Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          YtQbPevbYb5tVbQOEmsymWqSpZkUYKwQIGI3oc8UsM0=
Subject key identifier:   E7:B1:B3:05:54:9B:80:9D:58:8D:68:63:B4:55:82:9B:30:01:73:95
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       3FE2ED11B73F4CA6A79E5460A5F5DC08F490EC25
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:39 +0000
ROA not before:           Thu 08 Aug 2024 00:36:39 +0000
ROA not after:            Thu 07 Aug 2025 00:41:39 +0000
asID:                     263641
IP address blocks:        179.127.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e2:ed:11:b7:3f:4c:a6:a7:9e:54:60:a5:f5:dc:08:f4:90:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:39 2024 GMT
            Not After : Aug  7 00:41:39 2025 GMT
        Subject: CN=E7B1B305549B809D588D6863B455829B30017395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:d6:93:71:22:27:5c:d0:e8:ed:b1:f9:08:
                    04:f4:51:89:fd:cc:6b:f9:02:61:26:58:b2:38:a3:
                    97:9e:20:88:f5:42:a1:d5:c6:2b:a4:75:af:7b:f5:
                    b3:a5:69:31:22:ce:e1:7e:5b:d7:88:7c:63:82:b2:
                    13:62:a5:89:9f:61:f8:63:13:0c:d0:65:ed:2a:1e:
                    fc:31:0b:f0:05:dd:e9:15:fd:8a:36:93:8d:26:ab:
                    9c:ac:b2:4d:a2:c3:94:05:66:e4:e9:80:0e:b6:cc:
                    fd:b1:da:21:5b:a5:86:c8:b9:86:3e:1c:2a:61:98:
                    1c:5c:cb:05:6a:c5:88:a7:a5:a3:2c:ce:ca:31:7f:
                    a8:d4:7c:37:a5:53:88:c1:d9:b6:68:73:1d:08:fd:
                    69:31:4a:36:41:22:dc:61:0a:bb:17:e8:b7:5d:3a:
                    da:63:68:a3:37:01:a2:49:e3:1d:a1:9f:12:0f:a5:
                    e3:d4:cd:55:42:e7:5e:94:a9:bf:32:aa:6d:ff:3c:
                    68:1b:cc:8d:ce:2f:74:cb:43:13:0f:1d:b3:1b:e3:
                    6b:38:8a:86:48:3a:ca:83:28:5f:a3:de:9c:a5:36:
                    c6:a2:b8:d2:1e:c1:86:1f:42:1e:a5:d1:2f:22:79:
                    45:c3:d8:c3:84:83:dc:ba:71:19:a1:73:35:82:a4:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B1:B3:05:54:9B:80:9D:58:8D:68:63:B4:55:82:9B:30:01:73:95
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135332e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b2:66:be:40:9f:63:16:44:cf:96:02:0e:59:8b:69:c1:5b:
         06:3a:98:74:72:66:1a:24:54:1f:bd:71:20:20:90:54:e9:ed:
         7d:53:62:a4:4b:33:ca:59:dc:04:a2:be:b5:f4:85:7a:e5:90:
         11:3d:85:07:35:ef:49:98:8e:ad:c9:ba:3b:88:f5:fd:f3:c8:
         c8:63:61:fa:2d:3e:4d:3d:99:16:dc:fd:24:98:12:d2:46:e2:
         ca:44:3e:e0:f7:12:49:5d:2d:5e:be:0e:23:db:4c:5b:83:e6:
         99:4c:97:40:77:10:c0:54:74:9e:97:d6:a6:9e:ff:2f:55:27:
         92:0d:5b:b0:fd:9d:4c:6f:fe:08:d4:bc:1f:aa:c8:fa:38:80:
         93:73:8b:0d:aa:11:c1:71:d8:c0:c8:1a:76:31:66:bb:9c:59:
         f5:86:12:93:c6:b2:e2:7e:36:7b:32:33:75:98:e5:7b:1e:ca:
         c6:ce:a8:02:e9:8c:32:9e:e2:0c:9a:8f:22:84:98:65:ac:51:
         c7:86:b0:90:77:8d:d2:08:27:43:8f:1a:fa:ec:31:38:02:1c:
         25:d4:58:9d:0b:24:8f:db:fb:f5:c9:9c:38:df:31:c0:de:cd:
         b2:82:7d:83:8c:e8:94:a3:80:07:bf:1a:f7:51:06:7d:59:f0:
         7e:78:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org