Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/3137302e37392e39352e302f32342d3234203d3e20323636323936.roa
File:                     3137302e37392e39352e302f32342d3234203d3e20323636323936.roa (raw, json)
Hash identifier:          bzw2k6t/yebRwisYRjR08yUwY5ftw1tx38qPQeSYdHk=
Subject key identifier:   7F:85:C3:B7:FC:04:93:CC:5B:8C:A0:4C:DD:A4:66:D7:59:4C:CD:25
Certificate issuer:       /CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
Certificate serial:       421FC0A601EF0E024ACE5F28BD95B25B0784341A
Authority key identifier: 57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/3137302e37392e39352e302f32342d3234203d3e20323636323936.roa
Signing time:             Thu 12 Dec 2024 14:48:35 +0000
ROA not before:           Thu 12 Dec 2024 14:43:35 +0000
ROA not after:            Thu 11 Dec 2025 14:48:35 +0000
asID:                     266296
IP address blocks:        170.79.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1f:c0:a6:01:ef:0e:02:4a:ce:5f:28:bd:95:b2:5b:07:84:34:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
        Validity
            Not Before: Dec 12 14:43:35 2024 GMT
            Not After : Dec 11 14:48:35 2025 GMT
        Subject: CN=7F85C3B7FC0493CC5B8CA04CDDA466D7594CCD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:c4:52:4c:71:41:d1:f8:84:b6:77:d5:a6:
                    c9:fa:9c:c8:8a:1f:e5:bd:36:b4:33:85:ad:e7:b8:
                    8e:19:7f:c6:ab:3d:59:cc:d9:1b:fc:5f:16:85:56:
                    5d:9a:42:6c:7d:e6:8a:57:46:37:51:a3:05:a5:bf:
                    2e:e4:6f:a4:42:65:f9:9d:68:cc:9a:00:ac:20:59:
                    a9:44:2c:9b:1f:e7:17:23:76:1b:61:ca:6b:82:6b:
                    9f:8b:5f:b7:b8:6c:66:93:64:1a:27:9c:a5:89:da:
                    e1:07:f3:90:23:e2:b8:bc:ac:8b:f4:e3:44:7e:5b:
                    0f:32:f1:94:02:7a:b4:93:e6:da:c2:9d:e0:00:fd:
                    0d:43:f6:4d:8d:6a:54:0a:ae:43:91:0d:94:43:c2:
                    ea:8f:15:e9:7d:0a:11:85:7c:eb:22:85:c1:36:e0:
                    e6:9e:10:d6:8e:fb:60:6d:fb:d0:ae:0d:9f:5b:4e:
                    6e:12:3b:87:18:56:64:02:5d:1d:f1:13:13:3a:8a:
                    00:6b:8c:d4:34:dc:f3:f6:b3:e4:1b:e9:49:5c:b0:
                    d5:bf:6f:b7:97:60:a4:cf:9c:14:45:f9:68:60:c4:
                    22:f7:e7:00:73:70:a7:37:10:02:e1:fb:e7:a6:63:
                    26:66:ca:1a:82:21:9e:4a:e6:b0:95:ad:b9:42:f4:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:85:C3:B7:FC:04:93:CC:5B:8C:A0:4C:DD:A4:66:D7:59:4C:CD:25
            X509v3 Authority Key Identifier:
                keyid:57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/3137302e37392e39352e302f32342d3234203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ec:40:d3:7b:fb:cf:2b:9d:a3:64:48:49:3c:b5:5e:5b:42:
         e8:d4:e4:a2:28:d7:da:88:05:d1:b3:a5:f0:b9:f3:02:2d:62:
         ec:55:69:78:2d:a7:80:03:72:2f:18:e1:4d:07:5d:13:d5:05:
         b8:ec:54:05:a8:c2:3e:58:db:2c:24:82:6c:df:8b:29:58:d0:
         e1:71:9c:4d:fb:1b:78:cb:b7:5f:0c:68:d2:de:9c:f0:43:eb:
         e1:bc:23:15:ba:7f:95:3b:2a:78:64:cd:90:31:7d:b7:f2:ad:
         f5:e1:b3:a7:74:09:f8:56:df:35:b9:e3:cc:fb:26:8e:24:0e:
         30:45:cc:2c:fd:ad:ea:b4:61:4a:3c:b3:68:30:6d:4a:ef:5b:
         ef:99:56:93:31:d3:bf:35:f1:2b:f4:bd:45:d6:16:fd:64:5a:
         3e:3f:69:7b:9b:d6:d3:55:96:9b:55:61:77:9e:32:e0:87:d2:
         24:87:ae:5d:ab:ee:0e:b8:2a:be:1c:a8:12:2b:5b:e2:9d:97:
         eb:a9:db:86:11:8f:f7:36:8a:5a:4c:ae:df:90:53:b6:40:67:
         95:bb:05:b5:e7:66:fd:aa:49:ab:a6:36:37:e0:8e:1b:43:fb:
         c1:43:ac:0a:99:76:7a:ea:60:f2:74:9d:ef:57:cf:29:5b:b3:
         11:53:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:50 2025 by rpki-client