Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
File:                     3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          6ipsBUxFs4H0+V/eG/qBH9rpehN71BpppttX7t/xchA=
Subject key identifier:   EF:7B:19:9E:F7:70:77:9D:28:1F:05:3B:3D:6C:98:82:71:19:9F:48
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       494AE70B597D4192E2137FC57128C9C331EB260C
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28292
IP address blocks:        179.127.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4a:e7:0b:59:7d:41:92:e2:13:7f:c5:71:28:c9:c3:31:eb:26:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:4a:83:6b:f6:1b:47:24:39:c1:77:d6:85:
                    e5:d9:95:c4:38:1e:7e:9b:66:2c:a5:b1:a6:81:ca:
                    3e:48:99:00:26:4b:8f:aa:4f:b8:9e:9b:84:86:75:
                    dd:54:3c:55:17:7d:d8:35:c1:4f:e0:26:04:66:02:
                    6e:20:2e:47:42:0c:09:93:a4:a1:c8:dc:78:d0:14:
                    4e:6b:08:c6:bb:39:d9:b4:38:bb:c2:19:2e:48:85:
                    8b:a8:33:8c:24:22:16:32:b4:db:da:f9:c0:da:c4:
                    b3:19:a7:fe:ce:34:b5:b9:25:74:8e:2a:96:b3:b0:
                    7e:dd:42:78:06:a8:7a:0e:cb:dd:0a:7c:82:b1:90:
                    73:79:1e:18:36:69:7a:d8:cb:61:ad:42:5d:73:63:
                    e0:fb:48:8e:1e:eb:63:2b:d7:72:05:50:d0:64:ba:
                    16:8f:8d:96:ea:e1:bb:15:9a:cf:1e:a3:6a:a3:e8:
                    ee:21:0a:71:34:0f:29:4b:d7:ee:fe:bf:9b:85:c3:
                    58:16:f6:ab:4c:02:69:0b:e9:c0:ce:f9:52:3a:c2:
                    ad:91:88:11:d2:a5:b3:34:22:44:ee:1e:5c:a4:ec:
                    04:57:e2:df:9e:cc:1d:b4:4b:3e:46:40:85:61:6e:
                    8d:5c:3b:5c:60:91:bf:fc:f0:4c:de:1b:2c:c3:d1:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7B:19:9E:F7:70:77:9D:28:1F:05:3B:3D:6C:98:82:71:19:9F:48
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:8f:ba:68:bc:ef:f5:48:6a:5b:74:89:bf:1c:96:52:08:
         39:53:e4:36:d5:d5:e7:fc:e7:20:ba:95:d5:c0:8a:c4:e2:41:
         86:a7:a3:31:41:3f:26:8f:b9:0a:33:c7:13:4d:ee:7e:ea:ac:
         35:69:04:9e:c6:3a:2d:20:22:bc:a4:0e:1c:bf:59:01:2b:cc:
         4a:4d:9a:e7:60:ae:d2:3c:71:fb:1e:0f:e4:55:80:1f:f6:fb:
         05:75:a1:a5:55:b8:dd:70:22:88:41:67:6f:13:96:a9:4a:1d:
         eb:00:c3:0d:a1:a2:d9:37:34:0d:a9:50:ba:cd:0b:c1:f1:24:
         4c:ba:3a:60:3b:dd:8c:6f:f6:bf:1c:35:21:86:fc:3a:06:7c:
         ae:7b:77:74:00:f8:c7:00:1c:a3:1c:af:00:2e:9f:86:6c:38:
         9e:85:08:57:dd:5a:f7:fc:03:8b:b7:2a:1c:91:5d:8c:1b:1c:
         93:a2:eb:0a:6b:ea:a9:0b:54:0d:da:c1:45:18:36:b3:29:8d:
