Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
File:                     3137302e37392e302e302f32322d3332203d3e20323636323839.roa (raw, json)
Hash identifier:          wJm2252XxYpeOU8w7m1qkMaT98mOUFkcUs0/Wi+9EF8=
Subject key identifier:   F1:F2:FE:36:05:E6:C5:17:BC:28:65:0C:CA:B1:28:45:B5:31:29:2E
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       2583658D1ACB99B44046D0FDBE6723D88A902EDE
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
Signing time:             Wed 17 Apr 2024 17:39:55 +0000
ROA not before:           Wed 17 Apr 2024 17:34:55 +0000
ROA not after:            Wed 16 Apr 2025 17:39:55 +0000
asID:                     266289
IP address blocks:        170.79.0.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
                          rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:83:65:8d:1a:cb:99:b4:40:46:d0:fd:be:67:23:d8:8a:90:2e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Apr 17 17:34:55 2024 GMT
            Not After : Apr 16 17:39:55 2025 GMT
        Subject: CN=F1F2FE3605E6C517BC28650CCAB12845B531292E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:06:82:38:8b:34:d5:32:cb:02:8e:ca:07:
                    39:5c:f6:59:68:a1:76:4d:2f:9c:5b:3a:f2:67:57:
                    98:34:71:d8:18:95:60:eb:9c:1f:1c:4d:1f:f9:25:
                    72:2c:2f:a9:77:14:c7:da:01:5c:e6:70:e9:ca:c9:
                    ac:b4:01:21:25:d3:8b:8a:2b:1b:6d:3a:b0:b2:37:
                    cb:9a:09:8e:d3:ef:33:59:19:04:ce:ce:1d:73:80:
                    be:82:0d:d2:bf:28:56:f2:16:bb:a4:d6:87:be:64:
                    4d:93:2e:7f:1b:7a:1c:15:1c:7a:73:9b:3f:ee:eb:
                    f7:3a:11:b1:18:35:92:c6:c6:83:00:b2:7b:82:32:
                    22:b5:e0:ee:96:45:a8:9a:25:49:3c:d0:94:3f:76:
                    db:3f:ae:40:21:34:7a:f7:30:d0:e8:94:91:84:c2:
                    b3:bb:c9:c0:14:87:a3:4f:48:7a:88:39:a5:0f:80:
                    a4:49:6b:43:f9:a5:4f:34:72:b2:25:7f:3a:4e:d1:
                    d8:45:12:e1:0b:e0:ce:e1:9e:c2:cb:1a:99:6e:0c:
                    f3:ac:5a:7e:99:61:bd:8a:17:ad:08:8a:37:ec:94:
                    7c:77:56:56:34:60:4c:2d:5b:53:d7:4b:38:c1:4e:
                    27:a9:97:65:1d:cf:87:c3:de:a7:6e:16:3c:cd:1e:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:FE:36:05:E6:C5:17:BC:28:65:0C:CA:B1:28:45:B5:31:29:2E
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:bc:11:07:84:80:9e:48:b2:da:e6:d6:00:ee:76:a0:37:5d:
         b0:79:c5:42:03:83:5e:4b:31:16:78:f2:9c:dd:b2:8f:63:1a:
         9b:8e:ba:4e:f0:34:6a:42:7e:a9:65:69:ab:dd:05:a2:9d:a0:
         2d:b0:98:b9:0d:b1:3f:c1:60:24:f1:0a:7a:5a:47:95:2e:e1:
         d9:6b:c9:81:a5:08:3a:4a:b5:46:f5:3a:76:13:3d:14:69:b8:
         82:b9:cd:55:f6:be:c3:d4:61:51:84:00:ab:7c:29:79:35:3c:
         72:2d:cc:5d:a4:ff:99:ec:3e:8f:f0:ac:e7:c8:00:0a:4e:08:
         90:d1:53:ae:a0:59:db:76:5b:8d:96:c5:cb:df:ec:9f:20:43:
         79:6c:99:02:21:36:e3:79:f5:97:96:79:a1:aa:81:f6:f0:aa:
         16:56:33:7d:f0:d2:96:5d:1e:cb:0c:94:b5:14:17:ec:b3:20:
         d5:30:b8:91:88:41:b6:4b:62:92:5d:e2:41:f6:cf:55:79:60:
         0e:75:bd:3e:60:ad:a0:67:51:ac:d2:0d:88:56:27:19:a9:de:
         8f:42:3c:01:2a:d9:41:7a:c7:5d:63:cb:f7:b1:38:0e:4f:63:
         eb:73:96:09:ab:08:7f:89:68:f9:bc:1a:ab:ad:57:ee:2e:d0:
         53:b2:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org