Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
File:                     3137392e3138392e39362e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          pMXbOdtJjwQArLwvmcDoO+ys30pTkvZSCse2UAKSdPM=
Subject key identifier:   CB:A4:E8:A4:29:F1:C7:48:04:E6:AB:42:5D:24:11:B8:D1:6F:B4:55
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       592D5BDAE3A38E82A2F64B5159EE0E5EB47FCFEC
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:32:04 +0000
ROA not before:           Wed 10 Apr 2024 12:27:04 +0000
ROA not after:            Wed 09 Apr 2025 12:32:04 +0000
asID:                     28201
IP address blocks:        179.189.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2d:5b:da:e3:a3:8e:82:a2:f6:4b:51:59:ee:0e:5e:b4:7f:cf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:27:04 2024 GMT
            Not After : Apr  9 12:32:04 2025 GMT
        Subject: CN=CBA4E8A429F1C74804E6AB425D2411B8D16FB455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:7d:63:ed:70:40:02:d4:af:c1:39:fd:3f:
                    f2:05:7d:5b:21:15:9d:f2:cf:bd:93:ed:1f:0d:b8:
                    db:27:27:8e:33:34:19:d8:f0:8e:ec:3b:7b:83:46:
                    ba:c9:bb:68:7d:80:10:d5:f5:db:8a:d6:12:7a:e1:
                    eb:ab:7d:a8:d7:a3:88:5b:da:a1:61:b3:bf:d8:75:
                    6a:a0:c5:94:1d:6f:3f:6b:0d:5f:eb:a0:ed:be:71:
                    03:d8:25:e2:91:fb:4e:c9:4c:44:e0:5e:47:45:d5:
                    5b:c1:ef:fa:ee:3c:25:b7:47:ae:0b:b1:31:0f:3b:
                    d7:d6:27:1c:be:66:db:f2:5a:2c:a7:8e:39:0c:c6:
                    ff:90:6c:bb:af:6f:78:5e:8d:2f:93:90:dd:ab:b6:
                    2e:2c:ff:de:bf:40:8e:a5:88:6a:66:c8:ef:13:03:
                    f7:da:94:16:73:29:87:f3:93:09:68:ee:5c:fd:90:
                    38:01:56:54:6b:09:3b:15:b3:be:df:3b:aa:7a:d9:
                    01:7b:e2:5e:d7:3a:63:1d:fd:b3:16:b1:be:ec:62:
                    1e:15:02:ca:92:00:c6:f4:41:f5:d5:cd:19:0f:0e:
                    a7:60:d9:34:7f:35:4a:73:eb:a6:c3:c6:fa:a6:f0:
                    1e:97:2c:38:83:92:a4:25:4a:15:b2:93:05:03:d8:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:E8:A4:29:F1:C7:48:04:E6:AB:42:5D:24:11:B8:D1:6F:B4:55
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:17:9f:92:c4:71:ad:d7:c4:d1:01:9e:54:60:7d:68:64:7b:
         55:36:e1:b8:fc:21:f4:18:13:15:8a:33:90:9c:98:12:88:e1:
         28:2e:b5:23:b1:dc:cc:9c:8a:dd:c9:f6:5a:d8:a7:d6:4b:3c:
         3c:af:e4:26:b2:22:2c:4d:27:b0:af:b7:bc:61:32:bd:20:be:
         39:1f:bd:d1:e7:78:a0:ab:29:6f:38:d1:d2:71:b9:68:9c:e8:
         ec:1b:24:4a:48:ad:4e:16:9e:bc:f4:5f:43:66:20:98:14:7e:
         71:a3:23:9a:c7:46:a4:a1:d7:79:40:30:1f:4e:a7:8e:fe:c1:
         f4:85:a2:00:2f:f1:2d:65:68:6d:5d:71:cf:93:e4:2b:5a:ce:
         46:1d:59:61:5d:98:a5:76:2b:2d:53:1f:5b:ed:6c:f1:21:a7:
         a9:fd:0f:41:41:ce:f3:d2:ff:c8:57:c5:4a:06:45:c2:5f:2b:
         d6:a6:1e:7f:83:9a:c0:9c:97:ec:7c:56:57:05:0d:9e:16:ae:
         0a:3d:09:fb:94:5f:be:ae:79:19:dd:a8:8d:be:16:d0:40:86:
         07:96:a6:5a:06:e8:11:22:b1:a5:7a:31:4d:66:72:f1:07:b1:
         bd:b1:0c:00:22:51:88:b2:20:9a:27:62:05:b8:0f:7a:62:e6:
         0c:53:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org