Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3137302e37392e32302e302f32322d3332203d3e20323634383831.roa
File:                     3137302e37392e32302e302f32322d3332203d3e20323634383831.roa (raw, json)
Hash identifier:          FwfvVM19p6j6hHvkYz+GvCGkYoBhUkqkvt00u/wmHuA=
Subject key identifier:   05:09:01:FA:92:3D:C6:F5:8B:AC:B9:A1:19:CD:4D:7B:C1:2E:F5:1F
Certificate issuer:       /CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
Certificate serial:       385832F4A024ECEE5B2E8F8D2D3E160C296D70BC
Authority key identifier: EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3137302e37392e32302e302f32322d3332203d3e20323634383831.roa
Signing time:             Thu 04 Apr 2024 13:24:45 +0000
ROA not before:           Thu 04 Apr 2024 13:19:45 +0000
ROA not after:            Thu 03 Apr 2025 13:24:45 +0000
asID:                     264881
IP address blocks:        170.79.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl
                          rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:58:32:f4:a0:24:ec:ee:5b:2e:8f:8d:2d:3e:16:0c:29:6d:70:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
        Validity
            Not Before: Apr  4 13:19:45 2024 GMT
            Not After : Apr  3 13:24:45 2025 GMT
        Subject: CN=050901FA923DC6F58BACB9A119CD4D7BC12EF51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:ac:35:93:5b:b4:94:52:dc:91:58:3d:ed:
                    7c:37:9b:a0:a0:4e:0d:79:c4:6c:e7:01:cf:c9:f5:
                    45:24:24:ea:10:89:49:15:a2:1b:48:57:f1:95:02:
                    24:42:bf:2b:09:96:e9:f0:19:09:1f:95:b6:4a:a9:
                    51:6a:a0:da:20:08:9d:57:a3:17:c1:e4:9a:92:61:
                    6c:11:8f:16:80:4b:51:8c:71:d1:94:02:1b:f2:b4:
                    02:f4:73:45:50:78:37:d0:a8:5b:1e:31:f9:a0:33:
                    30:b4:0a:3a:58:90:c7:c8:2d:dc:32:09:e7:97:20:
                    71:f7:32:9d:a6:dd:b3:6c:6b:d3:90:32:05:39:4a:
                    d4:64:6a:7c:2e:ac:7b:85:bc:c3:7b:8e:3c:3e:10:
                    9b:9b:b3:75:7e:5e:c4:4e:ea:63:f0:c9:5b:c4:6c:
                    aa:0e:28:db:2c:0c:33:02:74:31:4e:a6:50:3c:21:
                    1f:a9:62:b0:51:1e:f6:89:ce:f2:41:a0:e4:fc:a6:
                    bd:1f:0f:f8:e2:df:f0:59:88:0b:cd:7a:15:ae:07:
                    f5:22:4c:7f:64:2d:30:ac:57:16:55:d0:9b:67:48:
                    1a:87:51:0d:67:65:ca:da:02:07:66:5e:e5:ac:95:
                    dd:9e:50:56:3b:4b:35:ae:27:27:fb:a5:a7:5d:4d:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:09:01:FA:92:3D:C6:F5:8B:AC:B9:A1:19:CD:4D:7B:C1:2E:F5:1F
            X509v3 Authority Key Identifier:
                keyid:EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3137302e37392e32302e302f32322d3332203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:36:a3:1b:e4:38:fd:8a:c5:ac:ad:d1:d6:2f:a1:b6:9f:
