Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131382e302f32332d3233203d3e20323730373630.roa
File:                     3137392e3130392e3131382e302f32332d3233203d3e20323730373630.roa (raw, json)
Hash identifier:          bcCk9+te8HchD4uzLy4oI8u84z5udI+TnKuftGDRXmQ=
Subject key identifier:   43:BD:BD:80:72:33:BB:B1:5C:A4:86:4E:AD:5F:49:BA:C5:B3:44:95
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       44B28AFBC5B7DDFCBE37DEC3CCD94DEFE6BFB333
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131382e302f32332d3233203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:26 +0000
ROA not before:           Thu 16 May 2024 17:00:26 +0000
ROA not after:            Thu 15 May 2025 17:05:26 +0000
asID:                     270760
IP address blocks:        179.109.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:8a:fb:c5:b7:dd:fc:be:37:de:c3:cc:d9:4d:ef:e6:bf:b3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:26 2024 GMT
            Not After : May 15 17:05:26 2025 GMT
        Subject: CN=43BDBD807233BBB15CA4864EAD5F49BAC5B34495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:bd:eb:7e:92:e1:89:0b:44:bd:84:c6:21:
                    1c:4f:84:99:fd:2e:bb:16:b8:a2:e7:0b:ee:3f:d2:
                    47:c3:c3:da:e0:7f:07:9d:92:f2:a7:86:f8:0d:f9:
                    3a:29:55:ac:32:56:21:18:3c:1d:22:bf:5e:8c:da:
                    da:af:81:0a:35:71:31:7c:69:ea:ba:87:81:36:0b:
                    0f:fc:e6:ec:c6:ad:81:01:9b:fa:f4:b5:32:bc:36:
                    12:18:31:00:c3:fb:4a:ba:52:f5:39:a0:66:5b:b3:
                    73:ad:66:24:6e:97:f9:38:1e:ff:22:e5:08:89:22:
                    c6:d4:17:dc:76:de:f8:5c:b4:2b:37:08:fd:13:ff:
                    ec:f4:b7:0e:ca:ed:37:cc:f3:30:2f:4e:5b:61:6f:
                    a3:fd:8e:b3:51:dd:64:f2:8f:e8:e1:63:cf:c4:d1:
                    bd:2f:d8:cd:7a:d8:15:e4:92:85:f2:be:9f:b4:fb:
                    27:46:1a:94:9f:cb:fe:08:f0:5f:16:2c:cf:25:12:
                    f7:c7:0b:bf:d7:83:69:dc:f2:4e:eb:86:77:88:37:
                    df:15:89:a2:d1:ee:bf:5c:63:3e:02:3b:91:54:27:
                    dc:01:5e:2e:c2:81:58:29:03:6e:df:48:a7:58:79:
                    d3:a9:cf:23:a1:5c:59:a5:ce:f5:e9:04:d4:43:c2:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:BD:80:72:33:BB:B1:5C:A4:86:4E:AD:5F:49:BA:C5:B3:44:95
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131382e302f32332d3233203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:b4:35:15:0f:de:86:2a:2c:fd:85:e7:fa:f6:e2:1c:0a:
         43:43:33:2c:61:11:46:1b:98:5a:a6:0b:dd:77:50:d1:b8:e9:
         21:88:21:d3:a6:e4:56:e8:22:2e:ce:c0:01:62:d7:db:39:23:
         28:df:59:55:ba:42:46:e7:58:57:bb:c1:e8:1a:28:e0:95:e0:
         2f:48:30:bb:58:16:76:81:55:ac:6a:66:45:f6:6e:cc:db:db:
         21:fb:c1:81:08:4e:73:9b:89:8e:07:b0:10:d2:7f:51:3b:1a:
         36:35:3c:73:ad:a3:e7:42:18:b1:52:d1:e2:12:a9:dd:a7:b4:
         34:b8:df:b5:34:3a:ba:c0:b6:30:d4:00:85:8f:07:50:f0:4e:
         e9:dd:1c:c1:1e:57:61:3b:03:d7:6e:a3:67:89:0e:44:b8:91:
         f6:1b:20:26:fc:cb:c8:11:5e:d2:9e:79:8a:4f:08:96:13:d7:
         2f:85:8c:08:c8:5d:d4:87:94:7a:6c:26:24:e5:e3:e5:e7:d0:
         0f:34:f7:52:c8:63:35:41:94:a4:c9:55:7f:bb:d1:76:47:e3:
         9a:a8:51:cc:5c:5b:70:23:46:f0:0c:72:74:1d:71:84:16:b1:
         21:b9:e8:85:4f:76:b8:5a:90:dd:e4:b0:4a:d8:db:e1:3f:71:
         11:31:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:50 2024 by rpki-client on console-fra.rpki-client.org