Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33322e302f32302d3234203d3e20323632373630.roa
File:                     3137392e3130362e33322e302f32302d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          +5jv9aess9oQHRPOZwSIoEbgEAQ10dHPKVOmmwQW0R0=
Subject key identifier:   22:29:66:10:5F:4B:7D:78:09:D7:8F:4F:E2:3A:24:7E:26:1F:D2:07
Certificate issuer:       /CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F
Certificate serial:       2815B4754259CE9530074011122358393C4A9C6E
Authority key identifier: B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33322e302f32302d3234203d3e20323632373630.roa
Signing time:             Fri 10 May 2024 17:26:33 +0000
ROA not before:           Fri 10 May 2024 17:21:33 +0000
ROA not after:            Fri 09 May 2025 17:26:33 +0000
asID:                     262760
IP address blocks:        179.106.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.crl
                          rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:15:b4:75:42:59:ce:95:30:07:40:11:12:23:58:39:3c:4a:9c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F
        Validity
            Not Before: May 10 17:21:33 2024 GMT
            Not After : May  9 17:26:33 2025 GMT
        Subject: CN=222966105F4B7D7809D78F4FE23A247E261FD207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:77:d3:aa:75:6a:3d:87:ca:85:6d:0f:49:
                    4f:32:1f:8c:2d:cb:27:9e:f4:4b:26:49:e2:31:25:
                    ff:b1:cd:78:d6:df:2d:8c:c7:66:52:9e:b5:5b:9e:
                    ad:7b:d0:2b:02:0e:a1:65:d2:19:0a:bb:4a:61:b2:
                    c4:94:3f:1d:34:a1:16:a3:fd:20:e0:59:8f:13:b8:
                    56:92:39:75:d9:6e:79:a5:0d:cb:36:e1:80:e8:b9:
                    dd:5f:20:f9:25:6d:de:f4:05:80:9f:ed:62:3b:b9:
                    92:76:b4:21:9b:7e:2a:87:a8:e2:01:1b:43:8f:7b:
                    44:b9:5c:2f:f3:fd:af:0f:e7:6f:2f:dc:08:a9:98:
                    c4:06:60:61:c9:14:c0:ef:8c:47:90:fd:e9:e3:df:
                    25:4e:c8:a1:46:76:06:7f:79:30:f1:87:27:42:10:
                    3d:10:6b:94:33:09:e8:29:aa:74:4d:50:46:f7:eb:
                    ce:46:10:18:21:95:12:ba:97:6c:49:13:0b:51:cf:
                    b4:03:0c:94:0f:1a:4f:59:29:53:bb:62:3a:5b:2f:
                    72:9b:b2:55:09:07:59:5b:65:8d:e7:1f:28:7a:7c:
                    7e:6a:9b:18:8d:77:a5:6b:2b:db:43:52:4e:0a:ca:
                    aa:b0:b5:39:bb:87:f2:53:10:be:6f:5a:72:53:27:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:29:66:10:5F:4B:7D:78:09:D7:8F:4F:E2:3A:24:7E:26:1F:D2:07
            X509v3 Authority Key Identifier:
                keyid:B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33322e302f32302d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:df:8f:97:17:8c:ba:91:4d:de:8e:62:1e:a6:61:7a:6f:ad:
         90:73:0a:31:cd:a8:84:f9:65:69:f5:d1:f1:db:09:d8:b5:7d:
         5d:27:a4:ff:c5:5f:30:47:c0:3f:77:36:83:f7:4c:31:30:f3:
         4f:35:0f:02:d8:c5:fa:bc:28:da:ec:c6:33:8f:35:0d:5c:f4:
         b3:63:f9:bc:9e:c0:88:fb:3c:24:d1:2f:a1:de:d2:be:b9:64:
         28:1c:51:0a:49:76:62:ae:20:37:0c:39:31:c9:3c:fa:d7:1c:
         ad:71:76:a8:61:7d:3b:97:72:8e:73:60:2f:aa:91:97:76:6b:
         d8:97:04:4d:bd:0c:37:c7:aa:de:79:1e:d4:da:c6:6e:0f:8a:
         3a:79:28:08:16:0e:60:5c:d4:6c:18:61:50:62:fa:44:07:fc:
         85:15:4c:8c:ae:98:3a:ab:cd:2a:53:38:b5:65:cc:b3:f8:8a:
         17:3e:7b:a1:5c:be:98:4a:65:35:f6:2b:ca:53:7b:96:c2:3c:
         58:91:b0:8b:9a:8e:4c:9c:88:3d:da:57:90:93:21:7a:ef:78:
         a8:ff:a0:33:46:f1:7c:8b:4b:eb:4a:f7:c7:e9:2a:95:05:0a:
         90:d0:7e:b7:5c:30:ac:49:d8:b2:aa:93:9d:66:75:f7:a2:39:
         36:56:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:38 2024 by rpki-client on console-ams.rpki-client.org