Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130322e302f32332d3233203d3e20323731303732.roa
File:                     3137392e34382e3130322e302f32332d3233203d3e20323731303732.roa (raw, json)
Hash identifier:          7MasVKEFLVqzrDSLBSn/VMDsqgpmW530i/xVnkAdVnA=
Subject key identifier:   09:B3:B6:01:EB:2C:30:10:A2:85:94:4D:95:94:E4:17:4A:E4:77:67
Certificate issuer:       /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial:       60E9D3F7E4BD5F8B05186E87A416AEBED371AFF9
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130322e302f32332d3233203d3e20323731303732.roa
Signing time:             Tue 17 Dec 2024 01:29:15 +0000
ROA not before:           Tue 17 Dec 2024 01:24:15 +0000
ROA not after:            Tue 16 Dec 2025 01:29:15 +0000
asID:                     271072
IP address blocks:        179.48.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e9:d3:f7:e4:bd:5f:8b:05:18:6e:87:a4:16:ae:be:d3:71:af:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Validity
            Not Before: Dec 17 01:24:15 2024 GMT
            Not After : Dec 16 01:29:15 2025 GMT
        Subject: CN=09B3B601EB2C3010A285944D9594E4174AE47767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:cb:88:f0:80:6b:f2:73:19:18:25:40:28:
                    a6:b6:8d:3c:be:ff:34:09:59:da:c6:6d:5e:e9:1a:
                    68:a5:a7:bb:67:23:c1:4b:b4:d0:4c:12:08:db:3a:
                    0d:2a:e5:5f:f2:f9:d3:e9:e0:ff:a3:c8:3d:6d:6a:
                    4c:32:00:4c:25:05:7e:61:95:23:c5:90:08:7f:c8:
                    ed:8b:8a:cd:4d:0e:82:07:80:16:1b:01:19:4d:bf:
                    cf:df:30:45:64:60:d9:f0:55:41:a4:8c:6d:0f:6c:
                    b3:b2:cf:e5:aa:21:b1:b7:2b:bf:a6:ee:36:38:d4:
                    c0:ce:a1:3b:a2:e0:c6:9a:1c:48:62:6c:79:c6:28:
                    75:ae:23:f4:4f:c4:19:e2:74:6e:90:3d:0c:05:e0:
                    4f:df:d2:44:0d:06:51:e6:33:96:95:6c:0e:f5:bf:
                    58:2c:1b:c5:68:34:eb:73:2d:4d:e8:18:b2:c5:a6:
                    76:a4:76:2e:b4:d4:2b:dd:40:45:18:42:7f:19:0f:
                    c8:61:f1:69:68:5b:8a:5f:a8:4e:91:12:05:8f:58:
                    d5:59:a6:3b:0b:9a:06:bc:02:10:59:9a:b5:2e:75:
                    9c:d5:6e:55:ed:bf:52:af:34:ec:6f:a8:49:2e:f5:
                    81:32:a4:0c:f1:18:dc:ae:b5:ee:58:99:d5:b0:26:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:B6:01:EB:2C:30:10:A2:85:94:4D:95:94:E4:17:4A:E4:77:67
            X509v3 Authority Key Identifier:
                keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130322e302f32332d3233203d3e20323731303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:ba:0f:b4:97:13:9c:c3:f3:44:36:2d:f9:42:49:26:ec:66:
         3a:d7:a4:77:55:a2:65:74:28:31:64:30:e7:92:50:c5:bc:60:
         ad:16:0f:16:4e:d7:f7:55:b7:9c:dc:95:df:8a:53:9f:9c:27:
         5e:fe:49:55:b1:de:17:0e:08:14:f7:d3:8d:0f:52:f7:86:be:
         2c:ea:68:0a:a9:88:3d:45:cc:b6:1d:3a:e5:28:04:d6:a4:2f:
         69:91:6c:14:46:60:e0:ca:6b:04:08:70:45:d2:f5:ac:8d:c9:
         d0:f1:4c:87:ee:83:b9:e1:a8:48:6c:c1:ed:b0:e5:a0:5c:10:
         0b:14:dc:49:c2:71:32:d1:53:2b:af:33:b4:eb:0f:35:00:fc:
         63:a5:0c:e3:91:10:90:99:25:9f:ba:f7:0c:c4:da:4a:8d:50:
         44:3c:65:e7:c4:88:fc:39:c4:3e:bd:55:4f:2b:f7:93:7a:c9:
         1a:c2:f7:68:b3:08:d8:d5:00:53:d7:60:38:35:7a:74:79:0b:
         bd:f7:22:30:36:87:be:9d:28:f0:c5:d0:d9:8d:d7:fa:a1:ee:
         97:cd:a2:8b:7a:eb:3f:75:bc:50:94:af:66:af:dd:b0:c6:1e:
         6c:9a:b4:2f:b1:cc:0e:b8:57:19:38:7c:9e:4f:17:4c:43:66:
         f6:c2:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:43 2025 by rpki-client