:c7:7a:eb:
                    df:b5:d4:07:dc:02:fd:7a:42:9d:a2:1f:86:0a:49:
                    06:fa:18:a5:36:dc:d1:95:64:68:17:d7:7f:d8:01:
                    84:3d:b3:2c:f7:12:ff:2c:cd:8f:7b:87:f3:87:20:
                    b3:52:3d:e8:a1:93:0b:6f:c5:71:a6:77:8b:54:94:
                    00:03:78:d5:db:54:d1:d5:84:24:d4:c7:ae:4b:b2:
                    1c:d7:73:b3:74:b5:41:4a:b9:6f:67:6c:47:8f:3e:
                    b6:b9:e2:8c:02:a8:e8:68:d2:a5:f1:ba:18:73:bb:
                    29:9c:6b:ce:8e:89:d2:42:e1:29:2d:71:6e:da:bd:
                    2f:df:32:3b:b9:57:9e:30:1a:24:8f:27:a0:5d:c9:
                    81:ee:69:90:c2:00:2d:94:79:5f:7b:d6:07:11:1f:
                    f8:fd:b5:67:1e:91:5e:bf:9d:62:fe:c9:2c:c3:d0:
                    c2:b9:41:27:06:7a:00:1d:0a:35:1c:ed:3c:a5:1b:
                    e0:82:a0:89:0f:e2:07:4d:54:30:cf:b7:a1:25:a2:
                    ee:2f:8e:a8:5d:98:13:57:08:8b:a4:91:c0:2b:d9:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:42:5D:18:24:60:A4:BE:8B:4E:FB:AF:20:66:3D:AC:D9:0C:BF
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137302e37392e35362e302f32322d3332203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:37:b2:6b:be:1b:ca:2c:af:1a:21:02:4e:45:09:78:1c:c3:
         08:e5:37:b3:45:be:ab:30:1c:96:c0:9c:b5:f9:dc:12:52:ce:
         5c:31:1d:a8:99:69:f8:24:dc:25:45:ca:67:a4:5c:6f:78:77:
         06:5d:96:8a:18:fd:8a:bb:13:2f:c6:72:45:5c:6f:d4:ff:c7:
         d6:ec:32:f0:e0:5b:ee:29:ab:05:9d:31:17:69:ba:50:03:b5:
         b9:7a:55:f4:00:7d:81:e1:b5:55:f4:a2:8d:c5:f1:0b:76:6e:
         7e:2e:df:80:f5:98:22:de:fb:e5:03:fb:72:80:e2:e3:f4:6e:
         f7:78:1d:08:19:70:fb:34:37:ec:1e:fa:2c:b1:97:2d:8c:14:
         10:36:76:8a:e8:a6:0d:d7:04:b7:f5:f2:fc:7f:71:1a:ca:87:
         5a:86:00:f7:40:57:db:ce:95:25:78:cd:be:fb:ae:4f:a4:59:
         7f:5c:9e:8f:36:57:73:19:a3:07:bf:d8:ce:a8:5b:f2:76:bc:
         a3:d9:f0:58:52:b9:f1:95:82:cf:ca:7f:18:66:da:60:b3:9b:
         ea:a3:cf:cc:75:91:0d:34:51:0b:18:82:c5:e5:0a:96:97:a3:
         fa:51:39:ec:78:7c:68:55:88:46:7d:6d:ce:ae:48:99:f7:de:
         51:3a:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org