Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e37302e302f32332d3233203d3e20323635323037.roa
File:                     3137392e302e37302e302f32332d3233203d3e20323635323037.roa (raw, json)
Hash identifier:          NijPf1yR+halBks1ueF/2frNkdD1s5n7k/yA7sS2dGw=
Subject key identifier:   BD:F1:F2:85:08:C1:30:DF:E7:6C:08:A9:16:B2:6E:51:6A:6A:05:12
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       626DA7E7A7CA9EDF7E356B89A27784A01317C345
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e37302e302f32332d3233203d3e20323635323037.roa
Signing time:             Tue 23 Apr 2024 12:39:21 +0000
ROA not before:           Tue 23 Apr 2024 12:34:21 +0000
ROA not after:            Tue 22 Apr 2025 12:39:21 +0000
asID:                     265207
IP address blocks:        179.0.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6d:a7:e7:a7:ca:9e:df:7e:35:6b:89:a2:77:84:a0:13:17:c3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr 23 12:34:21 2024 GMT
            Not After : Apr 22 12:39:21 2025 GMT
        Subject: CN=BDF1F28508C130DFE76C08A916B26E516A6A0512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:62:d5:07:9c:f5:c3:bb:3d:9b:00:b9:7d:
                    db:10:07:2e:64:08:0d:90:c3:79:30:2d:58:1b:2d:
                    85:df:81:eb:9b:18:0d:1b:87:05:10:07:ab:42:22:
                    69:7e:05:61:80:96:e3:4d:9d:66:da:24:57:4e:33:
                    f0:58:ee:70:02:4a:b8:b9:05:d6:24:15:40:28:49:
                    b4:d5:01:bd:64:16:d3:3d:10:c2:d1:08:a6:7c:06:
                    ea:65:1d:77:79:72:e3:df:ea:a9:86:de:e7:b7:f8:
                    15:40:94:8f:2d:61:db:ce:42:ad:84:98:d4:a2:c2:
                    b3:5f:6c:b6:9f:fd:25:5f:9f:f2:91:27:8a:43:b3:
                    3a:e4:2f:c7:51:95:15:df:50:13:7c:04:13:e4:59:
                    7c:54:67:ce:dd:06:4b:c2:19:50:c6:32:eb:86:88:
                    be:57:0a:c1:e3:14:13:2d:51:27:0e:ff:4e:fc:f8:
                    05:a0:e2:aa:bf:13:6f:c6:a0:f8:83:34:7e:2a:88:
                    fa:ab:c6:67:b8:0a:0b:cc:23:3b:3a:ae:8c:bb:f1:
                    9f:8c:77:3c:83:f1:29:1b:13:a4:e6:6c:05:1b:a8:
                    ca:ea:ff:94:8b:72:01:92:42:50:a5:04:1a:6a:92:
                    17:2e:0a:07:a8:5a:41:e8:cc:ba:e2:f6:39:72:c8:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F1:F2:85:08:C1:30:DF:E7:6C:08:A9:16:B2:6E:51:6A:6A:05:12
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e37302e302f32332d3233203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:ef:a5:02:85:fd:5b:ea:a8:53:92:c8:ef:3b:9f:b4:05:43:
         56:73:5a:b1:7a:5e:ed:7a:a3:76:65:33:96:71:23:d1:4e:fd:
         74:29:ee:84:3b:52:68:06:5c:17:67:13:cf:32:32:3f:81:92:
         58:a3:e1:52:03:34:62:dc:21:cb:61:54:46:d5:eb:e4:c1:31:
         49:d6:9c:da:b8:96:65:88:2b:ae:bf:80:42:92:f6:bc:fa:5c:
         12:7b:81:cb:77:66:c1:8b:25:c5:4a:d9:56:ca:0f:21:06:6b:
         c3:31:be:90:cf:b7:4b:68:12:a6:dd:c3:d3:d4:76:3c:05:bd:
         4a:93:8f:96:30:dd:08:6d:a2:41:b9:e5:18:f8:fe:65:ac:25:
         5c:28:e0:19:ad:32:a6:9d:7f:a1:66:b7:44:b4:33:d4:3b:e5:
         b5:4c:0c:15:f7:7f:97:2c:c7:13:66:b4:64:9e:d5:17:1d:9d:
         45:a4:81:52:9c:95:fb:d1:aa:aa:4d:84:31:01:b7:78:23:d0:
         43:ac:19:3f:03:1c:ce:e6:ea:6b:64:ea:c7:79:37:d0:e9:ad:
         13:3b:b3:99:83:8a:55:90:bf:0a:9b:e9:1c:9a:39:ba:ee:24:
         49:e2:8d:35:04:3f:f6:aa:b8:39:cf:30:6d:fc:53:6e:ec:12:
         f4:89:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org