Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/3137392e302e34342e302f32322d3234203d3e20323731343038.roa
File:                     3137392e302e34342e302f32322d3234203d3e20323731343038.roa (raw, json)
Hash identifier:          qmZ0sq4SWWbMhVZzK6G0pbJjDoC1H+RqrmcnRDJLCrI=
Subject key identifier:   5D:CE:0F:C6:D0:59:0F:9C:73:12:6E:A0:32:F4:B3:97:93:65:FA:9A
Certificate issuer:       /CN=08D5984462574247A2A9C04FCE2546B029D12882
Certificate serial:       36BAD5FA1050432E8DFB3CC78B68619A1651A242
Authority key identifier: 08:D5:98:44:62:57:42:47:A2:A9:C0:4F:CE:25:46:B0:29:D1:28:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/3137392e302e34342e302f32322d3234203d3e20323731343038.roa
Signing time:             Thu 04 Apr 2024 10:37:46 +0000
ROA not before:           Thu 04 Apr 2024 10:32:46 +0000
ROA not after:            Thu 03 Apr 2025 10:37:46 +0000
asID:                     271408
IP address blocks:        179.0.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.crl
                          rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:d5:fa:10:50:43:2e:8d:fb:3c:c7:8b:68:61:9a:16:51:a2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D5984462574247A2A9C04FCE2546B029D12882
        Validity
            Not Before: Apr  4 10:32:46 2024 GMT
            Not After : Apr  3 10:37:46 2025 GMT
        Subject: CN=5DCE0FC6D0590F9C73126EA032F4B3979365FA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:11:61:92:81:70:f4:aa:5c:7f:76:96:8a:
                    92:12:a0:4d:5b:fa:11:af:46:23:9c:26:c7:71:5d:
                    89:4e:f0:99:6a:20:45:ce:d8:53:f8:46:89:e8:fb:
                    38:17:8a:49:33:27:cc:98:5f:a7:9f:30:8d:c4:04:
                    0e:ee:f5:09:7e:23:e5:a4:06:5f:d7:55:cc:c3:98:
                    e4:74:65:1f:a2:bf:5e:81:bf:8f:a9:b7:d9:81:25:
                    14:ab:6d:29:01:82:62:fc:cc:a2:80:76:77:06:8a:
                    1b:38:3c:26:e6:bf:2c:63:b5:da:a9:2f:cb:eb:37:
                    19:8a:4d:39:0c:9e:30:00:02:40:0b:7c:0e:fe:87:
                    7a:6c:b0:58:61:d8:4a:da:da:54:c7:01:7d:d5:6d:
                    21:8e:d2:45:70:01:9c:b1:ef:43:3b:ce:10:45:be:
                    31:11:fc:d8:dd:e1:4c:5c:f2:79:bc:b2:05:d6:d6:
                    ba:2c:5a:c9:a8:1f:36:05:0b:f4:03:44:4d:32:ef:
                    2a:31:a5:b3:6f:1d:ee:99:5a:1f:7c:fc:f5:18:89:
                    02:1e:04:f8:7a:85:d8:3f:45:80:d2:40:3f:17:c2:
                    83:6b:32:15:7a:fe:22:e0:30:85:33:c0:fa:98:6d:
                    a4:23:ca:75:be:fe:bc:eb:13:77:41:b4:28:97:cb:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:0F:C6:D0:59:0F:9C:73:12:6E:A0:32:F4:B3:97:93:65:FA:9A
            X509v3 Authority Key Identifier:
                keyid:08:D5:98:44:62:57:42:47:A2:A9:C0:4F:CE:25:46:B0:29:D1:28:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/08D5984462574247A2A9C04FCE2546B029D12882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D5984462574247A2A9C04FCE2546B029D12882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/1/3137392e302e34342e302f32322d3234203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:8d:77:5d:54:86:6b:16:3d:09:36:5f:c8:be:65:4c:2f:02:
         82:d3:b1:ad:6f:26:8f:09:8b:64:9c:5f:ed:9a:a7:df:6e:da:
         e6:3f:88:2b:b0:57:62:f2:4c:38:bf:39:d1:43:b5:71:fa:26:
         66:fd:ac:64:74:6e:48:92:87:4f:26:00:a9:62:e7:83:46:5e:
         b2:03:ce:0b:6d:ba:96:cd:de:f0:ea:7c:40:77:a7:83:0c:04:
         ce:42:6e:e6:7e:46:56:8e:d2:db:99:0f:5b:0f:c3:52:29:99:
         e4:a4:d7:f0:58:7d:f7:b6:73:cb:f0:0d:cd:2e:62:09:52:1b:
         ab:d1:bf:7a:3f:69:5b:da:1e:56:72:14:6f:ad:6c:a6:76:fb:
         76:6a:23:11:c5:a3:1a:75:c0:73:98:c0:9a:1d:1f:4a:ac:08:
         44:66:a3:b0:69:47:53:b0:a9:b8:51:dc:d1:73:88:67:60:f4:
         a2:f7:a7:38:c1:32:12:06:ab:dc:66:aa:45:41:3a:e3:8e:75:
         c9:9e:58:ad:58:48:93:7d:1e:b8:9f:a9:16:e0:e6:da:1d:d7:
         57:55:d2:50:8f:4d:6b:75:32:14:e4:da:5b:0f:01:67:90:b6:
         dd:ca:08:93:55:4a:22:47:50:f5:cf:eb:a4:3e:5f:59:03:30:
         72:20:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:20 2024 by rpki-client on console-fra.rpki-client.org