Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          DIklF5KwGynhs1tpWdxhFw02OA7IOxAQVFMvCMDCX7o=
Subject key identifier:   D3:5B:8E:4F:44:EB:8C:36:54:75:96:BD:AE:B1:D9:4E:0E:49:AA:73
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       6B69B877D82043B5D084881B778A5E5239A60051
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:27 +0000
ROA not before:           Thu 16 May 2024 17:00:27 +0000
ROA not after:            Thu 15 May 2025 17:05:27 +0000
asID:                     270760
IP address blocks:        179.109.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:69:b8:77:d8:20:43:b5:d0:84:88:1b:77:8a:5e:52:39:a6:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:27 2024 GMT
            Not After : May 15 17:05:27 2025 GMT
        Subject: CN=D35B8E4F44EB8C36547596BDAEB1D94E0E49AA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:b6:d2:f0:d4:3f:11:5d:1f:8e:6f:74:60:
                    35:6e:94:06:ae:9d:3b:f9:21:c7:66:c2:e3:82:62:
                    88:08:80:26:31:85:9e:55:18:fa:1f:4f:1a:6c:de:
                    a2:65:21:3e:ac:53:76:c8:9f:24:21:7d:c2:b9:22:
                    33:39:5f:87:88:a4:29:88:70:cf:27:a3:a8:72:40:
                    cf:b4:8f:fd:a2:c4:2a:20:81:ee:a3:d0:a3:e4:eb:
                    55:ee:56:ba:4c:3e:13:d2:8c:89:c7:4e:13:44:f8:
                    7b:fa:2b:93:4a:b1:89:e5:01:ac:22:4b:fa:d7:c9:
                    eb:af:22:a3:fa:97:e4:c3:ae:e6:16:6f:db:a5:8a:
                    cb:95:ea:f8:e0:c6:f8:96:26:01:63:1d:56:b4:4b:
                    41:1e:44:da:aa:ed:79:c5:26:3a:51:5a:69:14:bb:
                    8e:83:74:9d:6e:f6:5d:23:19:d3:8d:02:b5:83:05:
                    84:48:8c:aa:de:8c:d2:69:46:89:ca:a7:c8:86:36:
                    02:e9:22:c6:b4:e1:bf:dd:6c:cd:2f:f4:e5:bf:1e:
                    e5:8b:92:44:fa:09:08:98:b9:1e:17:f2:9e:55:10:
                    a2:c0:be:3b:9f:28:d0:95:ab:7c:41:ef:01:31:43:
                    99:7e:8e:04:f1:10:e6:45:0b:a9:03:f0:8a:87:78:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5B:8E:4F:44:EB:8C:36:54:75:96:BD:AE:B1:D9:4E:0E:49:AA:73
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:92:dd:45:ad:0c:b3:fb:46:79:e2:fa:57:d5:fa:98:ed:6a:
         28:33:cd:2c:57:f3:6f:d9:25:a4:8a:29:35:dc:05:e2:ad:b6:
         f5:41:be:29:ce:a9:ea:ca:67:33:b3:36:10:67:c5:ce:fc:7e:
         c2:cd:e5:a7:dc:4a:a3:a7:18:0b:77:1e:93:d7:16:3e:e9:48:
         f6:2a:14:51:b2:c4:43:e8:87:93:a4:29:ee:27:19:0c:da:22:
         ad:22:09:5e:68:ae:99:f8:ce:2b:18:41:d3:82:28:07:b8:38:
         d6:a2:31:5d:48:6e:11:18:95:9d:2e:c5:ab:96:0c:17:b9:83:
         b2:ab:52:f7:38:21:9e:bd:32:60:7f:11:0f:92:94:f3:8d:ff:
         ee:a2:9d:82:4e:74:4d:6e:8f:e4:d0:fb:ee:c2:15:9f:bb:9e:
         26:b9:4a:88:21:80:98:75:03:db:a2:bf:14:c9:25:9e:aa:d6:
         b3:76:6c:89:73:c4:bf:68:89:b6:20:7e:74:c0:36:10:33:da:
         92:69:6c:98:b1:75:b9:5b:bf:bf:26:6e:b8:cd:40:b3:77:45:
         ff:d4:0b:35:83:57:39:6f:02:7d:c0:82:04:59:f8:5b:54:03:
         8d:0d:2a:b0:ed:ee:88:b0:5a:8c:6d:f1:73:11:85:c9:57:24:
         fe:6d:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org