Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
File:                     3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          FjuUeKu4t+MEVn2L/rbjk00W2fgKgZqC5UiQXffQFPM=
Subject key identifier:   91:4D:3B:A9:75:B4:96:84:C8:04:21:08:F9:EF:B8:C2:46:E6:DA:79
Certificate issuer:       /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial:       0D800174CE26A0C1BF98E89F1D854B9117B06DBB
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
Signing time:             Fri 16 Aug 2024 13:56:11 +0000
ROA not before:           Fri 16 Aug 2024 13:51:11 +0000
ROA not after:            Fri 15 Aug 2025 13:56:11 +0000
asID:                     271047
IP address blocks:        179.48.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
                          rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:80:01:74:ce:26:a0:c1:bf:98:e8:9f:1d:85:4b:91:17:b0:6d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
        Validity
            Not Before: Aug 16 13:51:11 2024 GMT
            Not After : Aug 15 13:56:11 2025 GMT
        Subject: CN=914D3BA975B49684C8042108F9EFB8C246E6DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:55:a1:9d:07:d2:16:ed:6a:a1:de:cd:12:
                    47:eb:fd:0d:fb:5c:2d:4a:b0:92:21:6b:36:16:60:
                    44:2a:f5:60:6e:e5:28:4e:5d:1c:38:15:de:14:60:
                    f1:74:41:50:26:c1:38:8e:9b:14:07:7d:e6:46:77:
                    ef:2e:fa:7b:77:2f:08:9b:5f:f9:6c:b0:d5:5e:d7:
                    7e:87:22:cc:8e:6e:ff:a3:c7:48:11:c3:1a:5a:ba:
                    00:87:75:44:73:53:02:9e:a6:ef:41:36:1a:60:ca:
                    59:90:dd:06:1a:16:c5:6c:8a:35:17:54:11:29:f9:
                    df:09:21:e1:7d:1b:25:76:80:fe:15:3e:4b:38:05:
                    fa:d1:ec:d2:e1:17:8f:41:ef:2e:e5:1b:69:f5:8e:
                    c1:65:e5:34:6c:84:da:06:a0:36:56:12:47:e9:28:
                    eb:55:bf:4e:ee:48:cc:e3:df:0d:cf:99:10:55:ee:
                    95:36:03:00:bf:aa:2d:d5:74:1f:b3:0d:f8:4e:76:
                    15:92:75:d3:6d:49:1a:18:35:b0:a0:47:bc:e9:42:
                    6e:64:65:c2:08:50:33:d4:8a:3c:a7:7a:b1:32:a6:
                    80:d9:91:9a:b2:df:54:95:34:8f:d4:0e:4b:09:e6:
                    9e:f9:e8:68:9c:dd:3b:bb:06:80:8c:1c:26:a7:5b:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4D:3B:A9:75:B4:96:84:C8:04:21:08:F9:EF:B8:C2:46:E6:DA:79
            X509v3 Authority Key Identifier:
                keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:3d:6b:e2:da:dd:c5:d7:d9:c1:a0:df:f6:23:a3:63:a5:
         d9:b4:a1:84:fe:7e:51:1a:9a:63:84:74:9d:b9:3a:3f:5e:c5:
         14:07:8d:b8:63:57:b5:92:75:d9:fd:cd:ca:c9:02:32:ca:de:
         4a:1f:ff:03:e6:03:62:3f:40:f0:21:0e:47:8b:3c:ed:f4:13:
         c1:1f:5a:09:2e:a1:e6:b5:48:9c:10:81:8c:40:84:9a:9f:b8:
         e6:f5:d1:af:5d:1d:b8:7e:c4:be:c6:f8:b0:94:be:45:03:ed:
         94:46:ce:59:0b:be:c1:58:71:79:9c:e1:38:76:75:0a:78:4e:
         ac:ed:f6:0c:38:c0:b8:d3:61:37:18:b5:0e:48:f4:8e:8a:77:
         76:85:b6:2f:5b:ed:26:56:d6:a1:09:0f:bc:b5:90:ad:32:d0:
         2e:32:8d:50:f2:ee:29:92:7e:66:98:20:64:9a:6b:e5:bc:10:
         50:0a:2b:58:1f:c3:b3:d8:b3:48:54:6b:b9:75:ad:10:3f:45:
         ee:1b:50:e4:dd:91:33:e6:77:7a:e0:60:8d:be:47:d2:e5:a5:
         6a:2d:cb:98:b9:e7:0e:f7:73:01:d1:3f:ff:3d:d6:8c:a2:b8:
         04:e1:24:e1:62:f6:23:fd:8c:99:f7:1f:bb:ab:03:f6:09:0b:
         66:db:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:33 2024 by rpki-client on console-fra.rpki-client.org