Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263645.roa
File:                     AS263645.roa (raw, json)
Hash identifier:          p5GgvaLj0zmkXzV5AJyY44lMxFFzVbvUYUQ/diWLcgI=
Subject key identifier:   60:A0:B8:52:AD:1F:09:31:CE:C1:C2:BB:A1:9F:6A:AB:10:2B:BC:76
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       38815277D82DCBAFC14F19FE66458CC9F6056A88
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263645.roa
Signing time:             Mon 25 Nov 2024 16:59:38 +0000
ROA not before:           Mon 25 Nov 2024 16:54:38 +0000
ROA not after:            Mon 24 Nov 2025 16:59:38 +0000
asID:                     263645
IP address blocks:        179.127.248.0/21 maxlen: 24
                          2804:10b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:81:52:77:d8:2d:cb:af:c1:4f:19:fe:66:45:8c:c9:f6:05:6a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Nov 25 16:54:38 2024 GMT
            Not After : Nov 24 16:59:38 2025 GMT
        Subject: CN=60A0B852AD1F0931CEC1C2BBA19F6AAB102BBC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:55:67:8f:f6:91:3e:e5:97:bd:26:18:b3:
                    ec:f6:9e:8d:20:a3:71:4b:93:d0:45:19:c6:2a:e1:
                    66:c7:ea:7a:e9:80:1c:80:2e:50:1c:b9:77:6f:81:
                    64:9d:83:d3:4a:7f:62:d5:4f:37:b7:9d:a4:c1:16:
                    0e:38:cc:2f:a7:07:7b:c9:b2:a0:6b:80:2c:83:35:
                    28:2c:be:83:9f:3d:a7:41:be:31:65:c7:16:2f:c5:
                    eb:64:d8:09:4b:e5:c3:02:57:4c:cf:1f:74:a1:5a:
                    a9:0f:bc:09:3c:4b:d6:90:b7:89:f6:5f:f8:68:0f:
                    43:ae:73:6b:58:72:c3:ac:c7:47:aa:82:eb:1f:7c:
                    53:b6:27:09:22:14:4e:86:76:63:3f:1b:bc:b2:1c:
                    3b:c0:42:5a:9b:cd:f3:4d:32:e7:bd:cd:87:a6:d5:
                    93:d1:57:03:48:97:02:96:39:d8:2f:a4:e2:1c:aa:
                    6b:d8:d0:20:ae:3c:5f:c4:43:12:3c:f3:ca:96:0c:
                    82:6e:50:8f:7a:a4:49:41:c1:ac:ac:9d:f2:0d:fe:
                    43:84:40:48:ac:c3:4d:63:2e:de:eb:7f:a0:17:e0:
                    8e:95:e4:9d:f4:84:e0:4f:73:ab:70:0c:f1:46:c0:
                    02:7a:29:60:e6:00:1e:da:24:47:1e:88:f2:42:b9:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A0:B8:52:AD:1F:09:31:CE:C1:C2:BB:A1:9F:6A:AB:10:2B:BC:76
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263645.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.248.0/21
                IPv6:
                  2804:10b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:01:95:cf:4a:8c:35:bd:e1:b7:71:f1:06:b8:9e:2e:70:
         fa:5d:92:f3:17:b0:57:8f:b3:fe:0c:54:4c:2a:67:fc:a0:09:
         e2:75:d2:65:56:e5:6e:5e:57:64:46:38:9a:0c:24:6d:e6:61:
         2d:0d:1e:8e:d8:87:d3:00:a8:28:91:97:ea:9e:20:a9:09:11:
         9e:ea:76:77:04:e0:6b:c2:d7:9f:92:1d:97:9b:eb:64:34:c0:
         f8:86:31:c5:4e:de:ed:29:76:3e:30:29:4d:03:43:50:45:f2:
         fd:09:26:47:23:0f:d7:15:b3:4b:8c:cd:8f:29:9a:b2:5f:96:
         84:a8:df:70:67:60:4f:f8:01:9b:31:48:4e:7a:f7:7f:68:00:
         e9:44:dd:2e:2f:70:3f:da:96:c3:b0:a2:83:10:18:aa:fd:62:
         d7:5e:88:31:b6:13:54:51:f4:f3:8b:cd:54:08:16:9d:09:11:
         a7:a4:1a:7a:ad:65:45:0d:01:f3:96:20:06:66:69:bc:c2:23:
         e2:85:38:d9:7f:96:cc:b9:49:c4:27:ef:a8:5f:ea:a9:dc:41:
         7e:dd:68:75:b8:55:c0:0a:16:1b:d7:f5:90:f4:85:fe:e7:70:
         c9:26:44:c8:09:bd:5f:3f:e5:86:49:97:3e:9e:23:22:f7:46:
         42:e7:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:15:12 2025 by rpki-client