Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa
File:                     3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          QFatbx3ybCX4OLE7HMvWM5QA5ZhMdyVcb7Str6DQpok=
Subject key identifier:   1B:1C:A0:EE:34:8A:E9:C1:CF:2C:7F:27:D4:FF:80:84:69:CC:D2:A3
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       37EB8E2CF07542E7F842AAE2AE5E3C2E3889D56E
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa
Signing time:             Thu 04 Apr 2024 02:26:18 +0000
ROA not before:           Thu 04 Apr 2024 02:21:18 +0000
ROA not after:            Thu 03 Apr 2025 02:26:18 +0000
asID:                     266611
IP address blocks:        128.201.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:eb:8e:2c:f0:75:42:e7:f8:42:aa:e2:ae:5e:3c:2e:38:89:d5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Apr  4 02:21:18 2024 GMT
            Not After : Apr  3 02:26:18 2025 GMT
        Subject: CN=1B1CA0EE348AE9C1CF2C7F27D4FF808469CCD2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:09:a7:3a:75:c3:f6:75:69:c7:8b:04:fd:
                    28:37:2d:d1:3a:90:e8:88:f8:88:6b:af:0b:3e:db:
                    10:3c:20:8e:c9:34:0c:c3:78:4e:88:9e:14:4b:47:
                    ae:9d:72:e0:db:d8:76:ea:27:e1:0f:14:eb:47:0a:
                    e9:3c:ae:ea:8e:d2:eb:d3:cf:60:e0:21:40:d8:2d:
                    d6:7d:34:ac:c6:9b:17:de:8b:22:4a:31:ad:00:8b:
                    1a:b8:21:f4:0e:42:79:95:21:6d:8b:0a:57:61:55:
                    63:49:57:bd:3c:81:18:eb:53:13:d0:85:fb:43:bc:
                    ad:5a:09:4e:52:e9:01:18:a0:fb:63:92:32:5f:d7:
                    ad:35:dc:00:32:72:ff:9d:76:9a:f2:17:ff:5b:8c:
                    93:40:bb:b1:02:e0:a8:39:44:c4:0c:8c:5d:3e:2b:
                    47:b2:57:26:1c:27:00:3f:ab:f4:4c:a0:65:ab:28:
                    3e:ee:b4:9b:39:57:e9:af:e5:f7:7d:f1:c3:22:7f:
                    a8:75:0b:06:05:d7:0b:8f:f5:37:f4:68:dc:83:41:
                    80:c0:72:c7:b5:28:d4:58:99:8c:fa:90:bb:36:2e:
                    15:b7:7a:2f:35:73:2e:75:2f:16:c3:e6:75:9d:13:
                    a5:85:a9:f8:3d:67:2d:13:aa:39:72:c5:12:f4:40:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1C:A0:EE:34:8A:E9:C1:CF:2C:7F:27:D4:FF:80:84:69:CC:D2:A3
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:03:db:7f:08:87:2e:d7:5f:d7:ac:5a:fa:8b:70:ac:b6:5e:
         a7:bb:13:f7:13:ca:35:5a:ec:dd:2a:2a:74:c2:f8:f9:67:82:
         30:56:3f:9a:9d:e4:63:c0:d0:67:a7:0c:1e:95:a3:98:c1:19:
         7c:4d:ff:a3:dd:98:db:c8:da:68:b0:aa:a4:be:f6:5e:89:dc:
         14:fd:a3:02:a6:b9:7f:3f:df:08:7c:93:74:19:fa:a8:91:b9:
         1c:0c:15:dd:aa:51:4a:0e:95:b4:c6:f9:ba:9e:80:d5:48:a8:
         07:a2:f8:8f:f8:bf:40:76:5b:d9:5c:c4:4e:27:dd:db:17:83:
         1a:28:de:a3:d4:6d:9c:6f:44:6c:b3:8a:cb:47:b3:d1:5a:3c:
         d9:a7:19:38:fc:65:81:6d:b1:23:91:6c:ec:b3:37:04:30:f7:
         1b:e1:9a:6f:62:54:a2:61:64:19:fd:8f:0a:5d:23:d8:18:9c:
         f5:48:8d:a4:68:60:73:9b:ec:a4:e8:dc:95:cc:a9:07:91:f4:
         a2:0e:5f:ee:f3:77:65:42:84:13:41:e3:3a:37:ad:c6:c0:5a:
         5c:4a:c7:bc:32:8f:c5:25:d5:17:a4:38:9a:1c:20:90:65:b8:
         91:8b:89:61:33:0b:3a:15:5f:7d:22:6b:65:9f:56:3b:a2:e0:
         0a:aa:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org