Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32342d3234203d3e20323731353536.roa
File:                     3137392e36332e38302e302f32342d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          7u0CjXi1rd27vTqR2IPVqLcnJrAxeo61RNxwGMD01bQ=
Subject key identifier:   9E:88:0E:6F:7E:68:98:B3:8A:2E:89:D6:56:6D:35:7F:7F:86:08:F4
Certificate issuer:       /CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
Certificate serial:       469EC5C8B73BA807EA059EE353E6789BDDEAC586
Authority key identifier: A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32342d3234203d3e20323731353536.roa
Signing time:             Tue 30 Apr 2024 08:10:21 +0000
ROA not before:           Tue 30 Apr 2024 08:05:21 +0000
ROA not after:            Tue 29 Apr 2025 08:10:21 +0000
asID:                     271556
IP address blocks:        179.63.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 03:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:c5:c8:b7:3b:a8:07:ea:05:9e:e3:53:e6:78:9b:dd:ea:c5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
        Validity
            Not Before: Apr 30 08:05:21 2024 GMT
            Not After : Apr 29 08:10:21 2025 GMT
        Subject: CN=9E880E6F7E6898B38A2E89D6566D357F7F8608F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:7a:f9:3a:dc:75:e0:c7:fa:51:cf:f5:5a:
                    b3:2d:1f:91:e4:ed:4e:68:aa:47:10:28:1b:64:11:
                    91:0e:90:ad:84:91:07:80:63:90:20:c0:05:fd:ce:
                    9d:93:c4:cb:b0:3a:2f:24:f4:70:6f:c0:cf:e1:af:
                    8e:d2:c6:58:8e:fb:56:79:a9:84:73:ee:07:ce:f1:
                    ba:fa:3a:a5:e0:31:1f:69:95:92:60:13:ad:eb:cc:
                    60:df:a8:68:11:f7:9e:7a:9e:6d:e9:97:3c:aa:03:
                    98:c8:ff:3f:7e:75:a1:af:46:c6:eb:38:fc:66:29:
                    fe:2e:15:d6:7d:60:3e:3c:15:c6:94:41:45:87:d6:
                    29:ca:d5:b6:92:db:92:8c:54:72:e7:90:eb:7c:f8:
                    8d:13:11:5c:02:8e:5e:69:ac:af:f2:e0:f3:45:37:
                    ce:dd:e8:6f:1d:81:17:1e:cf:b7:d4:17:9c:ba:f0:
                    91:aa:6f:91:78:d3:71:f2:37:c0:31:0e:37:29:b4:
                    07:18:35:88:b8:e3:5c:f2:81:0f:03:08:80:51:59:
                    9f:95:8b:97:19:cf:fc:de:cf:61:64:2d:43:24:5b:
                    03:dc:e5:8c:50:c8:65:b6:d7:eb:65:18:22:33:a2:
                    e1:1a:5e:9a:f9:7a:ad:4a:0a:5e:d8:5b:96:6e:c4:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:88:0E:6F:7E:68:98:B3:8A:2E:89:D6:56:6D:35:7F:7F:86:08:F4
            X509v3 Authority Key Identifier:
                keyid:A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32342d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:b2:b4:f7:97:4a:ad:f9:7f:0a:cc:31:a4:7b:7d:4a:f7:
         34:1c:31:46:70:87:ca:0b:a0:9e:3f:9e:ca:18:b6:e1:18:7f:
         b9:b6:7f:c3:7c:91:e2:d4:7d:8f:bb:aa:bb:6e:41:23:2e:ad:
         85:11:38:ed:9a:cd:45:fd:7a:9a:71:f6:6c:c7:a4:6a:7c:34:
         ba:00:43:2b:cf:d5:d2:27:40:8a:e1:74:ae:a6:cd:b9:ce:c5:
         e2:a6:7d:7a:f6:78:96:f2:b4:3e:1a:c4:e0:a2:3c:ce:97:ec:
         bc:7e:e4:30:10:ac:53:e6:53:a2:5d:44:7d:a6:16:10:c1:e8:
         77:1c:ea:b9:59:d6:08:af:bf:7a:04:2d:d1:18:e6:91:2f:40:
         23:0a:30:88:b2:15:75:e1:4e:69:cf:36:91:f8:da:a3:ee:4f:
         4d:3b:75:da:8e:4e:d8:eb:cf:e9:fa:e2:c8:8e:e2:cb:9a:f9:
         c2:99:b2:1c:67:ac:a5:81:4c:8c:ac:40:9b:f1:0f:16:52:a0:
         a3:06:00:cd:77:47:3d:ba:c5:9b:2e:4e:ea:c5:99:27:09:d2:
         e8:0f:52:3a:6d:5a:11:b0:6b:1c:01:72:0d:47:55:25:f5:42:
         62:66:42:39:c0:c5:93:53:c9:8e:ce:7f:cd:cf:4b:15:68:f3:
         2d:f0:26:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:36:22 2024 by rpki-client on console-fra.rpki-client.org