Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa
File:                     3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa (raw, json)
Hash identifier:          OVZkgl3hgsl4J6eDPfnk9AW7QQnpxP1gdfqgG6Tvlwk=
Subject key identifier:   88:3C:A9:0A:8C:12:76:9B:E2:2C:43:48:1E:B1:BE:C9:C1:28:0D:47
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       79432527A1C2FFC5DB0DC915DB0B17DC84A3A1CE
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa
Signing time:             Tue 11 Jun 2024 13:07:09 +0000
ROA not before:           Tue 11 Jun 2024 13:02:09 +0000
ROA not after:            Tue 10 Jun 2025 13:07:09 +0000
asID:                     271701
IP address blocks:        170.79.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:43:25:27:a1:c2:ff:c5:db:0d:c9:15:db:0b:17:dc:84:a3:a1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: Jun 11 13:02:09 2024 GMT
            Not After : Jun 10 13:07:09 2025 GMT
        Subject: CN=883CA90A8C12769BE22C43481EB1BEC9C1280D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:7e:6f:6b:e0:56:16:f5:7b:01:21:70:0a:
                    7a:89:d7:ca:b1:00:37:37:cd:44:54:38:14:1f:f7:
                    bd:62:c9:1f:10:4f:a7:6e:99:04:b0:58:e0:1f:67:
                    13:ab:f2:89:1e:5b:1c:3d:94:5a:78:1d:71:1b:16:
                    26:98:e5:bf:1d:19:36:51:80:4a:d5:0f:a2:d5:76:
                    a9:75:9b:49:fd:c5:79:f8:ce:32:8e:34:45:70:77:
                    41:9c:37:71:35:39:de:9f:54:7b:bd:6f:d6:12:73:
                    79:3e:c0:d2:d6:56:34:70:aa:d5:2e:af:85:f4:1f:
                    66:ad:83:c3:d0:3c:ab:b4:18:fc:de:6e:89:f5:23:
                    d4:99:ed:43:77:11:4c:75:dc:a5:11:bc:b1:bd:0c:
                    80:4d:f0:fd:be:28:2a:cd:e4:25:47:b4:97:92:67:
                    f7:83:b5:49:30:4c:5a:8f:de:1d:59:37:37:b0:d8:
                    0f:37:ce:c6:e3:86:48:15:c0:d8:56:97:cb:09:eb:
                    ab:90:d9:dc:93:32:9c:69:f2:dd:18:41:7c:e3:3a:
                    30:5e:a3:a4:69:f9:ab:50:a0:7f:a3:1d:2f:cd:6d:
                    35:37:56:33:33:2b:d9:4c:43:0b:1f:bb:73:81:06:
                    cb:7e:c1:e0:72:bc:bd:42:51:a8:a7:f2:f6:7e:43:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3C:A9:0A:8C:12:76:9B:E2:2C:43:48:1E:B1:BE:C9:C1:28:0D:47
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:2d:0e:86:82:f9:7d:7d:c3:2c:58:3f:4e:b5:d7:ed:93:
         80:1c:53:ef:57:fb:2e:b4:24:63:2a:a9:8e:9c:2c:e5:24:ba:
         09:d6:cf:7e:5d:c7:76:8d:3e:99:fe:e6:30:80:24:4c:15:a1:
         72:df:26:df:12:24:ad:24:cd:e4:51:7d:5e:06:f6:24:ba:d9:
         12:1e:b0:54:e9:4a:bd:f8:85:fc:f5:2b:e5:6e:88:b5:5f:e3:
         49:ff:72:57:c9:4c:93:2c:75:06:99:bb:56:cf:fe:6a:f6:c1:
         da:0d:b7:36:52:f6:3c:bb:fc:95:a6:bd:0e:46:4d:a2:9a:42:
         3e:14:c9:65:ee:6a:46:3e:e3:04:1f:ee:40:82:39:a2:e8:6f:
         5e:f9:8b:2e:a5:98:cc:4d:91:e6:88:80:5a:1d:35:74:71:75:
         29:c5:fe:06:19:c0:48:2a:09:dd:b7:c0:8e:3e:6f:e8:44:ee:
         60:9f:33:e6:e8:37:2b:6e:1d:23:2e:38:b8:45:c1:05:f5:b3:
         1b:1c:a1:33:f1:32:38:75:dc:60:21:7d:e3:59:94:c0:27:1b:
         d6:26:86:94:92:d8:cd:16:e9:89:e6:90:55:3b:c3:79:be:fc:
         bb:7f:eb:be:55:1e:ea:f6:14:f3:c2:c9:49:ea:6b:2f:44:60:
         9d:86:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org