Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa
File:                     3137392e302e3131382e302f32332d3233203d3e20323731333235.roa (raw, json)
Hash identifier:          PSPeKRSpqGh1GMfpXOlbOcrhsSQADnnh6ndv5oDYn4A=
Subject key identifier:   4D:8F:81:51:4E:13:D8:42:05:53:95:38:82:6E:BB:4A:3D:7D:5E:52
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       05A6E6CA4C912ED61861FD269BD788C89CE017BE
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa
Signing time:             Fri 16 Aug 2024 01:57:20 +0000
ROA not before:           Fri 16 Aug 2024 01:52:20 +0000
ROA not after:            Fri 15 Aug 2025 01:57:20 +0000
asID:                     271325
IP address blocks:        179.0.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a6:e6:ca:4c:91:2e:d6:18:61:fd:26:9b:d7:88:c8:9c:e0:17:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Aug 16 01:52:20 2024 GMT
            Not After : Aug 15 01:57:20 2025 GMT
        Subject: CN=4D8F81514E13D84205539538826EBB4A3D7D5E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:fa:ed:14:a2:f4:37:b0:36:67:31:04:84:
                    ce:07:06:2e:b4:75:17:8a:5c:0e:ea:f5:f3:f8:9d:
                    c6:93:78:dc:4f:a0:24:86:51:44:4d:9e:6d:95:e5:
                    a0:bb:2c:1c:0c:b9:a2:df:20:1a:59:93:06:e7:2d:
                    48:b4:14:07:5c:d0:2e:e6:7a:74:54:af:03:32:46:
                    81:86:fa:c0:90:13:d9:ba:10:fd:97:9e:82:7f:f6:
                    d8:6b:86:78:1f:83:2b:1c:19:8c:52:ff:09:89:e5:
                    26:37:1c:67:3e:d0:01:60:50:1a:21:05:95:0d:83:
                    56:77:f2:e0:e2:0a:77:3a:8c:f4:d6:66:2c:fd:e3:
                    94:03:c8:65:fe:72:2c:61:f8:fc:9f:29:ad:fe:12:
                    b8:e7:70:29:0a:c4:8d:a5:a8:7f:90:b5:a5:70:e4:
                    e7:c1:e0:a9:bd:0a:ba:c9:ee:b3:b5:43:c1:c3:dd:
                    ef:68:fb:04:43:82:42:66:7f:9d:cd:68:2e:c6:2b:
                    3e:89:2d:66:c4:61:c2:c0:9a:26:54:2c:2f:f5:55:
                    72:04:72:ae:c5:b4:1e:00:90:e1:21:c0:aa:28:ba:
                    c4:ea:bc:7b:6a:0b:6b:c1:2f:90:58:46:9f:27:3f:
                    d3:52:7c:e8:e6:a5:03:37:9f:f4:e1:eb:8e:38:a6:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:81:51:4E:13:D8:42:05:53:95:38:82:6E:BB:4A:3D:7D:5E:52
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:54:3d:25:c0:f6:48:57:49:25:25:96:e2:01:65:6b:a1:c5:
         4e:56:99:ca:ba:94:3e:3a:10:a5:8f:5d:04:f9:50:0c:b8:b8:
         87:77:2b:52:d6:c7:a7:17:97:ba:03:5b:e9:f5:63:39:98:68:
         75:25:c8:ff:c8:5b:e1:10:a1:81:80:de:58:81:cf:84:be:fd:
         12:ea:2f:9d:ff:bc:12:67:62:0b:5e:92:e4:f2:a8:0d:e7:4a:
         4d:4e:de:83:e2:63:12:91:8b:fa:f8:a1:db:2c:42:e9:60:10:
         64:c5:64:85:ed:89:50:3f:22:b4:58:d0:e7:70:cc:dd:f3:35:
         10:26:8d:64:35:f0:7e:02:f8:8c:d1:98:18:63:45:b0:48:01:
         e0:71:8f:50:8f:52:50:72:ea:a8:ba:e5:64:5d:76:42:19:a7:
         1c:88:4b:3a:53:46:20:6d:6e:ec:a0:9a:5c:b0:b0:8b:10:bb:
         9a:d5:25:a5:ff:ab:92:ee:e1:1c:56:7f:7c:2a:b8:70:69:24:
         ca:85:25:0f:da:d3:e7:31:04:d6:d3:93:6f:b0:87:d0:dc:7c:
         d6:0a:33:80:da:d4:af:6f:65:64:fe:b6:4f:9c:01:88:0b:56:
         eb:80:76:a3:0d:34:47:17:47:f8:d3:a7:9c:43:4d:75:5c:d0:
         62:c2:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:00 2024 by rpki-client on console-ams.rpki-client.org