Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32332d3233203d3e20323732363737.roa
File:                     3137392e36332e38342e302f32332d3233203d3e20323732363737.roa (raw, json)
Hash identifier:          y4yHLp8Zdd7GX8n2xPZ/yv1NREzRmv/HFzZawvvPDz8=
Subject key identifier:   DA:2C:36:68:84:9A:EF:E6:7C:37:70:13:FB:61:5A:58:38:A3:0D:9D
Certificate issuer:       /CN=E1C3821086E172D7404AE335C21C2D33F448F991
Certificate serial:       035BE56AABF9673ACD4EF2BE61324BC85D7CAB65
Authority key identifier: E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32332d3233203d3e20323732363737.roa
Signing time:             Fri 10 May 2024 22:14:50 +0000
ROA not before:           Fri 10 May 2024 22:09:50 +0000
ROA not after:            Fri 09 May 2025 22:14:50 +0000
asID:                     272677
IP address blocks:        179.63.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5b:e5:6a:ab:f9:67:3a:cd:4e:f2:be:61:32:4b:c8:5d:7c:ab:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C3821086E172D7404AE335C21C2D33F448F991
        Validity
            Not Before: May 10 22:09:50 2024 GMT
            Not After : May  9 22:14:50 2025 GMT
        Subject: CN=DA2C3668849AEFE67C377013FB615A5838A30D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:c4:4e:c2:b8:17:e2:0d:1b:08:97:31:7b:
                    27:a8:5f:ec:f0:42:8f:3d:71:c7:d7:41:ff:db:f9:
                    8e:7e:55:e7:f9:8b:4b:2b:79:b8:12:ab:fb:9c:62:
                    16:83:f1:2a:c5:09:c9:7d:5a:77:0e:bd:ae:26:69:
                    5f:7b:b7:96:22:70:24:99:3b:69:65:89:82:23:eb:
                    a7:b7:dd:df:70:05:fa:9f:2a:ed:18:b4:0d:77:57:
                    c4:76:8b:6a:6d:9a:a1:2d:21:dc:2d:b7:4f:ce:c9:
                    cb:d9:d1:e5:8b:90:90:46:37:a2:35:76:a6:33:8f:
                    b3:76:78:e9:f4:30:8a:14:5d:f3:ab:19:fd:a9:26:
                    70:ce:d1:fd:9f:27:f5:7a:02:b3:dd:14:bc:24:51:
                    06:3a:cf:7c:a1:36:79:88:09:3a:3c:6c:5f:94:96:
                    6b:89:bf:36:78:50:1c:ae:1d:41:49:0e:01:5d:37:
                    c7:2b:80:e2:8b:31:aa:ce:a3:ec:d3:8b:aa:c9:39:
                    35:0d:f6:93:92:eb:c4:99:4d:e0:04:14:28:36:67:
                    0b:e5:52:b4:bf:a9:5e:07:cb:80:7d:91:10:4d:52:
                    ee:44:15:f6:83:c0:63:9d:9a:cb:56:46:4a:c3:66:
                    37:a0:c0:5b:ba:39:0f:2b:06:3f:c5:69:e0:aa:e9:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:36:68:84:9A:EF:E6:7C:37:70:13:FB:61:5A:58:38:A3:0D:9D
            X509v3 Authority Key Identifier:
                keyid:E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32332d3233203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:af:73:56:82:1f:7a:8b:a1:6f:df:48:a9:b7:19:34:62:
         bd:dd:cd:cd:52:4d:8e:88:b2:9a:0d:c8:d7:71:25:b6:9c:3a:
         b8:89:8f:b2:6e:4d:f9:eb:dd:97:74:71:3f:db:c1:81:d8:7d:
         f5:64:74:c8:25:c5:43:5f:41:ea:33:39:55:f3:15:2f:a1:cb:
         b8:ff:d0:8c:c0:43:dd:8d:a0:60:09:32:45:fa:ee:3d:8f:4f:
         a8:5c:27:e3:b9:97:ae:1f:59:3d:8b:69:9d:dd:e0:f4:2a:41:
         25:df:23:06:fd:66:02:91:5e:c6:39:e5:89:2a:2c:11:27:bd:
         72:01:d6:1c:75:15:21:06:f8:9b:c0:3c:67:73:86:b4:00:3b:
         b3:a6:45:5b:72:54:ef:34:38:1d:c8:ac:35:4b:bf:18:f1:77:
         0c:0e:0f:1d:cd:76:0f:05:b3:34:17:d2:7b:b9:5f:ab:4e:57:
         a9:89:5d:2e:b5:7f:ad:81:17:7e:f5:9d:1c:67:df:d0:1b:8f:
         07:c7:62:4c:c3:50:cb:e2:8e:a5:84:22:a9:ed:24:25:27:97:
         0f:d4:01:1c:95:a8:25:c5:6d:ee:37:08:83:85:21:da:d3:1e:
         4e:e9:6a:71:ce:49:6d:58:0d:93:5c:91:0b:bc:85:5b:f9:71:
         ad:40:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:55 2024 by rpki-client on console-ams.rpki-client.org