Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131352e302f32342d3234203d3e20323730373431.roa
File:                     3137392e3130392e3131352e302f32342d3234203d3e20323730373431.roa (raw, json)
Hash identifier:          VL0VJtaAT+MshzAnasPT4ooyMBBIkbdjxDw6UBTl3KU=
Subject key identifier:   CF:C7:A7:FF:D9:D1:23:59:6F:2F:A9:0B:D7:0F:27:85:D1:31:E5:5B
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       470DB2986B9087E3023A61883F5E449A106F7FD2
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131352e302f32342d3234203d3e20323730373431.roa
Signing time:             Tue 04 Feb 2025 15:39:29 +0000
ROA not before:           Tue 04 Feb 2025 15:34:29 +0000
ROA not after:            Tue 03 Feb 2026 15:39:29 +0000
asID:                     270741
IP address blocks:        179.109.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:b2:98:6b:90:87:e3:02:3a:61:88:3f:5e:44:9a:10:6f:7f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Feb  4 15:34:29 2025 GMT
            Not After : Feb  3 15:39:29 2026 GMT
        Subject: CN=CFC7A7FFD9D123596F2FA90BD70F2785D131E55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:92:1a:5e:7f:8d:b1:31:d1:1e:55:23:8c:
                    78:93:72:58:de:19:b7:a6:c6:0a:9c:2b:88:89:6d:
                    06:65:2c:d1:0c:1a:57:cc:04:b1:d0:b7:2f:10:57:
                    c0:b8:62:31:76:38:00:96:36:44:f9:97:b1:28:6d:
                    d9:39:c8:d1:49:24:d4:b4:f3:20:09:5e:82:45:13:
                    f4:33:e0:2d:98:da:eb:b9:7b:07:9e:ed:26:c8:7c:
                    97:a9:75:26:ce:43:93:06:78:2b:5a:9b:ba:67:54:
                    3e:0b:6d:89:04:47:8d:6f:7a:48:3d:65:b7:c2:a0:
                    d7:00:f4:18:1b:7d:04:1b:1c:4e:4f:1e:87:c7:a4:
                    a6:cc:92:20:b4:ac:59:fe:7d:05:62:2a:6a:0a:96:
                    e3:be:89:9f:e3:46:a7:08:d6:fe:aa:44:1c:9b:7f:
                    73:f6:43:bc:74:af:bf:d4:71:94:96:0b:8b:69:81:
                    b2:ef:4e:51:1b:3e:35:4c:73:fd:b6:04:04:b4:23:
                    4d:31:99:86:92:2c:34:05:fd:88:f3:3f:5a:c2:5b:
                    7c:e5:64:28:ce:9c:f5:d7:8a:cf:3b:d8:95:00:9d:
                    65:23:8f:76:62:81:67:48:1c:93:34:08:d9:a9:fb:
                    11:35:3b:99:6a:b5:17:bc:53:9c:7e:41:04:5f:dd:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:A7:FF:D9:D1:23:59:6F:2F:A9:0B:D7:0F:27:85:D1:31:E5:5B
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131352e302f32342d3234203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:00:7f:00:17:97:16:d1:bc:9b:15:c4:8d:65:ee:16:d7:
         ac:0b:2c:22:c3:ad:1c:8f:a5:e1:97:d1:4e:44:1b:2d:8c:cc:
         39:86:ef:cf:87:b0:dc:14:bb:cb:2f:18:69:c2:b8:ed:27:e8:
         13:45:6a:fe:bb:6f:89:09:98:65:c3:36:87:f3:bf:a6:7c:22:
         15:da:b7:7d:87:b2:ad:15:a1:7a:84:bf:29:81:07:11:5f:ba:
         74:3b:ac:06:eb:f7:90:c2:9d:04:04:18:1e:aa:9f:ee:97:cb:
         ad:88:23:59:5c:5a:79:4c:14:50:24:eb:1c:ab:75:1b:dd:f3:
         2d:0d:77:73:e6:58:18:8b:5f:ac:c6:0f:ba:52:05:5f:8a:8e:
         d4:90:dd:69:1b:88:7d:d0:72:da:8c:70:a9:79:ad:fc:ec:5f:
         69:63:e3:20:67:c7:a8:ef:61:5c:d2:c2:ae:c9:8a:b8:0a:8d:
         4c:f0:7b:b7:09:e5:6a:c8:04:4f:a8:25:e9:90:01:a9:15:f2:
         f2:4a:d9:a6:99:76:e4:1f:b0:86:fe:21:10:90:59:74:ef:af:
         fa:4b:6a:ae:e9:70:63:17:1b:dc:bc:44:2a:df:e2:04:07:9e:
         83:61:e2:62:d3:98:f4:ee:58:0c:a5:4b:9f:36:ec:8e:f9:cf:
         75:99:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:44:41 2025 by rpki-client