Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32332d3233203d3e20323731303732.roa
File:                     3137392e34382e3130302e302f32332d3233203d3e20323731303732.roa (raw, json)
Hash identifier:          DQRCNeq2qrni6VNoXnoYnhsIBZ1X7ca8d6gUp0dzvDA=
Subject key identifier:   1D:10:12:97:49:23:FE:5E:C4:ED:8B:1A:C0:ED:1C:17:FC:54:B1:46
Certificate issuer:       /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial:       734D12F552D4956A9A96C285F071623F913E7E2B
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32332d3233203d3e20323731303732.roa
Signing time:             Tue 17 Dec 2024 01:28:33 +0000
ROA not before:           Tue 17 Dec 2024 01:23:33 +0000
ROA not after:            Tue 16 Dec 2025 01:28:33 +0000
asID:                     271072
IP address blocks:        179.48.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 03:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4d:12:f5:52:d4:95:6a:9a:96:c2:85:f0:71:62:3f:91:3e:7e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Validity
            Not Before: Dec 17 01:23:33 2024 GMT
            Not After : Dec 16 01:28:33 2025 GMT
        Subject: CN=1D1012974923FE5EC4ED8B1AC0ED1C17FC54B146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:cf:ca:af:4f:7a:1e:37:6c:2e:65:83:74:
                    6c:74:a8:89:5b:58:35:44:aa:5c:0f:1e:b2:a0:2f:
                    1f:4c:ec:c9:8b:3e:9a:d3:e7:ba:3d:80:3d:44:c9:
                    a8:ee:72:15:bd:0d:9b:28:6a:45:00:66:55:48:ab:
                    8d:19:3a:44:10:42:3d:f0:40:ae:d9:d3:30:93:02:
                    7f:47:5b:4a:0b:35:c1:ce:96:2a:e8:66:8e:cb:b9:
                    8e:51:b1:4a:dc:ec:6b:c2:96:1b:e6:9e:83:76:c1:
                    88:d1:0a:5e:a4:b8:5c:ff:e1:84:27:86:05:f1:61:
                    d8:b1:92:16:7e:7b:72:d3:69:a5:6f:b0:83:98:50:
                    9a:f1:e5:02:ec:67:50:d8:07:af:7f:71:ff:25:22:
                    86:e3:71:77:c9:c5:3e:6f:87:e7:3b:81:00:e5:b6:
                    b8:8d:5f:7c:b7:7f:ee:06:fc:69:6f:58:b4:da:4c:
                    29:2c:05:d2:a5:5a:7e:37:79:ff:75:d8:b5:46:ab:
                    35:7e:91:ad:77:5c:8b:2d:e6:5a:57:56:aa:1a:14:
                    b9:c7:e6:b8:fb:c7:14:e1:cb:87:73:6f:3b:9b:10:
                    69:b3:24:cb:a7:64:1a:7e:f7:5c:d8:b7:68:2a:99:
                    fe:60:7e:2c:ff:63:c0:7b:5a:5e:cf:9e:5e:02:09:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:12:97:49:23:FE:5E:C4:ED:8B:1A:C0:ED:1C:17:FC:54:B1:46
            X509v3 Authority Key Identifier:
                keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32332d3233203d3e20323731303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:e3:73:c2:61:b2:96:59:29:cb:7f:23:5b:c3:48:ab:4a:17:
         8f:5c:e1:8b:b1:69:ef:dd:1f:0f:b5:88:af:5c:fe:a9:da:26:
         d4:52:b2:ab:d0:77:49:d7:f8:67:44:23:93:aa:45:f3:0f:05:
         f9:43:52:8d:52:b9:fc:da:82:90:0a:c1:31:02:7e:68:c5:2d:
         cf:36:a1:34:f5:23:6e:75:d8:26:ba:b5:17:e8:d7:c9:27:15:
         a1:51:43:de:d9:3c:9d:3f:9a:b7:34:28:ad:54:93:55:6d:cc:
         d2:e5:11:4c:52:d2:44:c7:ad:c0:fa:b3:8d:af:05:98:23:f5:
         97:aa:60:84:96:44:4c:68:a6:a5:00:a0:00:be:01:96:5f:fe:
         69:01:22:18:8f:6e:e6:14:bd:16:7e:0c:3e:9e:3d:92:49:5b:
         ed:a5:04:54:c4:cf:07:ea:95:0a:d2:ea:0b:b4:9f:8a:3d:43:
         9c:8d:a0:d7:bc:e6:43:b9:15:d1:47:35:79:06:01:6d:4a:c6:
         36:a2:e3:9c:2e:a5:18:f8:8e:d4:0d:12:09:88:ad:db:aa:f2:
         a0:2b:90:4d:60:df:55:fe:66:d9:ae:90:98:85:06:6b:eb:8b:
         14:d8:3c:b5:93:df:5d:a9:f4:39:db:b5:dc:7f:d0:72:32:c0:
         3e:b8:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:38:20 2025 by rpki-client