Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa
File:                     3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (raw, json)
Hash identifier:          jqgsi4Sq2GGek0tBJ9nxrdX7K8MskU0gnahmvL22E90=
Subject key identifier:   FB:EC:4E:E1:E5:03:6A:A5:A9:0F:5D:E7:F4:77:20:8D:81:2E:B0:6A
Certificate issuer:       /CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
Certificate serial:       4D6CDA473886AE16A67ABAE8516A326564CE65E1
Authority key identifier: F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa
Signing time:             Thu 04 Apr 2024 15:10:49 +0000
ROA not before:           Thu 04 Apr 2024 15:05:49 +0000
ROA not after:            Thu 03 Apr 2025 15:10:49 +0000
asID:                     271177
IP address blocks:        179.51.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl
                          rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:da:47:38:86:ae:16:a6:7a:ba:e8:51:6a:32:65:64:ce:65:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Validity
            Not Before: Apr  4 15:05:49 2024 GMT
            Not After : Apr  3 15:10:49 2025 GMT
        Subject: CN=FBEC4EE1E5036AA5A90F5DE7F477208D812EB06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5f:12:07:02:e3:59:a5:1f:80:0c:d7:6c:7f:
                    9a:a7:18:d4:73:ef:c6:bd:36:63:77:9c:cf:b5:4e:
                    c8:8b:0c:67:2d:50:11:44:3e:75:8d:69:c1:e7:1b:
                    43:d0:ad:db:34:09:58:2f:57:8c:83:08:a4:f9:70:
                    c2:7e:bf:e6:01:29:64:fa:85:91:96:6a:67:2c:dd:
                    86:8f:c0:cc:ec:79:4a:c6:73:f8:92:fc:9c:d8:87:
                    ea:04:5f:7d:7e:c3:b0:18:30:ed:af:82:79:de:74:
                    b2:53:86:ba:0a:e6:06:72:b0:ee:06:82:db:1f:0a:
                    f2:89:3d:b1:17:c1:63:4e:51:76:c8:b3:f8:e5:9e:
                    f3:ed:6a:da:2d:d4:87:96:1c:9e:38:dc:aa:31:e6:
                    6d:89:79:43:75:77:d6:ea:1e:9c:cd:65:da:9a:11:
                    db:ca:0b:42:6e:ff:41:a2:62:71:a5:3a:81:d1:e7:
                    93:62:5a:5c:7d:5a:fc:28:6c:f3:81:b5:1f:eb:af:
                    d1:e6:26:b5:cf:52:7e:a9:98:05:8c:6f:a2:d6:fd:
                    4b:7b:ae:e0:cd:ff:b4:0f:4b:92:1a:85:29:31:49:
                    82:9b:68:22:91:37:91:91:03:ee:64:d1:db:23:e6:
                    5b:fe:c4:c7:df:cf:fd:86:4f:dd:6d:45:23:90:d5:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:4E:E1:E5:03:6A:A5:A9:0F:5D:E7:F4:77:20:8D:81:2E:B0:6A
            X509v3 Authority Key Identifier:
                keyid:F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:f3:9b:2c:eb:39:47:5e:bf:f5:8c:a6:78:98:d3:7e:6d:
         34:ce:c3:a9:fc:29:19:09:b3:89:6d:64:1d:84:14:c8:0f:d9:
         86:84:3d:05:c0:43:55:51:5b:dc:35:40:00:96:d9:dc:fc:5e:
         69:fd:4b:79:4b:23:fb:db:4e:ce:3e:7e:02:9f:f0:ba:75:9a:
         a3:3a:3a:82:b1:ff:4c:e5:81:d1:c1:20:2a:ba:1f:16:f9:48:
         1a:3d:0d:74:f3:bf:03:47:a5:a0:d1:ab:b4:a3:04:a3:f9:7a:
         76:a0:a6:00:8d:da:dd:5b:bd:25:f9:45:c4:8f:e2:93:ba:40:
         87:cf:cd:3d:78:75:f8:22:25:a2:73:f9:04:3f:de:14:01:32:
         23:57:70:c2:d1:9e:4b:12:35:92:98:48:cb:43:a3:77:a2:a6:
         27:2a:4c:b8:19:9a:f2:0f:84:1a:60:82:d3:4c:92:a9:a5:d8:
         e3:df:13:d9:f4:3e:50:a7:93:c4:7c:3d:c7:f6:27:47:c3:53:
         4e:6f:b1:a6:2a:c2:d5:cb:6e:38:a2:aa:86:ab:9e:4d:6f:92:
         89:43:a2:ce:e2:89:34:dc:bc:88:9f:ed:4c:d2:67:7b:ca:20:
         89:c7:ea:7e:a0:c8:1e:df:75:dc:e3:89:5b:99:cc:b9:96:4a:
         96:f2:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:39 2024 by rpki-client on console-ams.rpki-client.org