         e4:56:f4:c7:c3:e5:1e:d9:5d:63:b7:0a:c9:0b:c5:4f:35:ea:
         ab:1c:52:b2:ac:fa:57:95:d1:c1:a6:54:d9:28:f9:50:a5:76:
         bd:f8:ad:03:e3:9b:c3:18:9f:be:40:60:6c:0e:83:79:cf:d8:
         36:5e:aa:3a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUSUrnC1l9QZLiE3/FcSjJwzHrJgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQzNTg4QzhBQjU0NTMzQzZCQUZFQzM5Q0E5RUM0RTI2
RTA1RDc3QjAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM1NTRBODM2QkY2MUI0NzI0
MzlDMTc3RDY4NUU1RDk5NUM0MzgxRTdFOUI2NjJDQTVCMUE2ODFDQTNFNDg5OTAw
MjY0QjhGQUE0RkI4OUU5Qjg0ODY3NURENTQzQzU1MTc3REQ4MzVDMTRGRTAyNjA0
NjYwMjZFMjAyRTQ3NDIwQzA5OTNBNEExQzhEQzc4RDAxNDRFNkIwOEM2QkIzOUQ5
QjQzOEJCQzIxOTJFNDg4NThCQTgzMzhDMjQyMjE2MzJCNERCREFGOUMwREFDNEIz
MTlBN0ZFQ0UzNEI1QjkyNTc0OEUyQTk2QjNCMDdFREQ0Mjc4MDZBODdBMEVDQkRE
MEE3QzgyQjE5MDczNzkxRTE4MzY2OTdBRDhDQjYxQUQ0MjVENzM2M0UwRkI0ODhF
MUVFQjYzMkJENzcyMDU1MEQwNjRCQTE2OEY4RDk2RUFFMUJCMTU5QUNGMUVBMzZB
QTNFOEVFMjEwQTcxMzQwRjI5NEJEN0VFRkVCRjlCODVDMzU4MTZGNkFCNEMwMjY5
MEJFOUMwQ0VGOTUyM0FDMkFEOTE4ODExRDJBNUIzMzQyMjQ0RUUxRTVDQTRFQzA0
NTdFMkRGOUVDQzFEQjQ0QjNFNDY0MDg1NjE2RThENUMzQjVDNjA5MUJGRkNGMDRD
REUxQjJDQzNEMTNDNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs1VKg2v2G0ckOcF31oXl2ZXEOB5+m2YspbGmgco+SJkAJkuPqk+4
npuEhnXdVDxVF33YNcFP4CYEZgJuIC5HQgwJk6ShyNx40BROawjGuznZtDi7whku
SIWLqDOMJCIWMrTb2vnA2sSzGaf+zjS1uSV0jiqWs7B+3UJ4Bqh6DsvdCnyCsZBz
eR4YNml62MthrUJdc2Pg+0iOHutjK9dyBVDQZLoWj42W6uG7FZrPHqNqo+juIQpx
NA8pS9fu/r+bhcNYFvarTAJpC+nAzvlSOsKtkYgR0qWzNCJE7h5cpOwEV+Lfnswd
tEs+RkCFYW6NXDtcYJG//PBM3hssw9E8WQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FO97GZ73cHedKB8FOz1smIJxGZ9IMB8GA1UdIwQYMBaAFLQ1iMirVFM8a6/sOcqe
xOJuBdd7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd2RHhQUGhwa3hwM05L
aVVYZVRtUWViQkxONUtVYVB4czcyWlFQcmlIRU5XLzQvQjQzNTg4QzhBQjU0NTMz
QzZCQUZFQzM5Q0E5RUM0RTI2RTA1RDc3Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNDM1ODhDOEFCNTQ1MzNDNkJBRkVDMzlDQTlFQzRFMjZFMDVE
NzdCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83dkR4UFBocGt4cDNOS2lVWGVU
bVFlYkJMTjVLVWFQeHM3MlpRUHJpSEVOVy80LzMxMzczOTJlMzEzMjM3MmUzODMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMyMzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLN/
UDANBgkqhkiG9w0BAQsFAAOCAQEAT/OPumi87/VIalt0ib8cllIIOVPkNtXV5/zn
ILqV1cCKxOJBhqejMUE/Jo+5CjPHE03ufuqsNWkEnsY6LSAivKQOHL9ZASvMSk2a
52Cu0jxx+x4P5FWAH/b7BXWhpVW43XAiiEFnbxOWqUod6wDDDaGi2Tc0DalQus0L
wfEkTLo6YDvdjG/2vxw1IYb8OgZ8rnt3dAD4xwAcoxyvAC6fhmw4noUIV91a9/wD
i7cqHJFdjBsck6LrCmvqqQtUDdrBRRg2symN5Fb0x8PlHtldY7cKyQvFTzXqqxxS
sqz6V5XRwaZU2Sj5UKV2vfitA+ObwxifvkBgbA6Dec/YNl6qOg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org