Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37332e302f32342d3238203d3e20323633343135.roa
File:                     3137392e3130362e37332e302f32342d3238203d3e20323633343135.roa (raw, json)
Hash identifier:          MUX8Swbo+5Pp91PnVWcLhupxnI3LybQ9DDwV8/n03uk=
Subject key identifier:   50:EB:2C:09:0D:56:A2:EF:85:F1:A6:11:88:4A:FF:24:70:A5:03:CD
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       11EA95D1D6F2453E2CD913AD40BD323EE12E13B1
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37332e302f32342d3238203d3e20323633343135.roa
Signing time:             Fri 29 Nov 2024 12:46:44 +0000
ROA not before:           Fri 29 Nov 2024 12:41:44 +0000
ROA not after:            Fri 28 Nov 2025 12:46:44 +0000
asID:                     263415
IP address blocks:        179.106.73.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 04:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ea:95:d1:d6:f2:45:3e:2c:d9:13:ad:40:bd:32:3e:e1:2e:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Nov 29 12:41:44 2024 GMT
            Not After : Nov 28 12:46:44 2025 GMT
        Subject: CN=50EB2C090D56A2EF85F1A611884AFF2470A503CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:48:73:00:64:10:7f:75:38:42:76:c8:04:
                    34:8e:95:a4:03:ff:be:08:38:d8:c7:8a:87:83:64:
                    e9:34:76:f3:a6:cd:e7:35:de:33:66:37:54:0c:c1:
                    83:1d:98:2a:c7:70:6f:77:1d:b1:9c:04:ca:40:83:
                    4b:cf:7d:c6:1a:9b:e7:79:71:49:fd:7e:86:7f:56:
                    5c:ad:e8:ef:f6:1e:2b:17:4d:3d:38:c2:62:5d:e8:
                    eb:49:9b:49:2b:95:08:8e:20:99:16:2d:0e:bc:29:
                    96:f3:cb:89:ae:07:71:14:95:b5:63:42:67:c8:50:
                    f5:67:57:73:81:9d:e1:2c:61:2d:5b:23:43:42:89:
                    0c:1b:5b:62:34:43:50:83:47:2f:59:73:c7:fc:f4:
                    6d:82:0e:a7:4d:a5:b2:76:7a:e6:f5:c9:a4:bf:21:
                    ac:2a:a6:f4:80:ac:b1:39:bf:f9:4d:67:44:b2:36:
                    6d:ec:72:ec:d3:c3:7a:d4:2d:00:0e:a9:66:5c:8d:
                    05:0b:0f:8f:53:a5:b1:09:4c:99:9b:b4:01:60:33:
                    82:52:0d:80:b5:af:ce:1d:30:06:23:49:a8:8d:db:
                    5d:4b:b0:d5:0d:0f:72:15:82:88:45:9e:4c:52:b4:
                    5a:4b:53:b4:ce:bc:85:95:d3:41:37:5a:b5:62:90:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:2C:09:0D:56:A2:EF:85:F1:A6:11:88:4A:FF:24:70:A5:03:CD
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37332e302f32342d3238203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:1e:09:79:6d:5b:44:46:f3:ce:3e:42:24:96:82:cf:46:3a:
         04:e1:43:06:b3:da:c1:12:0b:25:94:bf:fc:37:1e:41:e3:5c:
         09:cc:08:bb:57:b4:68:77:e0:56:d3:b3:c8:6a:7d:cc:c7:e5:
         4b:d5:0b:60:1c:f7:69:63:3b:2c:8c:aa:26:e9:c9:65:bb:b9:
         0c:75:3c:f0:aa:47:9b:8f:c4:39:4d:6c:1c:1f:82:06:8c:c3:
         91:2c:0a:41:70:6b:a3:14:35:db:84:ea:ac:97:0d:ba:db:77:
         7d:6b:08:8a:04:60:c2:16:53:e4:e5:09:91:b5:96:7b:c5:1a:
         23:62:8d:60:8b:95:9a:ed:50:9e:5b:79:f6:ab:65:33:9b:8c:
         6b:97:35:d7:fa:55:8f:17:af:ac:6b:b8:2e:28:7d:8e:7a:a7:
         fc:67:25:a2:80:ec:7b:1d:09:a5:6b:96:30:0e:f7:36:34:82:
         a5:7f:e9:5e:84:c4:0e:72:6e:e0:04:ba:77:45:00:7a:61:d0:
         3f:dd:28:63:23:b4:25:c8:8d:43:99:5f:ba:13:9d:5f:76:ed:
         6d:f6:14:b7:00:34:12:1d:0e:15:6a:4b:63:2c:f1:1a:4e:62:
         fd:a3:dc:d3:94:67:de:5a:1c:ea:e2:29:03:78:dc:96:65:8e:
         e7:a4:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:53 2025 by rpki-client