Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137392e3132342e3139362e302f32322d3332203d3e20323632353339.roa
File:                     3137392e3132342e3139362e302f32322d3332203d3e20323632353339.roa (raw, json)
Hash identifier:          20TFtHgzqiH/agVRso3R8yY4HcWoSnlsHXo7EZoXjoI=
Subject key identifier:   F3:08:FD:3A:02:F0:1A:DC:A2:34:73:79:1D:6B:6D:3D:1D:D5:43:08
Certificate issuer:       /CN=5BBAA26A1B1C199630D76AA2B81403371285F562
Certificate serial:       29A6F6C9A61750D3705A4CC098BFBF6EE84CCEAA
Authority key identifier: 5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137392e3132342e3139362e302f32322d3332203d3e20323632353339.roa
Signing time:             Mon 22 Apr 2024 19:15:34 +0000
ROA not before:           Mon 22 Apr 2024 19:10:34 +0000
ROA not after:            Mon 21 Apr 2025 19:15:34 +0000
asID:                     262539
IP address blocks:        179.124.196.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a6:f6:c9:a6:17:50:d3:70:5a:4c:c0:98:bf:bf:6e:e8:4c:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BBAA26A1B1C199630D76AA2B81403371285F562
        Validity
            Not Before: Apr 22 19:10:34 2024 GMT
            Not After : Apr 21 19:15:34 2025 GMT
        Subject: CN=F308FD3A02F01ADCA23473791D6B6D3D1DD54308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:d8:a5:ea:c7:37:cc:ff:6d:ff:13:01:f1:
                    66:34:ee:c8:5c:8f:64:48:20:a2:d7:dc:4e:58:13:
                    aa:00:f4:e9:38:97:09:46:cf:ca:da:26:f0:3f:fb:
                    13:64:ff:ca:0d:1b:ce:71:c1:90:93:41:dc:c5:b3:
                    9a:c0:23:50:1f:67:52:c9:8a:78:30:c9:2e:e4:67:
                    ed:af:b8:f8:79:9c:d5:a4:8c:c6:4d:8c:cc:d4:36:
                    d7:c0:9a:a1:07:ab:74:8b:fa:76:04:9e:bf:0c:97:
                    57:48:c4:28:6e:1c:67:0c:30:c0:92:c1:e2:55:ca:
                    92:e4:37:c0:aa:bb:15:14:ea:3e:b6:34:f7:73:0b:
                    d9:fa:4f:35:d9:3b:cd:95:c1:0f:4b:05:18:ba:4b:
                    f7:ec:b5:87:a8:18:4f:a1:d2:87:5f:dc:34:3c:7f:
                    84:5f:fb:60:79:a5:32:a2:20:97:38:fb:c0:3d:f2:
                    04:c8:3b:9e:77:ee:00:f3:5b:47:dd:23:cc:b5:b2:
                    65:4b:8a:45:cf:28:52:8c:5e:1c:ed:2f:24:14:18:
                    e5:2e:ad:75:29:67:a2:78:10:2f:e7:f3:a5:c0:3e:
                    ec:b8:92:2e:14:1a:85:d7:1a:71:bc:6b:a5:34:30:
                    39:d0:8e:fb:25:96:6b:a1:ef:71:aa:df:09:f2:7d:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:FD:3A:02:F0:1A:DC:A2:34:73:79:1D:6B:6D:3D:1D:D5:43:08
            X509v3 Authority Key Identifier:
                keyid:5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137392e3132342e3139362e302f32322d3332203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:07:68:4d:9a:bd:65:8a:f6:02:a7:3a:cd:5b:65:4d:88:
         f9:38:25:af:a2:74:0f:22:05:da:80:ae:ea:bd:14:3f:86:b0:
         2e:ea:27:b5:05:73:08:2e:47:e3:56:98:84:1b:79:f9:46:6c:
         6c:17:d2:9d:dd:35:eb:74:a6:95:9d:f3:b8:7a:4c:0f:28:5a:
         8d:d8:32:0f:82:54:6f:6e:a5:a6:6e:5a:83:4a:8e:a9:1a:db:
         fe:20:04:44:7c:c4:11:d1:0e:99:78:c1:e9:9f:4e:a9:37:17:
         9c:06:98:c2:3a:a4:3e:9f:c8:a0:8f:7d:e7:64:86:8b:76:a0:
         85:c1:2f:6d:f9:ca:36:46:df:c7:6a:9c:d2:2a:3d:3f:5c:03:
         97:fc:5f:04:d9:04:c7:df:d4:a3:82:7d:ad:e2:aa:64:7f:04:
         68:62:3f:98:30:a9:76:f3:5e:e4:b3:e0:eb:07:39:27:dc:73:
         87:99:0b:a2:54:5c:28:0c:60:4b:fb:9f:d0:b5:76:3e:16:e8:
         7b:92:92:ba:b9:99:84:fc:bf:d2:e3:5d:86:f5:a4:4f:5c:8e:
         d1:b4:58:7e:11:ee:d0:76:1a:c0:0e:b2:6d:2d:c6:74:e5:58:
         d1:4b:5c:48:02:fa:33:75:a9:d4:98:a7:6f:a5:d3:44:64:67:
         04:1c:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org