Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32342d3234203d3e20323731303732.roa
File:                     3137392e34382e3130302e302f32342d3234203d3e20323731303732.roa (raw, json)
Hash identifier:          FGgrdPf+SQBQSWJDbC+N3GBKjLWnUhu45Bei0Gek56g=
Subject key identifier:   E8:2A:D9:33:29:D1:DB:4E:65:0E:E6:E2:AE:62:09:E4:E6:2E:20:A7
Certificate issuer:       /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial:       4D2D3ADF3B79141E1B3C62D6C938E2AED3013C9E
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32342d3234203d3e20323731303732.roa
Signing time:             Tue 17 Dec 2024 01:30:33 +0000
ROA not before:           Tue 17 Dec 2024 01:25:33 +0000
ROA not after:            Tue 16 Dec 2025 01:30:33 +0000
asID:                     271072
IP address blocks:        179.48.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2d:3a:df:3b:79:14:1e:1b:3c:62:d6:c9:38:e2:ae:d3:01:3c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Validity
            Not Before: Dec 17 01:25:33 2024 GMT
            Not After : Dec 16 01:30:33 2025 GMT
        Subject: CN=E82AD93329D1DB4E650EE6E2AE6209E4E62E20A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:dd:b3:97:bf:12:71:8b:73:67:b9:cb:f1:
                    bb:49:eb:a3:30:69:b7:e5:d4:ef:a0:3a:37:96:26:
                    a9:1e:07:ad:39:63:e1:5c:07:83:41:10:57:ed:10:
                    81:50:b0:17:4d:36:a6:02:14:b6:ec:79:84:20:86:
                    10:1f:e1:18:7f:fb:80:7f:b8:6f:90:23:18:f8:6e:
                    58:92:5f:0d:c6:1b:85:9b:03:5d:ab:34:db:29:d4:
                    79:e1:4a:14:2c:94:3a:ed:65:d9:3e:ea:41:69:bd:
                    10:d7:8d:1c:09:0a:68:d9:be:cb:14:34:0e:03:1f:
                    6b:9d:2a:5a:e8:3b:4f:ef:f7:e7:dd:fb:72:d8:7a:
                    63:47:03:3a:2d:92:b5:d3:3e:37:33:d7:dc:b8:dd:
                    12:d0:03:e0:56:31:48:1f:21:40:ae:9e:0c:38:3a:
                    cf:86:23:0d:69:40:b9:b5:4e:b2:30:b4:6a:d8:ac:
                    a1:88:87:81:46:2f:ae:a4:45:54:c2:8c:64:b8:0c:
                    c2:eb:c0:29:f7:cf:7e:df:d5:e2:d4:a5:b6:19:b2:
                    5a:36:17:d2:e1:33:1d:5a:d7:a8:ee:0e:d0:43:03:
                    9e:e2:33:02:14:1c:af:e6:f1:9d:cc:3d:51:67:b7:
                    e3:d3:c9:fa:4d:ae:97:bf:0c:d0:8c:a4:e1:00:b1:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:D9:33:29:D1:DB:4E:65:0E:E6:E2:AE:62:09:E4:E6:2E:20:A7
            X509v3 Authority Key Identifier:
                keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32342d3234203d3e20323731303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:cd:2a:37:ac:ae:37:b2:ab:0f:ad:b8:3c:5d:ba:c6:cf:14:
         33:fb:fe:d1:ff:bb:8d:ea:43:6a:1f:54:e1:c0:66:8f:60:3b:
         fa:20:d5:0b:4a:c8:80:89:d4:24:a9:ba:76:85:80:03:0d:0f:
         ed:e0:d4:b6:c8:f0:e5:75:8a:42:6a:be:d8:3c:da:10:38:65:
         06:2f:79:4b:fd:f4:e2:81:f1:55:29:3d:08:48:60:75:73:42:
         8b:80:1b:c2:4f:17:e2:51:b4:f4:5c:21:f2:6b:60:67:67:80:
         69:ff:30:7c:86:d1:43:14:af:9a:a8:cf:96:a5:d9:f7:e2:a3:
         f4:65:ba:d8:eb:86:dc:ef:59:8c:02:ee:b6:40:cb:86:7e:ab:
         ab:fd:89:e7:83:50:a4:b7:3e:42:7a:10:b6:23:dc:4d:e4:cd:
         90:87:3f:73:b4:49:eb:1f:af:3f:c4:fc:31:ec:a9:39:86:d4:
         a6:0e:b6:52:b6:19:2d:e0:52:fb:53:72:fc:72:c7:20:f6:f5:
         44:10:33:28:01:d4:d7:d3:5f:be:31:f9:5c:2a:19:5c:7c:06:
         2d:07:09:3f:f6:8d:e6:98:24:75:d8:42:85:70:83:1f:5f:7b:
         87:34:8d:bf:0c:b1:f5:79:28:ee:28:6b:53:6c:55:e0:ee:66:
         e8:07:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:21 2025 by rpki-client