Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          19FpsrZkFwxwdHBLGWSkb7gVAUrdk0E0aw4Eid/T4+A=
Subject key identifier:   F4:01:79:CE:24:4D:0D:62:BA:54:6F:D7:0C:07:86:0C:2B:23:21:79
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       0C52D5EE6855619743454477C4CC89BEE982A7EB
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:39 +0000
ROA not before:           Thu 08 Aug 2024 00:36:39 +0000
ROA not after:            Thu 07 Aug 2025 00:41:39 +0000
asID:                     263641
IP address blocks:        179.127.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:d5:ee:68:55:61:97:43:45:44:77:c4:cc:89:be:e9:82:a7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:39 2024 GMT
            Not After : Aug  7 00:41:39 2025 GMT
        Subject: CN=F40179CE244D0D62BA546FD70C07860C2B232179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:22:4b:f4:b3:00:83:c0:35:f8:58:94:09:
                    14:3a:14:20:7d:fe:2b:7b:8e:20:a9:f4:7f:5b:f2:
                    7c:c7:59:3b:70:cf:87:37:d2:81:be:b7:66:2f:97:
                    97:16:68:3d:d7:76:9c:da:88:12:f7:45:9b:09:f1:
                    c6:5b:5c:60:d5:fb:3f:04:07:67:45:78:a7:3d:88:
                    1e:c7:2a:2d:1e:e2:61:63:27:e7:92:03:50:a6:3a:
                    21:ee:fe:2e:b2:6c:5c:2c:75:a2:fa:ab:3d:7d:f8:
                    76:64:91:4a:ca:5d:ae:cb:39:10:ad:45:cb:52:41:
                    a6:03:33:4c:b0:d3:17:66:46:c6:1e:2d:1b:5b:60:
                    08:f0:08:ae:f9:63:fe:f2:49:c7:ba:de:e3:7e:27:
                    9f:d6:21:0e:ad:f1:11:67:5a:b0:bf:7d:14:29:cc:
                    10:30:a8:42:00:bd:e9:cb:71:58:10:b3:69:22:df:
                    d5:d3:e7:80:79:49:0c:a7:ec:51:4a:c6:f8:56:9c:
                    d4:9a:ae:34:39:be:ee:e2:18:1b:a6:d7:48:4b:ac:
                    9c:b6:24:7c:46:03:f8:88:e2:3f:98:90:45:61:ad:
                    0f:f3:a2:d6:c5:b4:7f:ca:4b:53:8a:1e:f8:dd:dc:
                    f5:dd:91:15:cd:b1:66:7c:6d:20:54:e6:e6:43:82:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:79:CE:24:4D:0D:62:BA:54:6F:D7:0C:07:86:0C:2B:23:21:79
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:88:5b:64:0a:2a:cc:66:3f:bf:7f:7c:92:46:f8:aa:7a:
         fe:81:a1:3a:ec:3c:06:5d:65:ed:fa:35:61:8b:01:62:25:7b:
         fd:f1:6b:3b:45:c9:51:1d:35:e6:a0:90:20:68:2d:b4:6b:ec:
         32:58:ff:70:4d:73:91:4a:ff:c6:16:5e:ee:cd:8a:4f:1d:5e:
         89:fe:ee:39:66:34:e8:64:73:87:e3:95:ea:36:ad:e1:9e:5d:
         e5:65:b7:de:63:65:9b:ce:e3:a6:d2:a7:ca:59:be:fb:e9:33:
         1e:f3:97:3a:d8:21:72:6a:13:8f:3d:db:20:10:2d:d2:84:9e:
         34:4e:00:4a:74:89:6d:e2:ea:e8:59:f9:36:98:c2:c2:11:ac:
         9d:7a:8f:c5:82:57:f2:3c:c8:7a:82:ca:36:f2:54:47:f6:71:
         9c:94:d1:fa:5d:6f:a6:d8:b4:18:3f:0a:3d:79:1a:cf:4b:f4:
         f3:f7:e5:7d:96:b7:71:d2:c0:4c:d5:9e:47:a5:b8:e8:98:57:
         01:c1:7e:b8:ec:59:0a:08:8d:07:57:d7:aa:71:30:76:96:a9:
         44:d7:bf:4c:a7:0d:8f:29:44:1e:73:e0:c4:01:1f:a1:eb:d6:
         e5:46:10:bd:a2:42:74:5f:fd:22:48:f5:9f:61:0c:74:41:6c:
         08:3c:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org