Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39332e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          zsr5mKnoomZ4xyLXt6UegDr7v6C00OrFbUcKwCPUWtk=
Subject key identifier:   C7:B3:EE:53:09:11:50:58:05:3D:6B:C7:9F:EC:71:88:8A:29:6B:20
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       6310753BAFF8D810788D82F9762F39915CC5BC15
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
Signing time:             Thu 04 Apr 2024 02:55:39 +0000
ROA not before:           Thu 04 Apr 2024 02:50:39 +0000
ROA not after:            Thu 03 Apr 2025 02:55:39 +0000
asID:                     271612
IP address blocks:        179.63.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:10:75:3b:af:f8:d8:10:78:8d:82:f9:76:2f:39:91:5c:c5:bc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Apr  4 02:50:39 2024 GMT
            Not After : Apr  3 02:55:39 2025 GMT
        Subject: CN=C7B3EE5309115058053D6BC79FEC71888A296B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:53:c6:8f:ae:01:fd:de:88:cd:26:5a:20:
                    80:37:1b:92:c1:f9:e4:bd:25:80:e7:1f:fb:fe:55:
                    c1:57:00:71:10:4a:26:27:c9:5f:6c:cf:a8:8d:c6:
                    b4:cb:91:71:bc:71:9a:23:59:5a:b1:ab:c1:1f:2a:
                    0d:2e:ee:f3:04:ad:99:8a:a1:7b:67:e0:11:48:cc:
                    83:67:5d:b6:45:7d:52:cb:5d:b3:da:12:1c:26:f8:
                    b8:e2:b3:94:44:7d:ce:19:3f:3e:50:cd:25:93:93:
                    a7:fa:ce:79:33:d0:c3:ae:31:10:fc:b9:ae:69:67:
                    89:4d:30:d4:e0:64:39:fb:e1:e6:68:ef:01:f3:4f:
                    c4:b8:d0:bc:fb:d5:23:aa:56:05:f0:e7:b6:28:33:
                    ed:1b:a7:91:a7:94:7b:f8:31:78:af:db:c2:d2:af:
                    76:97:18:23:cc:44:53:e0:58:a2:f6:d5:1f:be:d0:
                    05:c0:2a:96:f2:68:54:44:6c:07:89:9f:21:ce:a6:
                    83:b9:75:eb:cd:b3:c8:69:bd:23:fe:a0:aa:68:13:
                    b4:e6:f7:8a:52:34:4e:48:6d:9d:1e:73:a5:b7:69:
                    86:a3:f0:5e:ab:66:d7:b1:7d:9a:6f:63:5c:e2:2f:
                    46:b1:6c:20:03:c7:d5:79:ef:70:9a:d8:9c:9f:26:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B3:EE:53:09:11:50:58:05:3D:6B:C7:9F:EC:71:88:8A:29:6B:20
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:2b:56:07:9a:7c:13:52:69:5a:96:0b:47:b9:af:3b:02:
         7a:0a:55:a4:a3:56:12:28:df:3e:fd:a7:26:bc:f4:a4:0f:34:
         f2:f6:6b:88:74:36:fb:d7:33:34:36:09:20:01:27:90:a7:08:
         3c:f2:c8:01:43:cc:0f:53:5b:3a:6b:5f:30:54:41:c0:fc:e5:
         b9:36:a9:58:2a:45:cd:7f:c2:b2:c9:ae:44:f5:ab:04:be:fa:
         cc:62:a6:e9:38:18:cd:56:1e:12:c1:5f:e5:54:a2:d9:b7:a9:
         5e:7c:e2:d5:df:b7:a8:76:85:ba:80:81:de:56:0f:bc:2f:8f:
         e1:b1:a8:ed:31:e1:02:57:73:3b:b0:79:d0:56:4e:ea:76:9a:
         89:1c:48:b0:c1:87:9f:dd:0c:3b:fc:b1:92:e5:59:d1:fc:8d:
         a4:f0:9d:b0:8c:28:62:11:67:08:b5:6f:3e:d7:26:f7:22:1d:
         8c:84:9c:05:d7:b7:e3:f3:eb:68:82:2c:da:c0:20:86:e7:10:
         31:d2:c2:4f:ae:94:c6:34:3a:db:20:d9:c0:da:69:eb:30:1d:
         9e:83:ee:e0:91:40:94:78:e8:70:bf:12:3a:48:2f:d3:c5:08:
         fb:79:99:5d:e5:6e:0d:f2:f0:48:aa:ee:79:66:5c:fc:41:e5:
         b6:ce:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org