Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32322d3232203d3e20323731373031.roa
File:                     3137302e37392e3233362e302f32322d3232203d3e20323731373031.roa (raw, json)
Hash identifier:          PZPALtIO+svElp6BM1IWulKTkOWCImnZV7XCsLrmI7Y=
Subject key identifier:   BA:00:2B:71:B3:4D:85:F9:32:F2:48:0E:5B:B6:CC:FA:3B:7F:12:11
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       61C53319CD2763A8EA95202C76FF5ACFBA24CA06
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32322d3232203d3e20323731373031.roa
Signing time:             Tue 11 Jun 2024 13:07:09 +0000
ROA not before:           Tue 11 Jun 2024 13:02:09 +0000
ROA not after:            Tue 10 Jun 2025 13:07:09 +0000
asID:                     271701
IP address blocks:        170.79.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c5:33:19:cd:27:63:a8:ea:95:20:2c:76:ff:5a:cf:ba:24:ca:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: Jun 11 13:02:09 2024 GMT
            Not After : Jun 10 13:07:09 2025 GMT
        Subject: CN=BA002B71B34D85F932F2480E5BB6CCFA3B7F1211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:f0:c4:b3:9e:3b:f8:bc:69:93:fd:fe:7a:
                    f4:16:a5:19:f3:08:ed:ae:62:d5:3d:e3:ca:6c:80:
                    71:7e:be:6c:da:65:5c:47:87:43:0e:20:ca:41:3f:
                    00:39:ba:8e:90:0a:61:da:df:1b:19:26:db:cb:28:
                    f4:7b:47:98:4e:76:5e:b3:9b:3e:08:5d:42:27:ed:
                    35:b1:88:16:f6:50:d6:c8:1b:ae:f2:2d:b6:e0:db:
                    14:8e:1d:9b:1f:6e:cc:3a:77:ea:c4:01:14:c6:ea:
                    a9:d2:d9:fc:c1:d7:41:e3:82:a6:df:69:b6:d3:44:
                    d5:7e:7c:4c:10:a7:22:24:03:c0:2c:ed:7e:8a:5b:
                    45:d4:bd:21:23:c3:68:48:18:76:83:da:b1:04:61:
                    ca:91:9b:5d:a6:fb:ae:5e:76:49:22:e7:ca:bb:85:
                    5d:72:c5:c4:42:1f:bb:8f:a1:e7:36:b8:ad:04:02:
                    53:b4:1a:68:e3:08:ce:3d:1b:ba:07:38:7e:dc:d1:
                    14:3f:82:75:7b:5f:d0:a8:67:73:84:52:c7:7f:7d:
                    e2:d3:07:60:f5:3d:f6:d5:49:d8:83:03:f2:49:1f:
                    96:84:9d:3b:fa:34:98:53:34:e3:b2:81:a3:f5:96:
                    de:84:46:9a:6a:9e:be:d5:1d:44:c4:a4:2e:65:86:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:00:2B:71:B3:4D:85:F9:32:F2:48:0E:5B:B6:CC:FA:3B:7F:12:11
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32322d3232203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:cd:2f:43:40:4f:43:d9:f4:13:66:ca:15:4a:6d:cb:17:
         64:f7:05:45:e4:ac:e8:b9:17:d6:1a:00:10:d2:8e:97:0f:3d:
         3d:05:68:77:12:26:fa:b2:a5:57:5e:9a:61:91:c5:de:0d:d8:
         f9:a7:cc:0a:24:a9:1d:f8:c2:62:e6:33:c9:d5:dd:d1:7b:01:
         f2:6a:6d:28:34:a8:83:62:6e:c1:0d:2c:d3:07:1d:c3:62:56:
         05:c1:26:0d:ac:3c:13:b8:3a:a3:e0:13:1b:c3:87:11:69:41:
         52:e6:9e:c0:50:89:51:cb:4f:13:e0:39:27:f1:9c:81:58:47:
         c6:a6:b2:e8:ea:8a:eb:25:3f:8b:ef:d6:85:ce:77:d5:d7:e6:
         dc:2f:3c:5c:7e:21:d1:cf:5b:c7:50:d1:1c:2f:c6:13:b2:d5:
         82:76:e5:6e:f5:12:5e:47:05:51:c9:9c:00:25:1e:52:2d:2c:
         eb:2a:5f:c5:cf:3f:80:da:fb:37:d3:1f:96:2e:63:4e:5d:46:
         dc:99:94:d3:41:2b:d9:7c:6b:88:1e:0a:3d:94:13:49:1a:14:
         e1:9d:aa:3f:3e:95:56:9b:a9:11:46:4d:24:95:b7:a4:02:5e:
         c4:ea:03:3f:8c:92:7e:9f:da:76:76:d9:fe:cd:88:2a:91:87:
         66:ca:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org