Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          J67j6SGCcUKTNL0/lt3L/AHm9IwkahK9nocDQsTg8vo=
Subject key identifier:   24:A0:93:B0:DF:08:58:35:A0:E5:08:B6:1E:99:A7:D9:36:51:FF:3B
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       14B9F231924D65F4DF8EBA5D8BE30682220D08DB
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:38 +0000
ROA not before:           Thu 08 Aug 2024 00:36:38 +0000
ROA not after:            Thu 07 Aug 2025 00:41:38 +0000
asID:                     263641
IP address blocks:        179.127.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b9:f2:31:92:4d:65:f4:df:8e:ba:5d:8b:e3:06:82:22:0d:08:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:38 2024 GMT
            Not After : Aug  7 00:41:38 2025 GMT
        Subject: CN=24A093B0DF085835A0E508B61E99A7D93651FF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:a8:a9:1c:77:e8:2a:22:ec:26:03:1a:47:
                    92:26:68:a7:d3:33:89:1c:49:5a:93:8d:bd:33:45:
                    ba:8a:bd:90:86:df:46:5c:17:b4:02:65:e5:6f:9d:
                    3a:d8:81:10:12:2a:90:c9:fd:6c:6a:cb:e2:d3:bb:
                    61:32:31:e0:c4:aa:31:dd:c7:92:22:b4:1b:67:89:
                    fe:5e:f3:88:66:02:bd:43:24:09:93:e7:a7:18:00:
                    4d:d6:80:cb:49:92:b1:77:dc:31:c5:da:e8:69:f5:
                    15:dc:be:54:5a:6a:7a:52:b9:33:99:39:e3:8b:c9:
                    85:3a:cf:fb:97:af:2a:db:d5:9c:fc:22:32:7f:9a:
                    b0:2f:64:a2:93:16:87:48:dd:16:3e:2f:51:2e:fb:
                    e0:27:ea:27:cd:9f:d8:a5:eb:c5:65:b1:a2:44:86:
                    e9:d9:d8:93:a4:9b:35:95:17:6b:f9:0c:07:f3:46:
                    31:75:35:0b:5d:05:63:74:b3:70:ae:16:ad:99:2f:
                    b3:d2:5f:b9:af:9f:a7:d5:82:72:7f:c3:01:67:0b:
                    e3:09:f5:18:b4:b7:70:50:e6:0d:72:80:d9:78:0f:
                    fd:a2:37:4c:c0:85:57:67:8e:ee:cd:52:9f:a4:94:
                    42:63:8c:9c:d0:d2:a0:d9:6b:2d:8f:83:c5:f3:9a:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:93:B0:DF:08:58:35:A0:E5:08:B6:1E:99:A7:D9:36:51:FF:3B
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:22:fc:57:01:46:9b:31:6c:5b:e5:fc:55:87:44:d5:07:8a:
         14:84:d5:4f:43:14:a0:9d:db:eb:19:a4:23:6c:9f:c4:c4:44:
         bb:d1:89:49:e5:a7:ff:cc:b6:83:85:bc:2b:3b:3d:5e:14:6c:
         b7:25:d0:d0:d4:83:f0:dd:7a:bb:fd:55:cc:c7:07:6e:60:54:
         b5:9a:01:9d:0d:65:e7:50:2c:cd:c9:4d:ad:e2:11:83:6d:8a:
         cb:6a:80:1f:cc:38:f3:1b:5d:b2:22:ee:b7:ea:42:2a:fa:b6:
         7f:c7:f7:3d:cc:a3:2c:57:ae:44:81:09:e4:3f:d2:da:bc:c4:
         fe:d8:8e:f8:90:ef:1c:b3:81:da:0b:96:a4:57:c9:98:26:5c:
         ae:a5:ad:98:2e:4e:70:f4:a3:85:e1:f0:39:36:e4:b2:98:c8:
         44:5e:c7:6a:74:ec:31:30:e5:2d:f7:ad:f9:35:ac:3c:75:da:
         ec:cf:77:e9:30:48:82:29:bb:a4:95:2a:04:47:f8:d7:15:c2:
         a7:85:e0:b3:1e:95:d6:da:c0:52:ec:8c:68:fd:8e:5b:c7:de:
         05:fa:85:2e:15:17:3b:58:52:fa:50:c4:1a:d7:31:6e:2b:b6:
         17:e0:f4:2a:ef:d9:c6:9a:56:f1:17:5f:28:1e:d1:1b:b3:a5:
         dc:76:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org