Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa
File:                     3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          m8eupGZ0NyAwaqkEkCdMmD+1p3AMR+G00awGqbW+Nmo=
Subject key identifier:   BB:AC:ED:66:B8:E2:2F:CB:3D:AD:51:B6:D4:2E:18:C1:37:67:56:C1
Certificate issuer:       /CN=308FFC4A88BB1ED21EB114513F23EB09CF006363
Certificate serial:       7965D590B11BD731EDE05ACD45C84A81E9E0AC8D
Authority key identifier: 30:8F:FC:4A:88:BB:1E:D2:1E:B1:14:51:3F:23:EB:09:CF:00:63:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/308FFC4A88BB1ED21EB114513F23EB09CF006363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa
Signing time:             Tue 23 Jul 2024 19:44:06 +0000
ROA not before:           Tue 23 Jul 2024 19:39:06 +0000
ROA not after:            Tue 22 Jul 2025 19:44:06 +0000
asID:                     271650
IP address blocks:        179.63.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/308FFC4A88BB1ED21EB114513F23EB09CF006363.crl
                          rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/308FFC4A88BB1ED21EB114513F23EB09CF006363.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/308FFC4A88BB1ED21EB114513F23EB09CF006363.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:d5:90:b1:1b:d7:31:ed:e0:5a:cd:45:c8:4a:81:e9:e0:ac:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308FFC4A88BB1ED21EB114513F23EB09CF006363
        Validity
            Not Before: Jul 23 19:39:06 2024 GMT
            Not After : Jul 22 19:44:06 2025 GMT
        Subject: CN=BBACED66B8E22FCB3DAD51B6D42E18C1376756C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:7a:0b:00:b9:d2:d0:84:16:0e:0c:df:59:
                    25:dc:ee:d9:ba:72:65:8f:7b:52:10:c1:78:6d:bf:
                    75:29:7b:73:4c:c7:5d:2c:9e:d3:82:42:83:7f:45:
                    ea:34:31:d0:e0:b5:02:d4:f9:27:ee:4c:56:77:cb:
                    62:c3:cd:e0:96:b6:93:7a:e3:03:28:6a:c4:07:08:
                    c2:38:14:1c:68:a3:ef:38:60:92:3b:69:e5:01:71:
                    9b:73:90:33:da:58:71:9a:a3:ad:44:e3:c6:93:6f:
                    6c:13:90:c5:e4:38:38:85:97:0d:a7:5d:3e:10:d0:
                    c0:54:c8:1c:fa:66:5c:77:1d:be:cc:2c:24:d3:82:
                    b9:a1:95:0f:47:b4:0f:8e:47:a1:50:17:00:ec:de:
                    0b:2d:f6:7c:e1:12:91:43:f0:5f:a9:2f:f5:55:7f:
                    49:66:86:0f:c5:12:fe:86:dd:3e:f4:e4:52:b9:11:
                    33:76:a6:99:73:32:a8:1d:6b:23:c9:29:24:10:97:
                    29:d3:db:df:b7:0a:c7:16:34:14:c4:0a:e9:ab:dd:
                    d7:9a:dd:8d:1f:c1:d5:e4:a6:89:ca:f8:7c:cb:6f:
                    3b:9f:5a:27:0b:ab:75:25:fb:14:a6:20:2b:d8:0a:
                    d6:d3:65:1d:f6:5a:13:b5:40:88:a7:0b:b1:af:c5:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:ED:66:B8:E2:2F:CB:3D:AD:51:B6:D4:2E:18:C1:37:67:56:C1
            X509v3 Authority Key Identifier:
                keyid:30:8F:FC:4A:88:BB:1E:D2:1E:B1:14:51:3F:23:EB:09:CF:00:63:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/308FFC4A88BB1ED21EB114513F23EB09CF006363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/308FFC4A88BB1ED21EB114513F23EB09CF006363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:47:a0:eb:85:77:d2:c5:f9:46:b6:43:e8:16:62:0a:c3:
         7b:8c:43:28:a6:03:a1:c3:0a:ab:5c:47:b0:e5:4f:fd:87:39:
         76:2f:43:cf:db:cd:5a:a0:33:4d:c7:76:aa:eb:a9:25:21:57:
         ac:69:ea:3c:17:27:d4:73:62:a9:52:37:02:04:2e:ac:7b:77:
         af:72:3b:12:ea:5c:e4:77:6c:fa:f5:cd:8b:70:45:4f:4b:2a:
         07:c4:6a:85:fa:78:be:c9:59:90:e9:dc:69:52:17:c2:38:99:
         f6:a8:d3:f1:aa:ef:37:b3:81:75:e3:bc:8a:71:1c:09:18:d2:
         a6:7c:3d:b0:8d:b9:03:5e:0b:53:03:60:c0:02:00:6a:ca:e9:
         f3:43:23:ce:df:cd:c9:dd:e6:fc:11:82:e6:9a:06:5d:73:52:
         a8:11:d0:39:84:1f:14:41:a8:d4:c3:6c:3a:c4:47:30:dd:6a:
         7d:15:29:ea:e2:da:4d:45:b7:5a:c9:56:dd:6e:9b:94:aa:98:
         14:2b:0d:99:cf:37:d1:43:ae:17:a4:dc:dd:da:bc:d3:15:2c:
         8f:29:3d:95:6b:eb:ae:21:14:13:c4:6b:3b:ee:28:95:db:fd:
         90:ee:a3:19:fc:30:dd:ac:47:b9:b5:4e:e4:02:1e:f0:15:14:
         16:cc:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:12 2024 by rpki-client on console-ams.rpki-client.org