Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa
File:                     3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          kthvSH167vaOdFCoFX2M0GhP0TC4uy+RzOKBx6PMn5I=
Subject key identifier:   10:FE:7E:B8:FF:58:03:4E:E4:1D:DA:D2:67:E4:FF:8D:27:68:2B:D9
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       26031564A09A07A27F890840B117A92B54D86B5F
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa
Signing time:             Fri 08 Nov 2024 18:31:45 +0000
ROA not before:           Fri 08 Nov 2024 18:26:45 +0000
ROA not after:            Fri 07 Nov 2025 18:31:45 +0000
asID:                     28146
IP address blocks:        179.127.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:15:64:a0:9a:07:a2:7f:89:08:40:b1:17:a9:2b:54:d8:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:26:45 2024 GMT
            Not After : Nov  7 18:31:45 2025 GMT
        Subject: CN=10FE7EB8FF58034EE41DDAD267E4FF8D27682BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:70:d4:67:fa:d7:40:6a:f3:d9:a7:bc:3b:
                    64:a5:da:b0:12:fe:9e:c3:99:fd:f2:96:ad:7f:a8:
                    5e:37:5c:98:7a:74:d9:c7:d2:74:be:3f:81:1c:c8:
                    21:22:4f:3a:df:0c:60:c4:ce:8a:f0:f9:2d:02:c3:
                    d3:f0:75:7b:30:d2:55:41:d3:16:5e:58:9f:c9:ca:
                    1c:e7:9b:c7:37:1d:f9:e7:18:64:f6:05:e4:3a:e4:
                    62:31:13:48:89:b8:ce:c4:14:39:25:2a:cb:53:83:
                    50:fc:85:d7:da:ee:da:f5:99:c1:96:95:be:2c:41:
                    17:b2:87:06:db:d9:15:63:dc:f5:a1:d6:22:bf:03:
                    3d:7a:2b:d6:72:9f:e6:75:96:f4:5e:47:5f:50:39:
                    99:4a:23:a4:e8:ab:47:d6:ea:58:15:aa:de:1f:50:
                    67:ce:0c:dc:ba:d1:c8:37:e8:2b:41:9a:a5:82:c0:
                    45:01:34:4d:c5:21:c8:ff:8b:c3:94:7a:bb:1c:9c:
                    db:48:60:14:44:75:48:c7:f5:a7:1c:3f:ca:3d:04:
                    2f:59:6f:91:c3:0b:b3:34:bf:aa:9e:6a:af:d6:48:
                    75:4b:c7:8e:37:01:55:a8:3f:ca:be:7a:a8:14:53:
                    38:bf:30:48:88:78:3b:a4:dc:c2:14:37:4b:75:f6:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:7E:B8:FF:58:03:4E:E4:1D:DA:D2:67:E4:FF:8D:27:68:2B:D9
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:77:3a:22:38:1b:c7:b4:d7:ce:5d:14:d2:1f:48:81:c4:cd:
         bd:7b:31:36:ce:46:f8:08:a7:62:ec:ad:08:30:f3:01:78:bd:
         27:48:7c:26:6c:e4:31:94:48:ef:98:69:34:ac:6f:11:aa:2d:
         7c:a2:38:59:a1:fd:b6:8f:cd:5e:37:b4:8c:c9:81:bd:87:e8:
         4f:08:92:31:e7:fb:55:dd:dd:de:eb:58:0e:e0:c6:fb:09:a6:
         03:76:27:7a:15:fa:72:36:ad:84:d1:57:07:d9:b1:bc:cd:8f:
         3e:9a:b9:a7:03:7f:af:e9:d2:09:72:54:2b:c2:1b:e6:75:b6:
         dc:be:80:37:9b:22:dd:ca:1f:1c:e8:0f:2e:02:72:0e:59:3e:
         34:a6:af:87:83:ac:40:df:48:ef:2b:23:f5:00:e3:f5:7f:5f:
         f9:f0:fa:cf:58:e8:49:b5:3a:9d:ba:bc:1b:27:71:25:14:7f:
         71:a1:a7:05:dd:e1:ed:a7:1a:a6:03:86:a9:d9:89:24:57:71:
         2f:9f:c3:db:2f:49:3f:09:e4:73:52:d8:c4:1a:b9:01:60:de:
         06:38:36:d7:b5:93:68:fa:c3:a7:dc:8f:30:37:32:80:2b:2a:
         92:71:8b:8b:39:55:e5:52:08:91:58:d1:9c:25:96:81:40:6a:
         05:09:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:53 2024 by rpki-client on console-fra.rpki-client.org