Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130382e302f32332d3233203d3e20323731313530.roa
File:                     3137392e34322e3130382e302f32332d3233203d3e20323731313530.roa (raw, json)
Hash identifier:          NG1j2sZ5tNOHq8kppuRmN5thgd9yj9/bCOGPRaJEaeg=
Subject key identifier:   14:9A:6D:82:FD:1F:B0:D6:55:AF:7F:C1:6F:CF:E8:B4:A3:E9:C5:6A
Certificate issuer:       /CN=B576170C915419B17FE7F1127C766A8859F42C4E
Certificate serial:       091F4B0B6FAE525C13EF0C7A5A6A1528E7770398
Authority key identifier: B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130382e302f32332d3233203d3e20323731313530.roa
Signing time:             Sun 18 Aug 2024 14:40:09 +0000
ROA not before:           Sun 18 Aug 2024 14:35:09 +0000
ROA not after:            Sun 17 Aug 2025 14:40:09 +0000
asID:                     271150
IP address blocks:        179.42.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:4b:0b:6f:ae:52:5c:13:ef:0c:7a:5a:6a:15:28:e7:77:03:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B576170C915419B17FE7F1127C766A8859F42C4E
        Validity
            Not Before: Aug 18 14:35:09 2024 GMT
            Not After : Aug 17 14:40:09 2025 GMT
        Subject: CN=149A6D82FD1FB0D655AF7FC16FCFE8B4A3E9C56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:aa:8a:b1:b2:a5:37:e1:03:40:43:24:75:
                    9d:c7:58:51:d7:d4:92:78:41:77:2a:06:e4:98:fe:
                    51:6d:e0:31:af:06:98:d9:26:d1:27:83:ac:ce:31:
                    bd:e7:44:84:a4:e0:c4:af:99:26:3f:1f:11:2c:86:
                    92:69:00:23:38:a0:6b:5e:c4:b7:f8:b3:50:44:95:
                    c7:fc:95:86:c1:82:57:21:0c:a0:ee:b4:dd:74:ce:
                    cc:20:0d:3d:72:65:45:5f:28:cf:54:08:fd:60:28:
                    71:2e:32:4e:73:9b:53:93:62:1b:13:db:1a:fd:ae:
                    f8:24:cd:d2:f0:f6:ac:1e:3e:6a:51:39:db:d9:05:
                    58:93:4b:3f:80:85:1a:8a:81:cf:88:df:7d:2a:c2:
                    3e:88:7a:07:e0:7f:78:a6:7b:7c:4a:13:c4:40:0a:
                    17:d7:03:c6:21:6c:37:47:c0:99:a8:29:dd:a8:80:
                    25:bd:b2:10:1e:9b:28:0d:95:87:39:fa:81:e4:1d:
                    57:3f:63:ac:c8:61:fa:bf:cc:08:42:62:22:cb:eb:
                    8d:49:f7:bb:9a:98:7f:54:74:9f:be:4d:10:65:4c:
                    b1:3e:c9:52:3e:db:64:d5:91:80:82:41:26:9e:d5:
                    ef:73:b2:4a:e5:1c:6c:08:49:db:86:4c:a6:d3:d3:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:6D:82:FD:1F:B0:D6:55:AF:7F:C1:6F:CF:E8:B4:A3:E9:C5:6A
            X509v3 Authority Key Identifier:
                keyid:B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130382e302f32332d3233203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:3b:83:cf:c6:4f:e4:8b:15:9a:52:17:7f:f3:92:fb:72:01:
         88:6e:23:63:30:a1:d0:56:d3:cf:01:ef:4d:01:f2:d9:02:fa:
         f8:d6:1b:b1:38:c9:cd:63:f1:7c:31:9d:31:91:60:b1:40:15:
         20:03:86:7c:da:97:c7:39:20:7f:96:43:d4:d2:9d:32:91:da:
         13:ba:ef:f4:2a:64:bd:06:27:82:cc:e6:14:9c:65:3b:a4:5e:
         3b:ec:c2:1f:55:89:81:39:3b:db:53:0a:75:f1:a7:a1:f9:0a:
         b7:81:be:fc:60:25:b8:69:89:30:0e:8b:19:34:a5:97:40:ed:
         5e:4b:77:9c:93:01:53:7e:c4:94:04:08:a6:0b:cb:ca:c6:97:
         f6:58:00:d7:ea:b9:57:0a:87:19:d7:8e:b2:9b:d9:e0:39:17:
         a8:17:dc:a6:cb:bc:a0:6a:95:04:23:2c:dc:56:05:16:c7:17:
         d0:35:00:6f:8d:c2:b3:46:ce:3e:86:05:cb:b3:97:46:6e:cd:
         15:fb:22:01:1a:b7:89:f7:58:7b:1e:b2:0d:fc:1f:70:5f:69:
         89:e8:35:a8:0e:8b:6b:28:22:cd:44:fa:0a:5d:c8:2d:f5:0b:
         eb:d8:f8:ff:31:3a:8d:83:78:fe:64:25:7e:90:06:3e:c3:ec:
         f1:49:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org