Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
File:                     3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          ULSG8JTuuuvefLAtKshOOmW1+PH9M1W537PeWI4BUb4=
Subject key identifier:   FF:9B:D4:7E:B9:AE:B0:FB:C8:F6:DC:0A:9F:20:E6:4B:7C:97:45:86
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       6A5079A08B8900F60D75DF134A56EEB5C045C7B2
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
Signing time:             Wed 03 Apr 2024 18:31:41 +0000
ROA not before:           Wed 03 Apr 2024 18:26:41 +0000
ROA not after:            Wed 02 Apr 2025 18:31:41 +0000
asID:                     262903
IP address blocks:        179.109.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:50:79:a0:8b:89:00:f6:0d:75:df:13:4a:56:ee:b5:c0:45:c7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Apr  3 18:26:41 2024 GMT
            Not After : Apr  2 18:31:41 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:9f:2d:a3:c2:47:8e:11:b6:aa:dc:a3:fa:
                    01:f2:59:c0:e7:9a:fa:c1:ac:69:8a:a1:2c:db:ae:
                    9b:9b:3b:39:b1:3c:6d:9f:9e:49:a7:fb:47:92:64:
                    ca:11:08:11:b1:5a:a6:86:da:6c:5f:bc:61:fc:d5:
                    7f:63:09:9b:a0:ee:77:12:58:99:2f:99:00:1f:d2:
                    05:62:ff:07:72:02:de:c9:6d:05:98:64:d6:12:07:
                    ba:cf:10:de:d8:67:93:4d:1f:d1:ee:a4:6e:33:ef:
                    09:5a:46:7e:f2:92:7e:a8:ae:62:af:90:89:bb:5f:
                    3d:5b:67:15:67:6e:ae:44:5d:d3:b0:f2:ad:83:ca:
                    50:17:76:91:8d:6d:ed:1d:9f:8d:d5:82:e1:09:f7:
                    c6:4b:a4:81:b4:81:bc:b2:d7:a8:c4:6f:d2:33:5f:
                    e3:b4:95:3e:1c:cb:10:19:a5:b2:b5:9b:99:7f:0a:
                    5c:33:05:4e:58:fb:30:38:e5:ec:09:df:ac:f0:34:
                    12:f3:e4:2c:1f:2b:17:32:97:e8:84:50:b1:e6:a7:
                    05:20:bd:76:fb:41:1d:0f:a6:4c:2a:b1:9b:df:92:
                    4c:cd:c9:c3:8b:cd:a3:dc:34:74:90:7b:94:f3:19:
                    86:51:66:27:a2:00:d7:fc:26:06:04:3a:ff:36:1a:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:D4:7E:B9:AE:B0:FB:C8:F6:DC:0A:9F:20:E6:4B:7C:97:45:86
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:85:a0:bb:81:c7:b2:e4:34:c3:4e:f4:2e:bd:9d:22:be:84:
         58:94:7a:9f:2d:f3:00:ea:82:b5:2c:4b:b7:68:52:bd:4f:83:
         f1:28:cf:f4:48:8e:0c:49:0d:5a:db:3e:14:1c:f3:c0:61:bc:
         3f:10:47:e7:18:84:ed:fb:46:ef:e7:c8:3f:54:05:38:75:6c:
         97:c6:ed:37:fc:be:5e:68:de:a3:b0:d8:a8:6d:49:80:33:e0:
         b5:0b:d0:6b:6c:8e:2c:d9:97:c5:ec:bf:ef:8b:8f:69:99:1c:
         83:d9:38:61:37:84:00:e0:86:05:91:23:ef:f8:af:14:ae:24:
         ec:b2:27:0b:59:81:47:dd:cb:f0:37:c1:45:27:f2:40:04:7b:
         f4:3e:dd:98:71:d5:30:81:24:9a:db:77:00:4f:5e:67:27:2f:
         0f:9d:0f:9b:fe:93:23:ac:9b:04:e6:1f:c6:38:ab:44:7d:c6:
         8b:d5:21:84:da:4a:38:ba:ae:23:11:57:b3:fd:17:28:b2:43:
         a8:35:43:93:07:de:85:c7:e6:f3:46:69:4c:74:9a:0a:83:f9:
         74:c4:88:9c:cc:8d:f2:e4:48:92:bb:f4:c1:b3:1a:86:07:90:
         79:65:47:00:2c:0c:62:2c:7f:ab:d5:be:0b:52:f7:47:17:3b:
         12:2a:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:31 2024 by rpki-client on console-fra.rpki-client.org