Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
File:                     3137392e3132372e36342e302f32312d3234203d3e203238323837.roa (raw, json)
Hash identifier:          5AmtlKWYDlt+XYtxH9uCIOgLoo6IKkLky54naqJvvWU=
Subject key identifier:   2F:26:15:32:B5:E1:0C:FF:4F:42:AE:87:00:1B:C9:85:A1:C4:2B:A7
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       352929C1A8CA857AB9B8E5C4D48B83175AFE74C4
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
Signing time:             Mon 25 Nov 2024 17:04:11 +0000
ROA not before:           Mon 25 Nov 2024 16:59:11 +0000
ROA not after:            Mon 24 Nov 2025 17:04:11 +0000
asID:                     28287
IP address blocks:        179.127.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:29:29:c1:a8:ca:85:7a:b9:b8:e5:c4:d4:8b:83:17:5a:fe:74:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:11 2024 GMT
            Not After : Nov 24 17:04:11 2025 GMT
        Subject: CN=2F261532B5E10CFF4F42AE87001BC985A1C42BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:2d:03:e9:2b:9c:a6:57:59:82:36:0a:00:
                    aa:6f:5a:83:56:52:87:25:28:67:ce:90:6f:07:78:
                    89:85:40:8d:bf:0c:e6:b3:be:a8:dc:10:fe:66:0e:
                    26:10:48:03:48:e1:c3:b7:20:c7:f6:53:e0:31:1d:
                    b0:86:54:c0:f3:85:28:ee:ba:d5:fb:43:04:f6:d0:
                    6c:18:25:2a:e0:08:f7:93:25:44:4d:a8:71:2b:e7:
                    d3:7a:a9:2c:70:91:08:66:71:47:b3:16:0a:25:02:
                    27:45:7a:cd:c8:30:9c:39:a3:b0:79:ec:5c:7d:06:
                    6f:54:b3:57:59:95:70:ee:f9:42:83:09:1d:b9:9b:
                    15:df:e7:d2:3f:6d:28:ed:d0:62:6d:eb:9a:b2:1e:
                    bc:30:b7:a4:dd:18:5f:be:b2:a4:7a:35:80:0a:ce:
                    a9:bc:f3:f1:25:40:de:87:6c:85:f5:27:5f:65:a5:
                    cb:a4:d9:9c:94:36:6b:8f:14:df:f2:fd:fa:cf:39:
                    3e:b9:6a:ac:01:89:ec:2c:12:0f:ac:cf:b7:f7:33:
                    96:1e:16:2e:cf:30:0b:0a:38:15:8e:3b:b5:86:21:
                    3d:98:15:ba:e5:c2:f7:dd:2a:a5:43:a2:8a:cc:9f:
                    d2:f2:07:3f:e7:48:0f:d4:c8:66:80:f8:dd:0e:8a:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:15:32:B5:E1:0C:FF:4F:42:AE:87:00:1B:C9:85:A1:C4:2B:A7
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:37:61:27:77:44:b9:ef:aa:a1:6e:35:2a:75:5d:4a:31:
         af:10:36:e7:4c:d8:f6:0a:a8:91:b5:86:e8:25:48:f7:d6:c3:
         df:2f:c9:3a:4b:f4:47:f4:17:b6:70:b8:fb:65:49:4f:6c:f6:
         dc:0c:34:4a:89:54:8c:f2:2d:ee:d3:c8:ea:79:d1:9d:da:41:
         cf:75:87:72:d3:5d:df:2d:87:de:a0:3d:90:13:27:0c:6b:44:
         a6:24:0f:18:85:f0:af:55:8c:84:a7:95:dd:6b:2e:22:28:2f:
         1f:b3:e1:51:8c:a5:ca:1c:91:70:33:85:7c:dc:b7:1a:c4:79:
         24:7e:b7:7b:92:32:bf:06:b2:2e:5a:3a:c2:dc:c9:ce:3b:d1:
         3f:09:a8:38:2a:54:8f:5a:19:d9:27:4d:2c:4b:f0:56:a3:89:
         00:45:90:03:9a:d3:53:b5:21:a8:0a:40:94:4f:20:eb:38:12:
         c8:e6:54:52:5b:8b:7a:d6:ef:b5:f7:dc:1d:06:57:a9:3d:5f:
         94:06:12:0c:ea:74:28:76:47:dc:84:80:5b:e4:51:fc:1c:9e:
         4f:b8:d0:c8:ce:73:fa:a1:46:8c:90:f4:74:c6:31:35:86:f4:
         c5:72:d7:91:b5:db:3a:86:b7:58:61:89:ff:79:71:e3:70:65:
         ed:80:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org