Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39342e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          VcLGdikxuc9lrD6ujA27Dzy1JFBo9Hb0Xv8zAFyA8MQ=
Subject key identifier:   B5:84:F5:32:08:F4:EF:9A:8B:DD:BB:AD:13:10:41:11:BA:62:DD:1C
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       2EB008B30787A99E0AA2B908207A5E87A9262566
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa
Signing time:             Thu 04 Apr 2024 02:55:39 +0000
ROA not before:           Thu 04 Apr 2024 02:50:39 +0000
ROA not after:            Thu 03 Apr 2025 02:55:39 +0000
asID:                     271612
IP address blocks:        179.63.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b0:08:b3:07:87:a9:9e:0a:a2:b9:08:20:7a:5e:87:a9:26:25:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Apr  4 02:50:39 2024 GMT
            Not After : Apr  3 02:55:39 2025 GMT
        Subject: CN=B584F53208F4EF9A8BDDBBAD13104111BA62DD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:7e:f9:1e:8e:f4:54:b5:cd:e7:b3:55:75:
                    97:4f:ba:99:ef:1a:15:2f:58:61:3b:c5:2c:42:f9:
                    e5:69:ad:b4:1a:c6:b9:67:bd:73:a9:ca:b9:67:a5:
                    e7:d1:cd:07:67:2c:0f:f0:11:08:e3:9d:a8:ee:ad:
                    60:c0:6e:05:e9:4f:1f:f3:3d:f0:ec:3d:63:39:b3:
                    82:fb:73:a1:18:8f:08:51:87:8d:3a:7d:21:af:ac:
                    61:8b:b8:ed:a1:ce:a9:df:9d:f7:8a:d8:4b:ba:0c:
                    79:a1:73:86:02:f3:a8:c5:c5:60:be:67:3b:76:60:
                    94:b5:2d:30:f5:a7:ae:e2:b2:fc:b6:9b:5e:60:e8:
                    84:e2:84:2c:b8:4d:81:fa:53:85:20:f4:4c:f4:d9:
                    71:f1:84:a5:5b:9c:23:19:57:44:d7:f5:d8:4f:63:
                    b3:9f:ed:f9:12:07:28:84:78:76:0b:c5:f1:03:2a:
                    1a:44:02:90:fb:5c:c7:5f:a1:b2:c9:f1:26:64:4d:
                    cc:e1:0f:ac:36:a7:97:ea:6e:97:ba:f4:af:90:c0:
                    e6:4f:9b:2b:db:b3:a7:ef:0c:7d:33:5e:99:bc:e2:
                    d7:f9:ce:78:6f:05:03:dc:ff:66:e2:a6:8f:1a:94:
                    4e:56:08:c9:1b:55:2e:f0:66:48:c5:a1:c7:1f:1f:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:84:F5:32:08:F4:EF:9A:8B:DD:BB:AD:13:10:41:11:BA:62:DD:1C
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:8f:b4:a6:43:b7:f1:c6:81:25:36:99:83:b0:b0:e4:bb:
         0e:cd:ea:d9:8f:42:07:e6:f6:f2:84:56:33:cd:d9:bc:ad:ba:
         d9:9c:eb:ff:38:88:33:22:7d:ab:a2:8c:43:4c:af:09:6b:5b:
         ba:8b:c2:c9:87:c3:3d:4b:38:d8:49:c5:56:35:1b:f4:aa:29:
         af:1c:09:3c:6a:0c:29:66:2a:dd:23:04:03:4c:b8:cf:51:42:
         15:fd:88:72:1b:29:2b:bb:a7:fe:f4:de:46:a3:a0:d7:94:c0:
         b8:ce:9b:7d:c1:34:92:18:d7:d6:6b:67:0e:7a:3f:5c:96:e5:
         56:94:f3:b3:b4:7f:5c:d7:74:82:a5:ed:17:7b:ed:79:ad:36:
         bb:1f:74:90:b7:ea:c4:a7:7a:ec:4e:37:e5:82:22:0e:dd:97:
         e8:f7:4b:50:7c:fb:3c:b6:00:42:5d:f1:71:cb:b1:61:8c:e1:
         da:79:57:4c:7b:e7:ab:46:2f:1c:a6:4f:2f:8d:20:2f:bd:1b:
         9d:7d:72:3b:f2:29:61:af:3d:2f:47:89:65:a8:2a:32:a7:01:
         d8:2d:43:5f:fb:66:88:9a:d8:51:f5:90:f0:27:76:a2:22:3e:
         76:cc:f1:54:92:28:5d:7f:3a:0b:c4:ee:f6:18:41:8a:dd:c5:
         db:1d:d6:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULrAIsweHqZ4KorkIIHpeh6kmJWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0RTFGNTlFNjE4NkE3N0IwQURFRjNFNTEwQUNFNzQ3
QkYxQUIxMTAeFw0yNDA0MDQwMjUwMzlaFw0yNTA0MDMwMjU1MzlaMDMxMTAvBgNV
BAMTKEI1ODRGNTMyMDhGNEVGOUE4QkREQkJBRDEzMTA0MTExQkE2MkREMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQH75Ho70VLXN57NVdZdPupnv
GhUvWGE7xSxC+eVprbQaxrlnvXOpyrlnpefRzQdnLA/wEQjjnajurWDAbgXpTx/z
PfDsPWM5s4L7c6EYjwhRh406fSGvrGGLuO2hzqnfnfeK2Eu6DHmhc4YC86jFxWC+
Zzt2YJS1LTD1p67isvy2m15g6ITihCy4TYH6U4Ug9Ez02XHxhKVbnCMZV0TX9dhP
Y7Of7fkSByiEeHYLxfEDKhpEApD7XMdfobLJ8SZkTczhD6w2p5fqbpe69K+QwOZP
myvbs6fvDH0zXpm84tf5znhvBQPc/2bipo8alE5WCMkbVS7wZkjFoccfH8/nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtYT1Mgj075qL3butExBBEbpi3RwwHwYDVR0j
BBgwFoAUb04fWeYYanewre8+UQrOdHvxqxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMS82RjRFMUY1OUU2MTg2QTc3QjBBREVGM0U1MTBBQ0U3NDdCRjFBQjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNEUxRjU5RTYxODZBNzdC
MEFERUYzRTUxMEFDRTc0N0JGMUFCMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzEv
MzEzNzM5MmUzNjMzMmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9eMA0GCSqGSIb3DQEBCwUAA4IBAQBtyo+0pkO3
8caBJTaZg7Cw5LsOzerZj0IH5vbyhFYzzdm8rbrZnOv/OIgzIn2rooxDTK8Ja1u6
i8LJh8M9SzjYScVWNRv0qimvHAk8agwpZirdIwQDTLjPUUIV/YhyGykru6f+9N5G
o6DXlMC4zpt9wTSSGNfWa2cOej9cluVWlPOztH9c13SCpe0Xe+15rTa7H3SQt+rE
p3rsTjflgiIO3Zfo90tQfPs8tgBCXfFxy7FhjOHaeVdMe+erRi8cpk8vjSAvvRud
fXI78ilhrz0vR4llqCoypwHYLUNf+2aImthR9ZDwJ3aiIj52zPFUkihdfzoLxO72
GEGK3cXbHdZA
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org