Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135362e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135362e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          eR9zjGViKpmfCW9dYskaLbOyLovvR90uvr9VJDzMW0w=
Subject key identifier:   54:EE:A6:F1:20:AD:68:EE:DB:61:AD:6D:9D:1B:85:CF:38:49:26:40
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       1BE46FDD4271586A176E96A927BFBE018B46C454
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135362e302f32342d3234203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:38 +0000
ROA not before:           Thu 08 Aug 2024 00:36:38 +0000
ROA not after:            Thu 07 Aug 2025 00:41:38 +0000
asID:                     263641
IP address blocks:        179.127.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e4:6f:dd:42:71:58:6a:17:6e:96:a9:27:bf:be:01:8b:46:c4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:38 2024 GMT
            Not After : Aug  7 00:41:38 2025 GMT
        Subject: CN=54EEA6F120AD68EEDB61AD6D9D1B85CF38492640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:be:71:96:1f:97:3e:b6:40:f5:5d:86:e4:
                    af:89:c6:c8:3b:2f:1c:98:7e:c9:e1:26:02:68:da:
                    d1:c3:4b:31:5b:a0:b6:3f:99:ff:29:f0:66:e2:ec:
                    1f:19:96:60:3b:7c:df:7d:33:da:ed:89:a8:f4:e5:
                    87:b8:61:f8:98:0f:e0:db:95:5d:3c:14:98:cf:19:
                    de:7f:75:0e:10:fa:3f:07:47:89:37:f9:dd:18:d7:
                    10:5e:cb:2c:23:e0:ca:18:71:8e:68:f0:00:a1:f5:
                    ba:81:68:96:a2:8a:89:0a:a0:4e:e0:9e:8b:44:47:
                    b0:13:33:96:62:aa:40:5d:85:aa:c5:92:03:db:6c:
                    50:da:95:bf:72:02:cf:d6:47:5d:3d:ee:e2:40:05:
                    a4:84:09:1d:de:f8:e0:60:da:22:c7:60:00:b2:f8:
                    82:e5:ce:2d:d5:67:6f:5d:ae:f6:8f:a5:d9:8b:cf:
                    76:50:d8:be:10:42:02:c7:41:fc:5f:0d:d1:75:ee:
                    99:51:d0:21:ae:26:d6:dc:30:46:1f:b7:d3:02:2d:
                    fa:bb:e9:83:a5:36:1c:92:64:d1:24:87:32:b8:34:
                    ba:dc:78:45:49:9a:c0:1d:ac:80:cb:a2:eb:83:34:
                    ac:a3:4f:b9:06:0b:a8:6f:0a:82:d8:41:6e:96:21:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EE:A6:F1:20:AD:68:EE:DB:61:AD:6D:9D:1B:85:CF:38:49:26:40
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135362e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:3a:4c:98:9a:ad:6e:f3:45:2e:05:05:27:00:3f:70:24:
         8b:6a:8d:71:69:b7:bf:81:ae:c7:6c:8f:17:56:81:8f:79:07:
         08:0e:57:7c:7f:2a:05:83:b9:53:29:48:cd:14:17:d3:2d:6d:
         c8:1e:e9:80:22:c9:77:ff:67:2c:cd:4d:ac:e8:a8:cb:aa:98:
         d4:a3:16:30:19:3a:c5:1b:06:4f:4c:78:bf:bb:2f:bd:5d:74:
         0d:ad:72:b1:4a:e0:50:6c:33:65:66:df:d0:e2:ed:c2:22:09:
         d8:fb:a2:f7:5b:72:d9:b2:a2:34:3b:57:db:98:40:e0:5e:b7:
         cd:fa:bd:0f:fe:7d:ef:cb:ad:59:0e:9d:3f:c1:87:97:11:06:
         bc:4e:e8:3d:03:53:72:fd:b4:fc:42:69:63:82:07:72:79:31:
         a7:b1:71:bb:45:7d:01:89:87:b2:43:07:3d:dc:e8:4f:d3:0e:
         32:3b:34:5d:a5:59:bf:f4:6f:45:25:02:13:35:fe:17:dc:27:
         26:79:67:bf:57:59:72:f6:dd:57:99:37:9b:cd:2c:22:fc:6a:
         47:53:d2:ec:d9:46:a8:d2:55:7c:38:41:a3:03:d7:51:87:ed:
         36:38:f4:f7:5a:f8:20:f4:b5:40:7a:a2:18:bb:20:51:84:02:
         97:69:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org