Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa
File:                     3137392e3130362e39362e302f32302d3234203d3e203532353332.roa (raw, json)
Hash identifier:          ugx2F3oEHXbd5JaAhCFE9BHi6v5n7WLPtIhi4rMkHKA=
Subject key identifier:   D4:7A:7B:07:2F:56:E8:FB:F2:8E:1C:31:80:6F:6F:53:DA:34:9F:D2
Certificate issuer:       /CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
Certificate serial:       02C9EFC1EC84AA10C4F5F92572CF9E6BB658C395
Authority key identifier: B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa
Signing time:             Tue 02 Jul 2024 17:20:11 +0000
ROA not before:           Tue 02 Jul 2024 17:15:11 +0000
ROA not after:            Tue 01 Jul 2025 17:20:11 +0000
asID:                     52532
IP address blocks:        179.106.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c9:ef:c1:ec:84:aa:10:c4:f5:f9:25:72:cf:9e:6b:b6:58:c3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
        Validity
            Not Before: Jul  2 17:15:11 2024 GMT
            Not After : Jul  1 17:20:11 2025 GMT
        Subject: CN=D47A7B072F56E8FBF28E1C31806F6F53DA349FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:3b:aa:e4:92:1c:4f:07:4e:15:c7:c5:45:
                    03:d4:dd:ec:c8:fd:a7:eb:06:94:6a:09:03:60:4b:
                    eb:3c:d9:00:e9:fc:ed:a3:2c:85:1b:74:a3:82:92:
                    7b:44:12:be:7b:ef:3a:ea:1a:ec:db:e5:4e:d1:11:
                    90:bd:f7:54:1e:5e:ba:a8:43:7a:10:f6:df:30:a7:
                    85:0a:7c:57:6b:2e:d6:d7:c5:50:fb:84:26:49:87:
                    b1:3d:0b:c8:61:23:0c:8a:54:9b:97:1e:12:7b:53:
                    18:56:08:45:c8:77:83:74:51:f4:4a:8e:91:52:12:
                    dc:84:6c:c4:fa:45:e9:c3:81:dd:b7:df:95:6d:9e:
                    a8:54:35:5a:00:6c:f1:97:f7:86:fd:a8:59:a4:e2:
                    c9:47:ec:e9:77:fd:a5:71:de:60:9a:3a:c5:f6:b7:
                    c0:db:41:05:07:bf:6e:c7:d0:13:e2:e9:6a:a1:48:
                    5b:0b:c3:1c:ea:9e:74:c4:33:79:a7:84:b7:13:f9:
                    50:a8:e5:79:82:68:06:15:a2:7e:7c:d5:0e:55:34:
                    f9:c6:ea:23:e3:f3:c8:28:1a:84:97:6c:58:1d:98:
                    f7:fb:5a:03:08:3a:29:62:26:69:59:19:96:35:3b:
                    99:a4:d3:0c:1b:cb:12:83:5b:e6:e2:25:65:85:82:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7A:7B:07:2F:56:E8:FB:F2:8E:1C:31:80:6F:6F:53:DA:34:9F:D2
            X509v3 Authority Key Identifier:
                keyid:B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:5e:73:85:e7:a8:84:7a:54:9c:c0:04:29:bd:85:53:34:ff:
         db:e4:f1:e8:f2:6d:cc:ec:c8:51:bf:dd:7d:6e:aa:ee:08:39:
         58:a3:19:e1:b2:9b:f0:05:d0:50:22:6e:30:42:45:f0:8f:b7:
         41:52:d3:bb:df:f1:22:a1:9d:b7:c9:5a:60:e4:62:1e:a7:87:
         9c:da:d3:4f:a8:d4:7c:9a:f6:b6:eb:ef:29:da:38:40:2d:db:
         33:e6:c8:a8:2e:8d:18:07:18:e3:0e:f2:cd:ac:5a:e6:92:a3:
         87:d5:27:14:98:8c:f1:0e:bc:c2:0c:3c:a2:3a:e3:54:fc:be:
         85:0e:b8:af:49:6e:81:f2:91:38:96:6e:4d:5a:18:cd:a9:e5:
         25:0b:13:59:b6:3d:bb:50:e4:0b:cc:87:a1:0f:fd:50:cf:2d:
         c5:05:c0:5d:5e:6a:d7:1e:d8:9e:5c:b0:69:16:4c:5c:e4:da:
         ca:25:d3:9e:36:a9:bb:ff:b3:07:a4:d0:38:b1:a3:05:c9:0c:
         3a:c6:23:5e:97:e7:5b:5c:c9:ed:9f:17:de:16:d2:eb:1e:6d:
         a9:1b:07:fb:68:30:1a:3d:bb:88:0b:40:2d:95:b6:c6:f5:88:
         21:7f:ec:72:e9:d8:d4:86:e6:ba:58:25:d4:c5:23:bf:fb:62:
         69:89:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org