Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          d9PXVQJWtz0/a8RXXvfbv9E9gu7wqMIJ8/todhF12Js=
Subject key identifier:   35:7B:F9:06:F2:55:20:96:0E:C7:3C:AC:B1:DB:03:36:29:69:28:C3
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       1B3A222469F7BF6BBCBA514C1761F0FAB5B3AF3F
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:38 +0000
ROA not before:           Thu 08 Aug 2024 00:36:38 +0000
ROA not after:            Thu 07 Aug 2025 00:41:38 +0000
asID:                     263641
IP address blocks:        179.127.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3a:22:24:69:f7:bf:6b:bc:ba:51:4c:17:61:f0:fa:b5:b3:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:38 2024 GMT
            Not After : Aug  7 00:41:38 2025 GMT
        Subject: CN=357BF906F25520960EC73CACB1DB0336296928C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:13:88:06:c1:0f:7b:b5:ba:92:22:2b:e2:
                    60:bc:8c:8a:47:77:76:73:ec:1e:28:1a:44:3e:70:
                    0c:c8:08:17:7f:76:cf:82:86:6e:34:5e:b2:cf:a8:
                    8a:70:71:17:c2:48:68:87:16:21:13:ab:70:da:05:
                    aa:52:12:33:47:89:74:c4:00:0f:15:38:1c:1f:72:
                    0c:e3:be:20:28:3f:38:21:39:d8:8d:54:02:9b:25:
                    11:4d:16:64:b9:dd:54:27:6a:a3:d5:0b:03:af:d9:
                    78:33:92:35:1f:6e:f4:42:da:50:15:2f:27:11:d8:
                    94:c2:79:9b:08:8b:19:10:18:d1:c4:d5:2c:a5:d7:
                    4e:35:69:62:1d:90:9a:92:54:f4:10:43:d8:a0:8d:
                    28:ce:32:b0:cd:95:d5:45:ac:12:4f:20:30:a7:a7:
                    ed:b3:89:ce:4d:9e:10:3d:f7:3d:81:b3:a4:53:e0:
                    f5:e0:09:a0:65:f3:7c:07:1f:b7:09:09:04:e9:99:
                    4b:91:3a:a7:83:6e:cf:b1:b0:96:c8:ba:f0:52:03:
                    27:fc:1c:5c:b5:1e:63:00:a5:25:42:ac:b4:cc:53:
                    11:43:35:07:45:be:e5:58:88:73:97:6d:66:e0:b6:
                    85:60:87:51:6b:2d:8f:76:08:25:04:29:7b:5f:75:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7B:F9:06:F2:55:20:96:0E:C7:3C:AC:B1:DB:03:36:29:69:28:C3
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:27:21:dc:cd:df:36:c9:4b:4a:ae:1c:cc:77:82:ed:c3:14:
         a9:3c:2e:a5:92:c3:38:b6:16:d7:72:bd:22:40:cf:65:13:81:
         41:27:50:ef:d3:e9:96:76:6f:22:09:8d:9b:15:43:db:c5:db:
         4f:7e:1a:8c:7a:c1:35:7b:28:db:42:b7:96:fc:ad:e5:4e:d0:
         68:cd:ac:b3:f9:33:a8:a0:f1:5c:19:23:7a:52:6a:19:94:39:
         54:3b:af:5e:3d:66:11:a2:09:06:c7:8d:0e:9a:68:85:78:9f:
         a0:a0:b8:1a:62:91:08:1e:01:ff:f1:d5:e3:7b:ac:d2:4e:62:
         1d:bb:83:c9:26:38:a3:9e:0e:b9:0d:03:90:af:13:65:9c:6e:
         dc:af:98:6d:f6:d1:38:ec:8f:61:60:db:91:f7:94:02:bd:89:
         ca:90:9f:68:76:eb:ce:7d:95:c2:e2:27:af:78:c4:f3:7b:b9:
         3a:be:1a:53:76:f5:f4:74:d5:a4:c0:4d:85:0b:d8:7f:7c:2e:
         0a:5b:35:e4:ca:7c:c0:e7:41:12:aa:bc:d4:9a:77:bd:31:87:
         83:8b:c4:8b:61:84:b0:1b:2d:c3:0c:6a:25:e0:86:bf:5e:49:
         b7:ca:68:48:1e:ef:6d:6a:e0:68:67:38:b6:2c:ce:57:07:b1:
         98:d3:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org