Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32342d3234203d3e20323731373031.roa
File:                     3137302e37392e3233362e302f32342d3234203d3e20323731373031.roa (raw, json)
Hash identifier:          7uJY9CigMh+hG5+3wgHmq9g96doOF7CoIf07B3ZzrdU=
Subject key identifier:   C5:7C:47:F9:37:B8:17:C6:C0:F5:0A:8B:3E:84:3C:10:71:E2:4B:E4
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       5FDFD1F2EB72D2D2FB5A1ACF463969B3A2091397
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32342d3234203d3e20323731373031.roa
Signing time:             Tue 11 Jun 2024 13:07:12 +0000
ROA not before:           Tue 11 Jun 2024 13:02:12 +0000
ROA not after:            Tue 10 Jun 2025 13:07:12 +0000
asID:                     271701
IP address blocks:        170.79.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:df:d1:f2:eb:72:d2:d2:fb:5a:1a:cf:46:39:69:b3:a2:09:13:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: Jun 11 13:02:12 2024 GMT
            Not After : Jun 10 13:07:12 2025 GMT
        Subject: CN=C57C47F937B817C6C0F50A8B3E843C1071E24BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:e2:25:59:44:52:84:e2:2d:0d:1e:5f:8d:
                    fc:6c:36:7b:5b:45:2a:17:cc:fc:b9:6d:73:00:9e:
                    e4:a6:4a:8a:0a:a2:b0:25:f7:5b:ad:a9:8a:cd:34:
                    4f:20:f7:c7:1f:0f:14:f4:f3:59:12:10:f7:62:bb:
                    f4:a2:87:f6:50:64:d4:34:42:e0:88:a4:c6:5b:93:
                    a1:44:f8:fa:4b:7c:ef:02:b4:26:cd:88:44:e7:5f:
                    47:9f:0c:ec:2a:b4:17:ad:cc:a5:ec:49:79:18:76:
                    a5:4b:3d:84:c0:80:5f:82:2d:f0:dc:c1:5b:1c:b4:
                    45:80:ff:a6:3f:df:3b:62:4a:52:b8:fe:b0:e5:62:
                    08:28:ce:7e:f4:88:48:16:05:23:2b:4b:5a:27:74:
                    79:49:d5:cf:18:b8:05:28:2e:bd:20:68:64:c8:f9:
                    2e:2e:02:1f:b5:a3:5c:b9:25:a3:45:28:07:24:0e:
                    02:7f:e6:76:60:73:b5:69:f0:03:7a:28:57:9b:db:
                    56:db:b0:25:f8:20:71:b9:2d:35:2d:18:3a:52:1b:
                    11:92:96:22:00:c2:35:0e:80:78:2d:71:52:6d:b0:
                    18:68:70:08:ca:36:ff:28:21:28:88:21:09:c6:94:
                    f4:55:f0:5c:f1:28:be:c0:24:d1:15:56:7b:72:1d:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:47:F9:37:B8:17:C6:C0:F5:0A:8B:3E:84:3C:10:71:E2:4B:E4
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32342d3234203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:35:cf:75:19:d5:20:fb:10:29:db:69:3c:17:89:33:e5:01:
         08:1e:55:1d:f7:f4:c5:71:02:f6:77:b1:6e:93:fa:ce:88:f9:
         85:77:80:7b:7d:bf:10:39:d5:7a:f4:13:c6:6a:dd:53:81:e7:
         43:5a:a7:5d:de:23:70:0c:79:41:6e:74:7e:34:0c:91:62:db:
         c3:38:18:fa:aa:12:ef:40:b2:7c:62:c7:b9:d9:a7:74:19:1e:
         3f:74:75:33:2f:0b:b4:93:8a:22:4d:8c:9e:e0:91:54:a6:74:
         a6:ae:0f:15:3a:77:00:53:3d:9a:9b:fa:19:40:f8:f6:61:d9:
         bf:fc:d6:e0:84:27:a5:25:48:6b:74:7a:1d:92:a7:0e:d8:86:
         92:e6:5c:80:68:97:3d:a2:41:bb:42:48:05:a0:22:47:9d:49:
         a4:06:7a:56:11:f3:19:df:88:6e:f5:b2:f9:84:56:70:18:2b:
         92:7d:04:2e:36:50:d9:f6:fd:b6:11:b3:29:48:e0:85:0c:29:
         0c:5b:c5:2f:3f:a7:1c:3e:34:21:26:27:68:f9:d8:b5:9a:1b:
         3e:fc:18:88:d0:1e:e1:f7:08:ab:76:29:d2:e0:de:65:6b:45:
         6e:b9:0d:3c:51:d6:03:2e:8a:fa:8d:3a:66:7b:40:f7:c4:bb:
         4c:6a:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:46 2025 by rpki-client