Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138342e302f32312d3231203d3e203532353339.roa
File:                     3137392e3130362e3138342e302f32312d3231203d3e203532353339.roa (raw, json)
Hash identifier:          hyfaVexIYMVn3kdXTRWNTpY+OJh0+2rDsw2Gm+xq+h0=
Subject key identifier:   8A:F7:7F:81:CF:2F:24:DB:13:71:50:01:82:F1:CA:97:9F:D7:12:7B
Certificate issuer:       /CN=EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4
Certificate serial:       0B84E904004DA88946280498611992AC608C39EB
Authority key identifier: ED:AC:2B:7F:8E:A0:3E:6B:EE:B3:71:63:58:CC:DB:98:B4:7D:9F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138342e302f32312d3231203d3e203532353339.roa
Signing time:             Tue 27 Aug 2024 16:36:30 +0000
ROA not before:           Tue 27 Aug 2024 16:31:30 +0000
ROA not after:            Tue 26 Aug 2025 16:36:30 +0000
asID:                     52539
IP address blocks:        179.106.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.crl
                          rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:84:e9:04:00:4d:a8:89:46:28:04:98:61:19:92:ac:60:8c:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4
        Validity
            Not Before: Aug 27 16:31:30 2024 GMT
            Not After : Aug 26 16:36:30 2025 GMT
        Subject: CN=8AF77F81CF2F24DB1371500182F1CA979FD7127B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:91:20:3b:33:c1:09:ac:b0:48:8b:0c:43:
                    72:16:c2:2d:e2:60:47:a2:88:f5:9e:d0:80:e4:40:
                    2c:44:36:07:61:a0:43:ea:c5:6e:3e:51:8b:e5:40:
                    54:ad:87:c0:7d:1c:66:3b:0c:38:48:3e:6b:e6:8b:
                    54:29:f2:49:db:e6:81:eb:1a:34:55:38:de:2a:35:
                    aa:c3:ce:ec:bb:c8:88:e6:e2:0d:24:3c:92:24:b4:
                    4a:8f:60:fb:31:c9:e0:a5:46:a7:2b:20:63:d4:71:
                    a7:22:b9:ec:60:ae:4a:4b:67:e4:58:fc:79:d5:9e:
                    f8:ea:da:58:1d:74:b9:46:95:54:cc:86:80:fa:27:
                    bb:d8:25:b5:cf:fa:35:2e:fc:84:e9:e9:dd:c6:47:
                    99:3e:8f:f6:5f:3d:f9:d1:7c:47:3b:45:f8:0d:b0:
                    6f:e4:1f:95:ca:36:47:e7:10:4e:0b:f7:40:60:b6:
                    f3:97:1d:e6:74:d2:5d:e9:24:87:2f:84:ba:bd:b7:
                    70:7f:69:1e:75:92:5b:71:f5:7f:f8:1c:f5:c8:32:
                    2d:14:70:38:53:9c:53:52:f7:92:67:a8:9e:2e:d7:
                    a7:83:10:3d:f3:d0:95:49:ec:5d:a9:19:6b:04:fc:
                    81:b0:fc:00:a9:16:18:e7:db:94:9d:2d:f9:79:46:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F7:7F:81:CF:2F:24:DB:13:71:50:01:82:F1:CA:97:9F:D7:12:7B
            X509v3 Authority Key Identifier:
                keyid:ED:AC:2B:7F:8E:A0:3E:6B:EE:B3:71:63:58:CC:DB:98:B4:7D:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138342e302f32312d3231203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:b9:e3:87:9a:8f:d1:14:1e:f5:4c:ba:88:6f:29:c2:ec:
         5e:84:6c:ae:fc:d3:c8:e4:0c:81:22:72:ce:ea:44:2d:4f:34:
         2d:af:35:02:75:de:c4:75:e5:86:2d:90:e5:54:d3:21:d4:83:
         fa:a9:ac:7e:c8:e1:9f:8d:63:ed:e7:de:51:d6:42:b1:9d:e0:
         c8:fc:01:03:e1:03:97:24:09:ab:45:37:b5:20:25:d3:30:a7:
         0d:f1:c9:ad:4a:35:8b:39:62:25:29:e0:f6:6a:1e:34:0a:47:
         08:1f:27:64:43:ee:37:c2:68:6b:34:61:7f:23:50:35:6f:99:
         74:38:97:b2:b7:28:0f:3a:71:de:9e:79:d4:fa:ad:3f:2b:14:
         86:ed:ef:c8:81:7e:87:4a:b5:40:0b:ef:a1:8d:20:95:49:bf:
         32:bf:a0:43:a0:ef:d8:60:a3:67:fd:89:a9:01:d6:0b:59:36:
         3e:19:94:ce:5f:92:9e:e3:fa:46:4d:2f:9c:f4:dc:c1:2d:75:
         02:d7:8e:03:be:8f:20:50:ad:b2:69:e8:16:f7:b5:5a:0b:0a:
         33:53:1d:ab:b0:36:65:67:e1:41:c8:9f:c3:d1:3b:53:9e:30:
         c7:2e:5e:9b:d9:fd:b0:50:6f:4c:26:cc:20:8e:e7:36:d2:71:
         7e:06:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:49 2024 by rpki-client on console-fra.rpki-client.org