Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa (raw, json)
Hash identifier:          OWo9Ot+6RRFKVAxfuvtqN6O/Zwmb1kMvusdMze1vg+w=
Subject key identifier:   8E:2C:3D:EB:4D:C6:9E:78:BA:B4:A2:EB:1A:16:B1:6C:BB:89:A8:F0
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       7E7DF98DD13FD537742654D75EEB21EA07A5C441
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28210
IP address blocks:        179.109.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7d:f9:8d:d1:3f:d5:37:74:26:54:d7:5e:eb:21:ea:07:a5:c4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:7f:60:57:b4:27:24:a8:d1:cc:75:f2:b6:
                    36:fb:94:9e:d0:2a:2b:f3:5e:de:ce:ab:01:3f:55:
                    e0:80:79:7f:ba:01:03:d9:2c:cb:14:8a:74:a7:95:
                    e2:c1:32:6c:c0:c3:b6:23:c2:fd:bf:4c:93:91:84:
                    eb:07:55:cd:e6:16:78:55:bf:28:05:24:81:2c:22:
                    17:de:55:bd:b7:f9:d3:7c:95:f5:39:f1:6b:01:60:
                    97:9c:c0:80:8d:26:d9:c5:4a:b3:52:a9:80:d6:3a:
                    3f:89:58:8c:f8:e6:e8:72:ab:1e:8f:d3:ff:97:62:
                    be:34:29:cc:96:fb:89:7d:c8:6a:49:83:45:e7:fb:
                    85:8e:29:e6:48:68:94:90:51:36:2e:d8:45:8a:db:
                    65:71:c2:dd:dd:a6:59:9b:29:bb:30:09:8f:6b:4e:
                    fd:bf:8b:f6:5e:33:6e:d8:ad:d6:94:4e:6e:6f:ff:
                    26:70:90:90:bd:5d:ed:3d:02:c8:26:57:15:82:24:
                    70:0b:41:2b:bb:73:00:77:2e:56:78:21:ee:63:b3:
                    87:7e:4d:ef:e7:88:8b:c4:0a:5d:cb:ef:03:de:0d:
                    b9:ee:22:92:f5:a9:b8:98:44:bb:21:20:46:86:d0:
                    04:9b:fe:80:6b:18:fe:aa:f0:19:35:e8:29:d2:ed:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:3D:EB:4D:C6:9E:78:BA:B4:A2:EB:1A:16:B1:6C:BB:89:A8:F0
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:3e:72:8c:e5:15:bf:94:23:b4:74:03:8a:2a:f1:32:b7:
         57:27:b2:32:14:f8:c4:72:f6:dc:3e:74:0f:71:2e:cd:df:b0:
         4f:28:61:ef:9c:12:a3:79:0b:4d:91:37:59:3b:6b:58:51:c8:
         bf:b2:72:0a:d9:f1:d9:c1:ac:db:69:66:b2:78:0c:83:26:6d:
         29:11:d4:2f:e8:27:de:32:83:28:14:99:ab:31:00:47:38:78:
         a9:ea:4a:ad:55:fe:b8:21:b4:ef:de:94:75:7b:94:2b:ad:11:
         02:f0:a8:73:43:dc:a1:f1:34:69:26:3f:b4:4b:80:6b:c5:3e:
         0e:ac:bb:79:24:cb:00:61:80:a7:03:1e:de:7a:b7:26:a2:b8:
         b7:0a:48:80:7e:a2:cb:42:ca:b3:f2:52:27:63:f3:03:a4:a8:
         13:75:e3:04:49:cf:e6:e8:c6:ae:a1:e8:18:2e:d7:a7:d3:04:
         be:a0:34:7e:b6:18:96:92:82:e6:46:ed:67:25:d5:e8:79:72:
         58:a4:1c:e1:e7:a8:6a:44:c9:f7:c8:70:f0:25:da:68:b2:f3:
         88:72:31:9c:b3:e4:2e:b2:47:32:59:17:af:1c:64:20:fe:7a:
         14:f4:43:f2:ae:fd:4d:82:63:1d:b4:b0:5d:c9:ed:54:ec:d6:
         0e:02:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:43:53 2024 by rpki-client on console-ams.rpki-client.org