Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/3137392e3132342e3231322e302f32342d3234203d3e20323731363136.roa
File:                     3137392e3132342e3231322e302f32342d3234203d3e20323731363136.roa (raw, json)
Hash identifier:          8yZB/6+azqBXcN+dDb0pu5yjHImIQTxFQ+80c5XVq0g=
Subject key identifier:   66:6A:56:BE:E4:90:B9:78:46:C5:F9:EC:88:6E:8C:31:81:25:8C:6C
Certificate issuer:       /CN=DCEB47CA8879EBC049CF15543FD5AC82825C7622
Certificate serial:       01546FA8402985326AF305D521279346F2C76E79
Authority key identifier: DC:EB:47:CA:88:79:EB:C0:49:CF:15:54:3F:D5:AC:82:82:5C:76:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/3137392e3132342e3231322e302f32342d3234203d3e20323731363136.roa
Signing time:             Thu 04 Apr 2024 19:20:25 +0000
ROA not before:           Thu 04 Apr 2024 19:15:25 +0000
ROA not after:            Thu 03 Apr 2025 19:20:25 +0000
asID:                     271616
IP address blocks:        179.124.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.crl
                          rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:54:6f:a8:40:29:85:32:6a:f3:05:d5:21:27:93:46:f2:c7:6e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEB47CA8879EBC049CF15543FD5AC82825C7622
        Validity
            Not Before: Apr  4 19:15:25 2024 GMT
            Not After : Apr  3 19:20:25 2025 GMT
        Subject: CN=666A56BEE490B97846C5F9EC886E8C3181258C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:52:1e:ff:4c:7d:59:3e:de:60:67:2d:5a:
                    0e:a6:93:d1:75:96:5b:0c:de:0e:96:de:b4:a6:42:
                    31:42:a7:c7:c2:d8:96:1b:f7:94:2e:42:2d:6a:ad:
                    63:ad:ab:6f:01:5d:d3:06:df:5a:33:0c:76:90:a0:
                    49:b1:7c:13:c3:4f:db:dc:3a:17:20:79:ff:b8:3c:
                    d4:6d:41:09:31:7f:d0:c6:51:09:1e:97:ae:ab:34:
                    7d:d0:b8:0d:4e:7e:c2:80:13:ac:8d:10:cd:01:ef:
                    a9:76:8e:f8:6e:76:aa:23:ab:1a:be:25:56:8b:9d:
                    00:97:08:55:65:60:7c:a4:3b:cf:2b:69:61:56:7e:
                    ec:67:f8:b1:8d:64:c9:3d:c0:2a:fe:38:17:44:3b:
                    d9:bf:06:11:45:81:3e:3c:45:bb:e1:91:ed:63:28:
                    c3:55:f5:11:0a:00:d6:d2:64:c2:b9:a1:dc:32:0b:
                    8b:a4:59:99:07:42:62:08:29:b7:47:dc:e9:31:8c:
                    64:1b:9c:de:46:38:c7:57:46:02:48:71:b9:1b:52:
                    c6:f4:6d:ce:b5:f1:81:4d:68:5f:3f:a8:d6:24:1f:
                    d3:6a:e4:34:ad:24:7f:ad:34:8d:87:de:bd:fe:1e:
                    65:e6:27:9c:03:25:06:e4:06:84:a2:88:b4:33:54:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:56:BE:E4:90:B9:78:46:C5:F9:EC:88:6E:8C:31:81:25:8C:6C
            X509v3 Authority Key Identifier:
                keyid:DC:EB:47:CA:88:79:EB:C0:49:CF:15:54:3F:D5:AC:82:82:5C:76:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEB47CA8879EBC049CF15543FD5AC82825C7622.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/1/3137392e3132342e3231322e302f32342d3234203d3e20323731363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:4c:72:a8:8f:b2:ce:36:a8:dd:92:40:0d:d9:e6:b4:87:
         21:bf:1e:70:70:84:51:1b:7c:9f:dc:f7:3e:e5:2e:69:2e:ef:
         47:29:2b:11:51:4b:38:ce:4f:a7:e5:02:dd:10:62:da:a5:6d:
         31:22:35:55:7e:d6:c8:57:36:6b:cb:75:c9:88:c2:03:c3:4b:
         96:4a:93:ec:e0:2d:bb:eb:03:3d:a8:ad:d6:f0:d2:8a:0b:1f:
         b3:64:a9:ff:e0:5a:9e:85:ea:df:7b:f1:bc:b6:b3:f2:cf:31:
         1c:86:76:d9:71:5b:bd:e1:0a:aa:d1:aa:79:02:51:85:67:10:
         2d:d3:67:19:0b:70:65:05:dd:e6:97:10:f8:85:89:b4:cb:ed:
         92:18:c8:62:de:1c:d1:50:24:1b:ae:00:d5:6e:22:01:22:1a:
         c3:3b:2e:f1:f3:60:af:eb:97:1f:05:f5:ae:64:ef:f9:5c:06:
         e2:d9:11:44:ef:80:47:c2:51:eb:21:10:2d:27:0c:83:27:a5:
         f3:38:1d:fe:0a:15:99:e7:d9:f1:d2:26:44:0c:7e:fc:5d:3f:
         1c:39:f2:e6:5a:b5:3e:31:d5:73:4f:7c:4c:d4:5b:f1:2f:44:
         0d:c3:3c:6f:c8:7d:b6:6b:cc:f8:ac:1d:c6:66:7d:44:cb:2d:
         e3:20:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:49 2024 by rpki-client on console-ams.rpki-client.org