Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa
File:                     3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (raw, json)
Hash identifier:          6MsbCu7e7KAQrzdtLnFD72myg/Y+WCuw/P+y52398YQ=
Subject key identifier:   74:49:06:82:21:46:ED:53:78:90:00:0B:DA:AF:D7:B6:8F:3B:63:8A
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       02B37FEB697FFCCBE660D8B52368E4CE6A50B232
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa
Signing time:             Wed 03 Apr 2024 18:30:32 +0000
ROA not before:           Wed 03 Apr 2024 18:25:32 +0000
ROA not after:            Wed 02 Apr 2025 18:30:32 +0000
asID:                     266505
IP address blocks:        170.244.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b3:7f:eb:69:7f:fc:cb:e6:60:d8:b5:23:68:e4:ce:6a:50:b2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Apr  3 18:25:32 2024 GMT
            Not After : Apr  2 18:30:32 2025 GMT
        Subject: CN=744906822146ED537890000BDAAFD7B68F3B638A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:8a:f9:a0:e9:fa:28:65:bc:f3:e5:79:e2:
                    94:dc:d4:24:e9:ed:6f:18:93:b2:95:63:b6:d8:00:
                    dc:4f:0c:39:fd:43:da:52:e2:04:ef:c5:98:9a:fc:
                    1b:55:0f:d3:e3:d7:3c:21:5f:ce:91:7e:ed:19:5c:
                    a1:42:1e:7c:91:d1:cf:72:4c:37:b8:ef:d0:23:bd:
                    40:50:bc:47:61:52:7e:70:f8:81:e2:a6:21:41:81:
                    5a:d2:90:d0:79:8c:e0:5f:85:b5:4d:80:b1:0b:a2:
                    cb:4b:b3:62:05:47:9b:b7:09:2b:77:73:58:ed:37:
                    b2:58:a3:3f:e8:eb:4f:70:03:23:63:e5:b3:1d:3e:
                    d2:27:91:d3:28:78:02:cc:8b:14:66:82:98:58:0a:
                    96:af:02:cf:2a:f5:63:67:e4:ab:27:73:86:88:e4:
                    06:40:fe:c8:4e:d3:76:41:21:fa:c6:ad:d3:e5:5e:
                    d6:7f:4c:a6:6e:88:f6:9c:d5:b5:24:10:a8:a9:71:
                    01:80:cc:2c:20:36:f6:1f:7d:02:86:05:d1:b5:2a:
                    8d:60:1e:d3:6d:1b:40:d3:75:fa:05:d0:ab:57:b1:
                    54:4a:7b:0a:42:ae:98:fd:61:c6:9d:22:22:1d:d4:
                    f9:75:ac:82:29:8f:93:1b:c0:ee:f2:c0:8d:04:81:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:49:06:82:21:46:ED:53:78:90:00:0B:DA:AF:D7:B6:8F:3B:63:8A
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:05:f7:f0:3a:12:f8:40:1c:a7:86:17:3c:6d:d1:bf:46:
         33:54:6c:a8:e3:0b:0e:ba:e6:04:98:62:ad:b5:27:dc:29:98:
         6f:c4:85:e5:6a:de:cc:c0:eb:78:1b:6b:e3:d1:9d:80:20:f9:
         98:1a:40:1b:19:c2:38:b2:48:07:2f:4c:61:dc:d2:03:73:e7:
         37:8d:7d:2f:0f:ab:21:36:62:ba:02:f0:b8:a0:41:79:6c:35:
         f8:1a:05:f7:74:83:aa:f0:55:13:9d:a9:ea:a5:fa:54:47:24:
         d1:6a:81:1b:ff:8e:a0:2f:52:e9:60:c4:d6:66:fb:ad:9f:4c:
         a1:e7:55:95:b3:93:40:f1:aa:b2:36:82:b2:50:7f:f4:b0:ad:
         93:33:5d:d0:c9:30:db:39:ec:3b:88:c6:6d:80:d7:b9:1b:d4:
         6e:2c:21:8f:30:ba:15:18:69:97:f2:7c:5f:2a:1d:ba:e7:f3:
         dd:41:66:51:ff:4b:da:68:a4:d1:15:fc:6b:13:1f:9d:2c:6d:
         ce:75:58:ae:30:85:3f:00:ef:1b:ee:0e:04:ce:5c:71:a1:b0:
         41:24:07:66:8c:79:65:9d:5c:2f:4a:0d:fe:b8:5d:54:ad:52:
         17:f9:c1:8b:68:ea:7f:c5:87:94:05:2a:00:48:62:75:fe:fa:
         79:24:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:09 2024 by rpki-client on console-fra.rpki-client.org