Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39322e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39322e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          z/T91uAcseChQoJZ39VPeOTiqo3cQgqqFF1/q/xSB2Q=
Subject key identifier:   A5:65:0F:60:B2:2D:0A:DD:74:27:7C:5D:BF:C8:AF:9F:D7:A6:4B:B6
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       6E0D2B29D8E064EB94FD37564A4272E0489F13AC
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39322e302f32342d3234203d3e20323731363132.roa
Signing time:             Thu 04 Apr 2024 02:55:38 +0000
ROA not before:           Thu 04 Apr 2024 02:50:38 +0000
ROA not after:            Thu 03 Apr 2025 02:55:38 +0000
asID:                     271612
IP address blocks:        179.63.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0d:2b:29:d8:e0:64:eb:94:fd:37:56:4a:42:72:e0:48:9f:13:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Apr  4 02:50:38 2024 GMT
            Not After : Apr  3 02:55:38 2025 GMT
        Subject: CN=A5650F60B22D0ADD74277C5DBFC8AF9FD7A64BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:a6:c6:f9:41:54:f2:a5:52:11:50:69:b0:
                    02:18:36:72:80:b1:01:3f:e5:1d:04:5f:2c:e4:07:
                    62:1c:b9:12:5c:2f:37:a7:f3:9c:3f:d7:9d:57:97:
                    13:50:dc:e9:90:e2:43:f8:28:1d:d0:bc:a5:47:50:
                    30:9d:66:a5:7a:14:25:6d:16:6c:44:72:a6:7e:4d:
                    aa:9b:99:11:db:5a:c1:03:98:17:c9:d6:f8:db:1b:
                    b0:b5:18:b5:61:b9:38:23:60:fa:d4:e2:f4:6f:36:
                    e2:8a:01:ca:bf:70:d4:f6:7a:c4:b5:c4:a8:ed:b5:
                    bf:d6:2d:05:56:94:83:17:d3:81:c2:9f:3b:88:f3:
                    87:86:a1:f9:1c:2b:2a:2f:09:6f:87:f8:1e:bd:82:
                    87:a3:16:d7:32:55:16:a4:eb:74:85:8c:cd:3a:9f:
                    39:fa:73:01:0e:5b:56:e5:07:bd:66:67:8f:7e:9b:
                    53:a6:5d:1c:11:35:01:d6:d8:6d:d4:01:6a:b7:0e:
                    36:7c:8c:e4:1f:14:a2:51:81:7d:c0:1f:e1:78:28:
                    0a:5b:33:9d:c1:ff:e8:69:ab:2c:c7:4a:21:21:23:
                    14:7a:c4:82:41:58:32:d9:40:7c:07:4e:2b:cc:78:
                    5b:38:95:23:8a:48:83:17:fa:aa:9b:16:55:0d:bc:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:65:0F:60:B2:2D:0A:DD:74:27:7C:5D:BF:C8:AF:9F:D7:A6:4B:B6
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39322e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:97:60:86:ef:4c:93:a0:0a:40:60:78:01:61:a2:c4:7d:4f:
         e3:91:e5:70:c2:27:34:54:47:9a:ea:78:59:26:ec:e7:da:ba:
         2e:2c:ac:ed:41:06:4a:cf:a7:b3:8b:f6:78:aa:51:32:d7:c6:
         15:8e:e3:2c:5c:6f:b5:67:f3:e0:4b:89:6b:83:32:5c:b9:67:
         b4:ba:28:bf:86:7b:7c:09:64:83:75:64:5b:26:1a:97:7f:74:
         00:a4:c6:30:f9:22:ef:72:71:ad:3b:20:a7:6d:98:af:6a:7e:
         bd:b4:88:b1:c9:7f:a0:f8:cc:ba:5a:dd:65:b6:02:7a:a9:92:
         94:32:0f:43:61:05:30:8b:38:6a:9f:1e:3f:44:17:dd:cb:e3:
         d8:e5:42:4b:b1:6b:97:fc:cf:a5:60:7f:2d:dd:9e:56:31:2f:
         6c:f0:38:fc:99:aa:c6:ec:cb:5e:ea:12:5a:4d:90:3e:62:1e:
         89:e3:17:a6:28:2f:90:f6:29:66:de:97:b5:53:46:ef:7c:22:
         de:bc:7f:9b:a5:90:ec:38:36:f7:7d:f2:33:18:2a:c9:93:d1:
         2e:2e:57:da:e4:89:ea:50:5d:3e:c0:16:55:13:49:fa:42:d6:
         3a:0a:c2:b7:ab:b2:95:6d:fc:13:5f:3f:08:d4:cf:3a:68:1a:
         49:ea:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org