         81:43:f1:b3:e8:a3:d9:9b:fe:75:2b:9b:e8:49:05:da:cd:41:
         cf:56:80:f2:f7:19:d6:fa:ea:11:83:f6:5a:92:df:26:f5:63:
         67:7b:af:d0:1f:85:06:c4:b3:5a:64:c3:11:82:da:43:91:8b:
         cf:ad:79:6d:60:a2:75:74:f4:a5:e4:1d:1e:89:52:c6:17:55:
         f2:b0:57:a1:80:d5:a8:d3:0e:b4:1a:72:4a:01:93:11:4b:be:
         56:bc:f8:7d:18:84:67:1d:37:b0:50:00:f6:9e:49:6e:c3:cb:
         dc:79:15:ba:20:c5:af:6d:d6:2a:5c:bb:2d:34:45:43:fa:4e:
         91:6e:0e:bf:a5:31:b0:5a:13:f9:e1:ca:64:d3:ea:a8:d3:84:
         2f:bc:38:f4:d0:9e:d5:f8:11:83:7b:ca:80:32:b9:0f:4f:81:
         b6:9f:37:10:a7:dd:88:cb:4c:18:58:44:ff:0b:2d:d9:19:2f:
         30:6c:ac:b0:06:f7:5a:1b:1b:5e:41:3b:eb:d8:5a:92:24:c2:
         9b:3f:e7:eb:78:17:0b:b2:7f:de:77:64:ad:ae:0f:69:d9:db:
         91:94:f2:fa:8c:08:d6:5f:24:5d:b1:39:3f:d7:eb:33:c7:58:
         05:5d:55:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOFgy9KAk7O5bLo+NLT4WDCltcLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQkY0MjgyQjJFNTVFQzk0OEU4RDU1QzlDNTAwRjUz
REQyRTU3NDAeFw0yNDA0MDQxMzE5NDVaFw0yNTA0MDMxMzI0NDVaMDMxMTAvBgNV
BAMTKDA1MDkwMUZBOTIzREM2RjU4QkFDQjlBMTE5Q0Q0RDdCQzEyRUY1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBaw1k1u0lFLckVg97Xw3m6Cg
Tg15xGznAc/J9UUkJOoQiUkVohtIV/GVAiRCvysJlunwGQkflbZKqVFqoNogCJ1X
oxfB5JqSYWwRjxaAS1GMcdGUAhvytAL0c0VQeDfQqFseMfmgMzC0CjpYkMfILdwy
CeeXIHH3Mp2m3bNsa9OQMgU5StRkanwurHuFvMN7jjw+EJubs3V+XsRO6mPwyVvE
bKoOKNssDDMCdDFOplA8IR+pYrBRHvaJzvJBoOT8pr0fD/ji3/BZiAvNehWuB/Ui
TH9kLTCsVxZV0JtnSBqHUQ1nZcraAgdmXuWsld2eUFY7SzWuJyf7paddTQL3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBQkB+pI9xvWLrLmhGc1Ne8Eu9R8wHwYDVR0j
BBgwFoAU6jv0KCsuVeyUjo1VycUA9T3S5XQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0R043M0RyREZn
YzYvMS9FQTNCRjQyODJCMkU1NUVDOTQ4RThENTVDOUM1MDBGNTNERDJFNTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBM0JGNDI4MkIyRTU1RUM5
NDhFOEQ1NUM5QzUwMEY1M0REMkU1NzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTU3FUcGlDTEVKbkQxZW82dG9vU3NRM0xwMkxSTDIzdEdONzNEckRGZ2M2LzEv
MzEzNzMwMmUzNzM5MmUzMjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzgzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk8UMA0GCSqGSIb3DQEBCwUAA4IBAQCJ5zajG+Q4
/YrFrK3R1i+htp+BQ/Gz6KPZm/51K5voSQXazUHPVoDy9xnW+uoRg/Zakt8m9WNn
e6/QH4UGxLNaZMMRgtpDkYvPrXltYKJ1dPSl5B0eiVLGF1XysFehgNWo0w60GnJK
AZMRS75WvPh9GIRnHTewUAD2nkluw8vceRW6IMWvbdYqXLstNEVD+k6Rbg6/pTGw
WhP54cpk0+qo04QvvDj00J7V+BGDe8qAMrkPT4G2nzcQp92Iy0wYWET/Cy3ZGS8w
bKywBvdaGxteQTvr2FqSJMKbP+freBcLsn/ed2Strg9p2duRlPL6jAjWXyRdsTk/
1+szx1gFXVXl
-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:18 2024 by rpki-client on console-ams.rpki-client.org