Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131322e302f32342d3234203d3e20323730373431.roa
File:                     3137392e3130392e3131322e302f32342d3234203d3e20323730373431.roa (raw, json)
Hash identifier:          Asl6CixxeFILI8Uwpyhw7EONnMlliShtCCinNsBKNJk=
Subject key identifier:   3A:5A:FB:96:3D:0B:45:5A:20:7C:05:DB:84:F4:07:E4:09:2F:3C:08
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       1EEA3FBFE09FBACF4C1A0515BD5B26B686FA9B14
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131322e302f32342d3234203d3e20323730373431.roa
Signing time:             Tue 04 Feb 2025 15:39:29 +0000
ROA not before:           Tue 04 Feb 2025 15:34:29 +0000
ROA not after:            Tue 03 Feb 2026 15:39:29 +0000
asID:                     270741
IP address blocks:        179.109.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ea:3f:bf:e0:9f:ba:cf:4c:1a:05:15:bd:5b:26:b6:86:fa:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Feb  4 15:34:29 2025 GMT
            Not After : Feb  3 15:39:29 2026 GMT
        Subject: CN=3A5AFB963D0B455A207C05DB84F407E4092F3C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:0f:c6:14:ae:e0:a1:ad:fa:8a:b2:35:c0:
                    8e:22:5c:5a:fa:30:92:6f:9d:98:60:d1:ff:c6:31:
                    9a:48:c7:87:57:21:29:ae:69:ca:ee:33:a2:40:f6:
                    d2:88:b9:5a:d6:10:b9:a0:f4:99:52:27:56:83:b4:
                    f3:1f:da:46:9c:e4:b2:02:5c:f9:f8:d2:ab:39:12:
                    5e:da:80:10:06:88:74:db:44:9a:a6:80:28:69:25:
                    88:b6:6f:c4:2a:dd:4d:cf:d0:ba:a7:c7:f6:4c:89:
                    6a:af:7b:14:9e:76:4e:0f:16:e3:19:55:e8:0d:4d:
                    63:28:1a:31:8e:83:cb:f3:a8:da:85:6e:9b:ef:b8:
                    71:8b:27:a6:57:56:67:01:18:cf:31:f6:b5:12:3b:
                    f1:1b:fe:1c:36:83:66:09:05:26:b4:01:ee:2a:6b:
                    dd:99:f1:25:53:3b:80:f5:a3:9e:a4:e7:f4:dc:28:
                    d6:66:2e:f0:30:bd:38:7b:81:83:65:c1:05:68:b7:
                    7a:f8:d5:a4:d3:36:24:af:bb:9b:50:ff:cf:56:eb:
                    8d:e3:8c:b0:f3:54:a7:76:cf:92:a0:97:6a:03:8b:
                    85:4c:e0:2d:39:03:18:57:ca:b9:cc:f7:f9:5a:8c:
                    17:49:1d:fb:76:09:cc:2c:6f:37:71:94:01:37:55:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:FB:96:3D:0B:45:5A:20:7C:05:DB:84:F4:07:E4:09:2F:3C:08
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131322e302f32342d3234203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:76:69:d9:0e:37:19:67:4a:ec:8d:14:7f:a3:7f:97:6e:c8:
         c8:a4:cc:2a:f1:be:88:0b:13:92:73:81:3f:ee:03:7b:d0:91:
         21:75:03:84:0e:93:f4:f8:8b:59:f2:b3:91:38:9a:be:a1:c8:
         10:5d:93:0a:cf:7c:98:fa:ce:ed:e9:07:2b:26:54:3d:17:67:
         ad:ef:66:4c:c6:c0:dd:5d:6f:31:51:17:03:0f:df:5b:08:a3:
         70:e2:75:ad:42:21:a5:9c:ab:37:66:5f:48:0d:c8:07:db:49:
         f0:2a:4b:ba:c6:c5:a2:88:4b:9c:a3:bd:48:28:39:89:56:be:
         b7:a3:30:70:3b:e6:a7:fd:53:55:a2:99:77:82:ec:bc:61:16:
         bb:59:87:e2:67:5a:f2:16:54:35:0c:0d:11:cb:10:4d:9c:4d:
         bf:11:f5:53:49:0e:db:88:8c:b5:1e:26:60:4f:31:40:d0:61:
         58:a6:d7:36:13:c1:bf:ef:df:f6:61:bf:f6:20:4c:a1:1e:1a:
         2d:97:e0:b9:57:13:a6:01:32:07:f1:b5:ba:19:2e:e1:42:85:
         5b:d2:e4:d3:50:24:85:71:02:26:40:5c:05:50:19:9a:7e:d7:
         c4:76:eb:1e:e4:13:2f:f1:ef:c0:a4:05:bf:e2:cf:c6:c3:e1:
         1a:cb:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:37 2025 by rpki-client