Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137392e302e33322e302f32322d3234203d3e20323632333030.roa
File:                     3137392e302e33322e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          hx7X+h5snyu0KJmkS9Sz+w4lMeGhiMEQRR3WjUalYcA=
Subject key identifier:   B3:ED:5B:11:88:32:B4:48:BD:2F:44:BA:B8:C3:CF:59:48:D6:A2:4D
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       2EA89E58A796AA2333D369A7B6716D4D3A8E44D9
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137392e302e33322e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 03 Apr 2024 21:08:51 +0000
ROA not before:           Wed 03 Apr 2024 21:03:51 +0000
ROA not after:            Wed 02 Apr 2025 21:08:51 +0000
asID:                     262300
IP address blocks:        179.0.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl
                          rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a8:9e:58:a7:96:aa:23:33:d3:69:a7:b6:71:6d:4d:3a:8e:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Apr  3 21:03:51 2024 GMT
            Not After : Apr  2 21:08:51 2025 GMT
        Subject: CN=B3ED5B118832B448BD2F44BAB8C3CF5948D6A24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:a1:89:6b:50:ed:12:97:cd:5b:68:c7:79:
                    80:15:61:62:ab:75:bf:23:90:81:42:c5:4c:d4:d2:
                    28:dd:a4:42:ca:bd:75:88:97:55:2d:82:e8:3a:1f:
                    97:33:e9:14:ec:ab:aa:41:09:51:3d:ba:2b:0d:5b:
                    8e:57:7d:fd:ad:79:41:b7:3c:39:dd:7b:0c:59:57:
                    9d:d7:e6:86:28:e8:4a:4c:e4:3b:5b:ba:51:51:8b:
                    3c:83:4a:dc:0b:dc:84:4c:09:2f:a5:1a:26:d9:27:
                    ab:8c:49:70:4e:c5:eb:68:af:a6:94:8c:09:5d:1f:
                    7e:1d:7c:fc:9a:5b:78:4c:0d:53:c5:64:ca:f3:5f:
                    e6:5c:25:4a:75:d8:98:00:80:ae:de:57:62:12:5f:
                    dd:ac:6b:c5:35:be:56:1d:15:49:4d:ba:77:25:8d:
                    07:8a:49:51:3d:f5:e5:7a:1c:87:df:4a:66:4f:e5:
                    c4:3b:4c:0b:7e:dc:8d:09:29:f9:2a:67:0f:e6:65:
                    d5:4d:89:3c:88:b7:eb:62:04:1a:57:fe:9a:ce:c9:
                    cc:0e:00:b0:e1:5d:eb:ca:9c:5c:81:67:4b:ad:a2:
                    4e:2c:30:0b:c0:96:6f:29:8b:6b:1d:f8:9b:90:23:
                    83:e0:3d:35:c6:94:ea:5f:39:a4:3f:2d:c6:73:6a:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:5B:11:88:32:B4:48:BD:2F:44:BA:B8:C3:CF:59:48:D6:A2:4D
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137392e302e33322e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:20:47:23:2d:da:86:7f:37:a5:65:32:7f:b3:f9:05:06:d2:
         4f:7a:2c:47:75:03:32:f9:20:46:64:51:9e:4a:1f:6f:cd:e7:
         70:70:cb:84:bd:9d:ef:f9:1f:20:c6:41:a3:3c:6a:af:6d:15:
         2b:e8:6f:ab:a9:b4:3e:01:91:04:ef:8f:c1:fa:7b:03:99:ef:
         90:54:55:33:d1:69:a9:e9:0d:56:3a:3f:7e:c1:06:79:84:df:
         c4:d5:e3:08:08:d1:e7:0d:1e:82:c5:f7:82:e9:18:b4:04:77:
         56:2a:d1:62:07:12:77:1b:c7:bd:a6:67:d1:15:74:c6:47:f4:
         03:69:80:c0:c8:10:cb:31:fb:0f:71:91:80:3a:0d:fe:85:6e:
         84:9f:03:2c:52:b3:c7:36:73:91:0b:15:56:23:a6:af:81:76:
         ff:35:a3:2f:51:61:11:ac:03:d7:7e:b9:34:61:c3:0b:8c:96:
         a3:a4:0b:37:16:bb:c8:43:60:33:1c:67:f2:a8:3b:43:8a:3f:
         50:91:7d:e0:82:f0:30:fb:1c:f4:bd:0e:81:54:62:3b:66:0b:
         27:bc:38:fe:02:92:8c:9c:d2:7e:11:2f:8f:8f:58:8d:9c:8b:
         c6:f3:c5:d5:b2:82:c8:2e:3e:cd:e3:fa:1f:89:7e:54:f8:7a:
         7d:a2:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org