Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa
File:                     3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa (raw, json)
Hash identifier:          CMZMN6dnIzZFPi9DFfQKS97mMjAB6eUcKQ6SN0IcMCY=
Subject key identifier:   DE:A3:19:DC:6D:A5:C4:7C:B8:39:C3:83:9E:18:18:CF:B3:5A:E4:BE
Certificate issuer:       /CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
Certificate serial:       3520B24A00515B308C3DD283E3FEFA32D44004CD
Authority key identifier: F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa
Signing time:             Mon 08 Jul 2024 11:56:36 +0000
ROA not before:           Mon 08 Jul 2024 11:51:36 +0000
ROA not after:            Mon 07 Jul 2025 11:56:36 +0000
asID:                     266291
IP address blocks:        170.79.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl
                          rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 05:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:20:b2:4a:00:51:5b:30:8c:3d:d2:83:e3:fe:fa:32:d4:40:04:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
        Validity
            Not Before: Jul  8 11:51:36 2024 GMT
            Not After : Jul  7 11:56:36 2025 GMT
        Subject: CN=DEA319DC6DA5C47CB839C3839E1818CFB35AE4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:70:40:b3:64:1e:ad:c1:2b:3a:d2:62:9d:
                    90:e7:dd:0c:c3:45:bc:7e:8e:e6:26:b8:81:cf:f6:
                    0e:f3:d2:09:53:47:58:4c:7c:e2:2a:08:f8:f2:7f:
                    cf:c3:b1:44:37:b0:9c:73:72:b8:46:62:0d:45:ac:
                    04:cd:56:9c:02:c4:f1:d3:f2:b9:7f:3e:5f:ae:51:
                    f3:5a:9c:00:d1:75:ca:9b:79:8c:76:aa:b2:dd:e2:
                    77:19:b7:77:d1:7a:96:3c:1a:81:e1:1c:53:e8:46:
                    f1:db:e1:b8:d8:1e:80:af:12:b1:e8:fe:39:78:24:
                    c0:c8:0e:f0:5a:c8:f6:29:97:3e:f5:dc:21:ea:4f:
                    96:c7:d9:06:2c:45:fb:ad:7c:b6:45:ee:ba:a0:98:
                    59:7c:a8:24:12:55:34:13:4d:f8:fb:66:d5:32:89:
                    03:ec:f6:d2:d2:22:72:99:84:17:7b:21:52:99:27:
                    9c:96:64:e9:f4:8b:1f:30:59:96:99:f7:b3:51:15:
                    01:c5:ec:07:6a:bb:35:8f:d2:31:b7:dc:4a:57:0a:
                    d1:f5:90:84:7f:b8:5e:4e:77:a9:ab:1f:32:70:fb:
                    ab:85:10:03:31:2c:c0:12:da:19:fb:fa:e5:ca:35:
                    5d:6a:cb:05:3e:b5:e6:87:ca:48:0d:93:d0:87:d1:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:19:DC:6D:A5:C4:7C:B8:39:C3:83:9E:18:18:CF:B3:5A:E4:BE
            X509v3 Authority Key Identifier:
                keyid:F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ea:24:e4:dd:0f:45:1f:9d:d7:d2:11:35:c4:b3:69:85:a6:
         e8:31:60:71:06:c4:ca:15:98:e8:d4:56:ca:18:a5:37:63:e8:
         86:b5:92:53:0f:84:54:3f:02:fe:8d:ed:04:3a:41:93:5a:aa:
         0d:02:76:e9:7f:04:aa:4e:bd:45:e2:d7:6c:b2:67:64:32:21:
         19:c1:55:a5:b0:13:17:4a:66:4a:0b:fb:ef:13:2b:01:8b:d7:
         b6:00:e2:6b:10:7e:51:a8:81:05:c9:c1:11:b4:f3:ca:77:77:
         45:b5:6d:df:d6:88:6b:79:81:59:c3:16:ae:10:97:0c:14:f8:
         dc:9d:20:be:fd:a5:2e:0e:bf:90:80:65:bd:f5:78:6c:da:ec:
         50:fb:05:fc:ff:21:cb:c8:34:9d:6a:57:81:17:0e:a4:25:32:
         57:f4:39:3b:00:da:3d:a4:25:d0:e6:ff:e2:7d:4c:89:0c:ac:
         95:9b:c4:73:36:12:aa:6e:0c:d8:46:cc:84:40:45:6c:90:f0:
         57:e6:a8:5c:af:91:6b:e0:9a:ce:c1:b5:f7:6b:f6:74:a1:33:
         28:b1:b0:c4:5e:f0:a3:72:9d:cd:d8:64:c5:25:a8:e8:02:c5:
         8d:55:1f:5b:18:e2:69:55:95:4b:28:01:18:2b:fe:4d:41:1e:
         5e:82:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:56 2025 by rpki-client