Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa
File:                     3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          a/aT2+riB/jekHyW2mxAPRYENe4H8oSGUZ/0IQBP5YU=
Subject key identifier:   97:81:27:AE:E5:61:99:0F:71:C7:B6:8D:DE:A4:29:56:57:FB:F8:5C
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       09DC6F60469FB4A96711197B7B2BC586644D40D3
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa
Signing time:             Wed 10 Jul 2024 22:19:56 +0000
ROA not before:           Wed 10 Jul 2024 22:14:56 +0000
ROA not after:            Wed 09 Jul 2025 22:19:56 +0000
asID:                     271179
IP address blocks:        179.51.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:dc:6f:60:46:9f:b4:a9:67:11:19:7b:7b:2b:c5:86:64:4d:40:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Jul 10 22:14:56 2024 GMT
            Not After : Jul  9 22:19:56 2025 GMT
        Subject: CN=978127AEE561990F71C7B68DDEA4295657FBF85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:65:05:15:bb:ed:54:e6:7a:fb:1e:45:0a:
                    92:42:13:dd:ca:ea:bb:69:79:14:5a:24:a5:1d:46:
                    51:15:a3:f7:b3:df:87:5d:94:0e:c3:bb:ce:c7:58:
                    42:84:ac:83:f9:f7:d1:29:f5:1a:37:0b:7b:69:5f:
                    75:bf:e2:f6:09:70:c1:63:c3:54:67:bd:d9:9a:e5:
                    62:94:14:c0:64:68:fe:64:0e:84:ef:29:74:1c:f4:
                    45:88:a5:9b:54:37:73:37:78:62:ee:9d:25:c0:41:
                    15:9e:1f:e1:af:d0:e7:54:53:3b:96:af:cc:7f:40:
                    3f:fa:ab:83:c1:bf:13:fc:ec:0c:91:6d:4d:75:99:
                    73:71:ea:2c:4b:74:07:f5:be:1e:36:6a:3b:dd:58:
                    a8:87:5d:f2:e4:a0:fc:b0:7a:be:3b:6d:56:c4:e8:
                    4a:5e:fd:27:e9:b9:fe:e7:b9:b0:8d:cb:02:6b:14:
                    4c:22:c3:64:c3:87:0c:67:d5:12:dd:0b:f4:1f:89:
                    c5:c9:69:10:ed:05:87:bd:1e:88:19:da:0d:63:f7:
                    a5:ea:e8:ab:84:34:f8:b6:ae:f6:60:9f:26:be:2b:
                    84:80:c8:ac:bb:b0:06:39:54:1a:08:47:f7:f2:85:
                    ae:ac:3c:eb:e3:03:84:d2:45:53:36:d0:1c:4e:6b:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:27:AE:E5:61:99:0F:71:C7:B6:8D:DE:A4:29:56:57:FB:F8:5C
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:d7:74:e4:30:85:3c:ec:5d:98:c4:ad:02:12:38:62:a6:aa:
         a3:c9:38:79:f3:9d:58:96:ac:f8:3b:53:2b:a3:79:3e:d2:6c:
         43:74:60:ac:c5:9c:51:a5:e0:1e:4e:79:7f:72:f2:18:cc:12:
         88:68:fa:42:69:c1:8f:ff:da:e5:e0:5f:4f:66:1b:32:57:c6:
         cc:de:37:5f:6d:aa:60:c4:d3:5c:b1:c1:8d:91:33:7d:ef:9c:
         2e:aa:66:f0:2b:97:20:c9:c0:91:cd:6a:5d:27:81:4a:c0:bb:
         8d:38:3f:6b:d5:74:d2:f2:ac:be:b1:4e:9e:f2:03:d6:31:b4:
         10:0b:09:41:58:f8:49:7c:80:a1:2f:2a:85:74:bc:10:2b:9c:
         bf:39:61:59:93:cf:d2:35:24:8a:7d:a3:35:61:9c:c5:be:23:
         35:bd:71:8b:f4:c2:b3:ff:b8:00:d9:53:2d:67:c6:f0:79:4a:
         f4:38:aa:b4:65:6a:b0:68:a4:e4:57:a9:dd:ab:65:9e:ef:ca:
         64:bc:44:92:6f:57:72:f3:7e:c2:be:cf:d3:81:88:e7:34:27:
         71:33:f5:82:d3:f8:f4:f5:f0:5a:96:a8:71:4e:09:21:6c:25:
         bd:a0:c4:b9:1f:18:74:10:33:ff:b7:e3:18:87:42:1a:60:b4:
         2f:42:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org