Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa
File:                     3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa (raw, json)
Hash identifier:          O9CrsZdE4JWvBvwVeXFCC0cTw8uUP8gq0XFyzEZqpCU=
Subject key identifier:   74:80:3A:44:4A:6E:0F:96:95:61:BA:A6:A2:2A:64:6D:7B:B3:13:21
Certificate issuer:       /CN=A595141DF10B7142183A583F86A07B8027C96119
Certificate serial:       01D35EEBE57B3C52E4DA3248729C0C60F7B9A43E
Authority key identifier: A5:95:14:1D:F1:0B:71:42:18:3A:58:3F:86:A0:7B:80:27:C9:61:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A595141DF10B7142183A583F86A07B8027C96119.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa
Signing time:             Fri 22 Nov 2024 17:49:06 +0000
ROA not before:           Fri 22 Nov 2024 17:44:06 +0000
ROA not after:            Fri 21 Nov 2025 17:49:06 +0000
asID:                     270588
IP address blocks:        177.129.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/A595141DF10B7142183A583F86A07B8027C96119.crl
                          rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/A595141DF10B7142183A583F86A07B8027C96119.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A595141DF10B7142183A583F86A07B8027C96119.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 03:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d3:5e:eb:e5:7b:3c:52:e4:da:32:48:72:9c:0c:60:f7:b9:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A595141DF10B7142183A583F86A07B8027C96119
        Validity
            Not Before: Nov 22 17:44:06 2024 GMT
            Not After : Nov 21 17:49:06 2025 GMT
        Subject: CN=74803A444A6E0F969561BAA6A22A646D7BB31321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:60:60:c9:9c:07:75:b2:d1:d2:31:7e:84:
                    98:aa:89:ee:f7:34:5c:34:64:7b:ca:36:f5:be:cc:
                    3a:35:da:48:ab:3b:52:51:91:a8:8c:9f:3b:e1:83:
                    18:06:cb:f0:5c:90:cd:a8:87:75:20:7b:bf:2e:7f:
                    f0:b8:93:81:ff:05:fe:b9:12:ec:3d:4f:1f:c2:46:
                    2b:b9:2f:8d:73:a7:9b:74:e2:14:33:aa:17:7e:cb:
                    64:41:a3:61:a6:40:89:d8:c0:62:01:dd:a3:b1:57:
                    b1:5d:d5:e8:2c:59:af:2d:ac:5e:77:4d:92:c1:b2:
                    11:f6:82:3b:7e:6a:fb:04:21:b5:c3:e9:2a:98:50:
                    84:6e:35:e0:cb:d6:00:56:3f:e4:37:8e:d7:70:3e:
                    3c:c1:8e:dc:3c:bf:f9:27:31:4a:d1:04:8b:6b:82:
                    83:5e:c0:9d:64:50:97:30:89:aa:cd:f3:fd:98:bf:
                    cc:59:c0:1e:72:ed:67:ac:23:4c:db:06:aa:e7:74:
                    50:dc:76:f8:99:65:c8:93:51:07:02:95:68:b3:3c:
                    5d:e3:5a:2c:78:6a:ec:1e:e4:c8:32:0a:ca:50:1e:
                    1f:0d:1d:19:b4:f2:af:84:86:78:45:34:e3:75:f7:
                    a8:03:f5:a6:95:89:ca:05:1e:22:ab:da:ec:14:8d:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:80:3A:44:4A:6E:0F:96:95:61:BA:A6:A2:2A:64:6D:7B:B3:13:21
            X509v3 Authority Key Identifier:
                keyid:A5:95:14:1D:F1:0B:71:42:18:3A:58:3F:86:A0:7B:80:27:C9:61:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/A595141DF10B7142183A583F86A07B8027C96119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A595141DF10B7142183A583F86A07B8027C96119.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:43:77:ac:5c:2c:f6:26:0f:70:c1:78:5e:8e:45:0b:4f:
         d0:25:cb:7a:ea:c8:cf:27:77:c3:75:3d:fe:dd:a3:9e:25:f3:
         6f:77:96:aa:10:a8:ae:83:44:aa:7e:74:2d:f4:c7:04:7d:a9:
         2e:3f:ec:d4:4f:ea:22:eb:a6:d6:5b:39:f3:57:4b:7d:4c:ca:
         be:1d:3c:47:24:bb:94:21:43:0a:6e:f5:5c:4f:1e:f7:e1:c8:
         b2:16:33:d9:83:42:24:84:81:90:2f:08:e5:0d:5a:11:83:25:
         d7:1d:4e:b6:e4:ad:95:98:12:14:b3:fb:41:38:60:9c:1a:cc:
         a7:3e:a9:36:78:39:5b:9a:2f:e2:7f:d3:bc:71:03:a8:e7:a7:
         cc:bf:4b:02:fe:80:03:32:ed:9a:69:d8:f2:8e:82:91:28:c1:
         92:24:05:e1:88:09:06:c5:14:e2:77:d3:2b:cb:f8:69:92:be:
         6b:84:88:cb:74:55:e6:50:19:62:a1:8b:a2:90:b5:3b:8b:33:
         95:1f:ba:34:58:24:2e:78:69:aa:51:48:4b:c5:e1:52:8c:06:
         32:66:ad:25:15:b9:9c:4d:aa:58:44:88:4d:20:b6:04:0a:07:
         3c:7b:df:6c:de:c3:39:95:bf:53:fc:27:c0:78:00:73:79:cd:
         97:45:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:52:54 2024 by rpki-client on console-fra.rpki-client.org