Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38372e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38372e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          CjEN7q0RcLOFRWMEnWg9OYOYMM+f+/xGOwJndgD9LqY=
Subject key identifier:   6D:00:CE:59:5E:C2:7F:FE:29:2E:20:17:EC:99:30:60:DB:36:99:B3
Certificate issuer:       /CN=32574FF826EE366D0E94D45F2B3B886489F05A78
Certificate serial:       3E0CFDDE122DA386450932ED24B9049569963249
Authority key identifier: 32:57:4F:F8:26:EE:36:6D:0E:94:D4:5F:2B:3B:88:64:89:F0:5A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32574FF826EE366D0E94D45F2B3B886489F05A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38372e302f32342d3234203d3e20323732363737.roa
Signing time:             Tue 23 Jul 2024 20:18:17 +0000
ROA not before:           Tue 23 Jul 2024 20:13:17 +0000
ROA not after:            Tue 22 Jul 2025 20:18:17 +0000
asID:                     272677
IP address blocks:        179.63.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/32574FF826EE366D0E94D45F2B3B886489F05A78.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/32574FF826EE366D0E94D45F2B3B886489F05A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32574FF826EE366D0E94D45F2B3B886489F05A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0c:fd:de:12:2d:a3:86:45:09:32:ed:24:b9:04:95:69:96:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32574FF826EE366D0E94D45F2B3B886489F05A78
        Validity
            Not Before: Jul 23 20:13:17 2024 GMT
            Not After : Jul 22 20:18:17 2025 GMT
        Subject: CN=6D00CE595EC27FFE292E2017EC993060DB3699B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:19:2e:cd:dd:e1:38:71:1f:01:31:fb:f5:
                    22:1d:91:52:be:86:89:b3:a7:cb:bd:0a:8f:ec:1f:
                    68:68:d5:9b:9b:86:40:dd:c2:38:12:43:eb:0a:74:
                    d1:b9:7d:1d:89:8a:a3:89:e6:ee:4d:34:8d:d5:e6:
                    7b:77:c4:54:32:a8:95:e8:4f:98:a2:8f:ac:96:0b:
                    fa:d2:ff:7e:0a:08:50:f1:02:0e:35:7a:cc:80:65:
                    c6:d9:c2:53:da:f3:f3:08:2f:d9:eb:9f:eb:9e:7e:
                    58:f0:ca:be:f8:74:d8:9e:5f:15:6e:da:86:7a:b4:
                    2d:d3:11:d2:87:65:c9:03:0b:d4:5e:35:ef:1b:1b:
                    57:07:97:ce:34:cd:72:a5:78:55:57:a8:ee:e1:53:
                    f1:cb:6f:2b:35:8b:6a:62:58:27:50:f8:46:9b:66:
                    e7:6d:29:cf:c2:83:43:09:59:a9:2b:2c:ae:52:dd:
                    cb:cc:ac:33:88:70:33:56:c8:59:60:ed:33:a9:c5:
                    a1:9b:8e:d3:7f:52:a7:46:f6:bc:04:46:e9:4a:cf:
                    5e:0c:e6:32:e9:02:76:93:e3:b0:13:ea:26:04:95:
                    1a:72:d3:8e:68:2c:40:a1:75:0e:53:de:8e:0d:d5:
                    49:f5:7d:e2:09:1b:e0:ee:68:88:45:12:0d:cd:62:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:CE:59:5E:C2:7F:FE:29:2E:20:17:EC:99:30:60:DB:36:99:B3
            X509v3 Authority Key Identifier:
                keyid:32:57:4F:F8:26:EE:36:6D:0E:94:D4:5F:2B:3B:88:64:89:F0:5A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/32574FF826EE366D0E94D45F2B3B886489F05A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32574FF826EE366D0E94D45F2B3B886489F05A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38372e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:34:75:57:4c:7a:06:37:1c:47:0f:bd:b4:f7:6a:02:2c:33:
         3b:4b:f3:ee:85:75:41:f1:07:95:4b:72:8d:04:36:c0:d6:1d:
         de:f0:76:77:9a:90:aa:d0:c3:56:59:86:d6:c1:d9:51:a6:eb:
         dc:76:bd:b3:68:db:2d:2a:3d:8a:f0:e0:aa:e8:23:c4:e0:0f:
         f0:7d:92:7d:d0:76:06:78:41:0e:50:be:a9:fe:e9:97:9e:c3:
         25:a7:97:57:80:d8:45:39:eb:86:62:7a:28:24:dc:3b:99:ad:
         f6:38:00:15:4f:55:a6:60:10:06:5b:6c:dc:a1:92:56:9f:9a:
         8d:02:30:52:59:89:29:b4:9c:6a:bc:4b:79:f0:2d:48:e9:06:
         cb:bb:c4:89:c0:e0:95:1c:41:15:2b:1e:b6:fd:83:4a:c9:9b:
         71:bd:87:3b:7d:3d:55:c5:32:ec:5a:62:d1:c7:54:4b:ff:ef:
         af:05:38:6f:12:fc:2c:f0:2d:34:c6:a3:f6:6e:62:47:78:fc:
         95:ef:97:d0:2f:9b:ed:38:a3:53:8c:d3:d8:47:1d:72:e6:e5:
         dd:08:e1:72:ed:2f:ce:3b:fe:31:56:04:cb:a8:d2:a6:a7:89:
         9f:cc:6d:06:ad:ce:7f:8d:fb:b3:00:87:2d:94:c7:5e:8c:23:
         c1:95:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:10 2024 by rpki-client on console-ams.rpki-client.org