Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3232203d3e203532383037.roa
File:                     3137302e37392e32342e302f32322d3232203d3e203532383037.roa (raw, json)
Hash identifier:          5TKBAzJOcszY8baAkKv2Fib0rq/gik8LF+Hk4txZY7o=
Subject key identifier:   B7:F4:31:DB:95:8B:AA:0E:BE:3A:57:3B:8E:DE:CC:67:AB:CC:F1:5C
Certificate issuer:       /CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
Certificate serial:       7F73A05D3DAC88E4369C152EAADCBAEE55A696B8
Authority key identifier: 81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3232203d3e203532383037.roa
Signing time:             Fri 23 Aug 2024 19:53:27 +0000
ROA not before:           Fri 23 Aug 2024 19:48:27 +0000
ROA not after:            Fri 22 Aug 2025 19:53:27 +0000
asID:                     52807
IP address blocks:        170.79.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/81F7376E7749836FA880B5CF61B6A41239B2AD17.crl
                          rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/81F7376E7749836FA880B5CF61B6A41239B2AD17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:a0:5d:3d:ac:88:e4:36:9c:15:2e:aa:dc:ba:ee:55:a6:96:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
        Validity
            Not Before: Aug 23 19:48:27 2024 GMT
            Not After : Aug 22 19:53:27 2025 GMT
        Subject: CN=B7F431DB958BAA0EBE3A573B8EDECC67ABCCF15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:d8:04:16:61:c3:de:4c:d5:05:bb:03:0b:
                    78:ea:e5:a2:6b:2c:35:e8:59:66:61:d6:0d:05:b3:
                    2b:be:35:d5:7a:ab:cd:64:e8:16:6f:4f:42:4d:fd:
                    fe:b9:18:07:c6:93:3e:e1:ee:e7:91:8c:ce:d7:77:
                    1b:ae:9d:78:b1:62:2f:c5:82:0c:94:19:98:72:79:
                    2f:d9:65:1b:89:b7:83:95:99:2c:ef:21:ff:57:70:
                    e4:30:b4:3a:87:ff:f5:0f:c4:59:05:be:e2:e0:3b:
                    fd:59:00:58:f2:26:16:21:ed:ea:7f:11:39:a9:b1:
                    88:5e:72:ee:ef:ec:15:52:12:34:f7:16:b6:73:f4:
                    53:54:c7:ae:a7:40:be:07:f7:d8:49:0e:51:06:50:
                    d1:8d:54:7d:bf:2a:2b:c6:47:6f:11:0a:ba:46:7d:
                    04:28:20:de:30:75:c6:4c:1d:34:2c:93:70:3d:9c:
                    9e:1d:7a:86:09:94:85:eb:74:90:ab:62:be:97:bb:
                    fd:f6:e5:b8:6a:cd:52:48:dd:cd:7b:61:15:7d:f1:
                    8a:cd:08:b2:b8:a8:3b:7b:7c:ea:89:65:c8:de:05:
                    24:4e:53:79:14:a8:c0:ee:ea:b6:31:bc:41:09:d6:
                    ba:1a:56:5e:d1:b3:06:fd:f7:46:28:c1:12:98:d5:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:31:DB:95:8B:AA:0E:BE:3A:57:3B:8E:DE:CC:67:AB:CC:F1:5C
            X509v3 Authority Key Identifier:
                keyid:81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/81F7376E7749836FA880B5CF61B6A41239B2AD17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137302e37392e32342e302f32322d3232203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:a2:03:7f:7a:b1:76:d6:f0:39:6e:24:d1:07:88:91:d0:bd:
         9b:93:ae:4e:49:96:21:14:f8:98:15:fd:61:37:a0:07:e1:61:
         5c:cb:bc:df:79:f8:b4:01:e6:90:03:58:11:76:43:95:f0:61:
         cb:34:0d:29:9c:24:4b:72:3b:0c:2e:12:f2:23:8e:90:93:e1:
         2c:fe:23:95:e1:79:cd:b7:7d:c8:f5:cd:1a:56:d6:d8:3a:74:
         d4:7a:73:e8:78:e5:5f:17:7c:3e:5c:8c:87:0b:a2:0b:2a:10:
         1d:47:05:6d:02:8e:10:91:be:53:13:8e:ce:d2:c4:97:fc:fd:
         34:cf:9d:6e:87:c3:1d:d1:39:93:fd:7d:ef:10:97:12:c9:08:
         99:91:ea:ab:32:a6:6b:02:87:1a:8d:d5:ea:67:90:ae:fb:9c:
         b2:36:67:1b:0d:9a:a8:3b:27:1d:91:89:0e:76:8f:4b:a7:83:
         b8:56:68:50:3d:44:aa:80:3d:32:17:ce:34:cd:99:10:71:79:
         cb:ed:3b:61:86:33:82:4f:21:af:02:46:53:0d:c3:02:1c:f6:
         b7:7d:6b:78:a6:0f:38:f0:63:0b:4a:b1:51:d9:17:97:44:4a:
         07:c9:bf:1b:3e:9a:77:89:23:b2:8d:cf:bb:7b:1c:8f:c1:35:
         bb:c0:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org