Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa
File:                     3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa (raw, json)
Hash identifier:          bNv9VQxCGyMdAAFA0vrPDUQ8IWnwlqrq961429ZD3Rs=
Subject key identifier:   FA:E4:96:64:80:78:33:5B:84:59:D9:B6:95:E7:35:51:FF:F9:DF:B3
Certificate issuer:       /CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
Certificate serial:       5E5A97B224B1BC94E8CF5BA3440CEB473F782883
Authority key identifier: 8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa
Signing time:             Thu 04 Apr 2024 14:25:38 +0000
ROA not before:           Thu 04 Apr 2024 14:20:38 +0000
ROA not after:            Thu 03 Apr 2025 14:25:38 +0000
asID:                     28605
IP address blocks:        179.127.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.crl
                          rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:97:b2:24:b1:bc:94:e8:cf:5b:a3:44:0c:eb:47:3f:78:28:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
        Validity
            Not Before: Apr  4 14:20:38 2024 GMT
            Not After : Apr  3 14:25:38 2025 GMT
        Subject: CN=FAE496648078335B8459D9B695E73551FFF9DFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:31:4e:02:92:a3:ad:11:e3:82:2e:28:f4:
                    3d:84:32:4d:ba:49:1d:b1:39:77:ec:ad:e5:be:bb:
                    b4:01:08:91:09:94:85:c2:6d:16:16:11:8f:f1:b0:
                    68:7d:5a:ff:6d:95:a3:00:81:1f:53:6d:b6:e0:53:
                    28:54:dd:a8:db:d0:3c:13:fd:f4:1c:64:d5:51:e8:
                    bc:14:ed:ee:6d:05:4f:2a:df:22:df:10:77:13:c6:
                    36:94:c7:2c:f4:98:65:ad:01:34:31:3c:d0:d9:b2:
                    3a:1e:7c:b1:cb:08:c2:3f:35:ef:1a:e0:65:40:a8:
                    bf:25:39:39:c1:15:c4:8b:a2:33:cf:5d:0f:71:c9:
                    94:4b:7a:1a:04:e1:39:16:15:01:e6:20:71:de:a9:
                    29:f1:98:21:bc:84:44:35:f2:c3:51:5c:11:aa:ca:
                    8c:3f:ce:1c:a5:8f:03:d6:94:ff:5f:d1:45:34:85:
                    96:3a:39:15:33:a0:68:ef:a3:9f:06:3d:0e:e8:ce:
                    c2:ac:58:27:12:08:c5:ef:72:8c:71:cd:0e:f5:5a:
                    83:dd:0c:3f:02:b0:e7:ab:41:f0:de:6d:82:85:8c:
                    48:4c:6d:92:1c:9d:89:f0:f9:d6:10:38:c3:48:35:
                    b3:ca:8a:3f:d3:f1:17:02:bf:48:ee:a9:0f:6e:d3:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:96:64:80:78:33:5B:84:59:D9:B6:95:E7:35:51:FF:F9:DF:B3
            X509v3 Authority Key Identifier:
                keyid:8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:be:5e:cc:ef:4e:87:0c:c0:62:c9:b9:21:db:16:50:e3:
         35:09:e4:0e:70:e2:ef:eb:f4:c5:89:83:9b:6d:9a:0d:3b:e4:
         c5:4d:5d:9d:26:d3:33:7c:e3:96:32:bd:56:39:43:85:31:00:
         71:00:e5:ba:14:85:1f:3e:56:c8:e8:2d:33:34:c2:06:bf:d7:
         c6:79:56:ae:4a:9d:f6:a4:68:c8:46:ef:2f:4a:4c:0a:12:fd:
         8e:c6:96:e4:67:80:03:81:de:92:33:28:a0:4e:a0:c5:1a:14:
         f4:2e:0a:ff:32:f9:eb:06:dd:74:d7:c5:5e:ae:14:2c:cb:33:
         fc:c3:2a:e3:3c:9a:ad:86:f3:05:5a:99:81:80:49:f5:a6:b3:
         92:2f:e3:47:fd:ee:95:7b:aa:ee:56:44:a8:b0:27:59:cc:b8:
         ce:e8:fd:08:68:d8:20:6b:49:48:58:51:01:4d:60:3d:94:17:
         11:e4:c1:1c:21:f4:70:fa:8d:ee:fc:5f:0e:a3:51:0e:ea:9d:
         81:e9:53:3b:d5:35:3a:51:c6:5c:57:7b:4a:d1:88:ae:96:52:
         62:6b:7f:b6:bd:0d:32:71:ed:ce:17:76:b4:2d:1b:81:0d:e7:
         d8:60:ef:4e:36:3d:0f:d8:98:ce:b3:6a:7f:c0:32:10:47:d9:
         d9:fa:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org