Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38352e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38352e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          bgVY8Q5+1gDkACogLehNQ+7nvBHRQe9aBFJWKou6KyQ=
Subject key identifier:   C5:65:21:94:9E:85:5C:0F:90:40:99:6C:4A:65:75:72:5F:30:62:E6
Certificate issuer:       /CN=E1C3821086E172D7404AE335C21C2D33F448F991
Certificate serial:       6AA8F8579C7B507A34B520712D4B2E4A6BADCB8A
Authority key identifier: E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38352e302f32342d3234203d3e20323732363737.roa
Signing time:             Fri 10 May 2024 22:19:04 +0000
ROA not before:           Fri 10 May 2024 22:14:04 +0000
ROA not after:            Fri 09 May 2025 22:19:04 +0000
asID:                     272677
IP address blocks:        179.63.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 08:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a8:f8:57:9c:7b:50:7a:34:b5:20:71:2d:4b:2e:4a:6b:ad:cb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C3821086E172D7404AE335C21C2D33F448F991
        Validity
            Not Before: May 10 22:14:04 2024 GMT
            Not After : May  9 22:19:04 2025 GMT
        Subject: CN=C56521949E855C0F9040996C4A6575725F3062E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b6:ea:f4:f4:43:d5:09:e9:07:a6:4b:02:65:
                    35:26:3e:d4:26:73:0e:76:b8:82:bd:4b:0c:52:b8:
                    d9:f2:8a:28:33:d1:91:67:c3:4a:33:d1:ad:7c:80:
                    c2:07:58:78:05:27:19:0e:99:f1:02:4a:e3:78:6b:
                    70:c8:20:9c:8b:e5:40:06:2f:f8:2c:60:40:14:5f:
                    bb:0a:54:1a:6b:61:13:cd:09:a8:36:48:72:e0:3c:
                    44:9f:96:52:0b:1e:01:8c:39:45:3a:a5:37:b1:16:
                    3c:bf:6a:ec:9e:7a:bd:72:35:c6:f1:79:af:ec:5c:
                    24:79:4d:d4:17:b5:e6:b5:e3:c6:9e:80:e4:de:69:
                    8e:44:ea:7e:6b:b1:44:c9:8a:57:32:76:0e:1d:a0:
                    0b:c7:98:75:9d:60:88:b0:dc:58:19:0b:24:ac:b9:
                    1a:15:25:25:1c:c2:f3:7a:2c:dc:be:bd:cc:4f:bf:
                    97:a4:35:de:14:ce:6e:13:62:b7:75:06:da:21:8e:
                    e0:23:89:2c:03:ea:be:2c:4d:39:75:fa:0e:81:e5:
                    9b:df:1c:16:c8:e6:44:f7:32:79:76:c7:6a:ac:27:
                    c8:5d:b4:5a:b4:01:20:7c:d5:9d:cc:41:68:ec:2a:
                    f7:7a:ce:f8:e2:45:0c:5f:51:e0:1a:3a:f5:5c:6e:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:21:94:9E:85:5C:0F:90:40:99:6C:4A:65:75:72:5F:30:62:E6
            X509v3 Authority Key Identifier:
                keyid:E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38352e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:a0:00:28:27:57:b5:d4:2a:e2:e6:f4:95:e6:c2:e4:b6:
         7d:ef:f6:bc:a9:3e:b0:33:3c:6c:82:62:f9:73:27:d2:53:7f:
         03:51:1e:10:6e:6b:9e:2a:cd:27:32:bd:f0:dd:14:d8:d0:37:
         df:3d:f6:2d:f7:0d:88:51:47:d1:fc:00:a2:26:44:f6:fb:bd:
         79:83:b8:56:5e:c5:18:37:69:b0:ee:ae:cf:d7:c6:5a:d6:c8:
         e3:ca:52:42:ba:3d:df:5e:eb:04:04:ec:42:ba:26:7d:9f:9d:
         75:15:9e:ed:8b:a0:13:b9:11:0f:8e:e8:30:90:d5:c1:03:f5:
         f4:a3:15:23:3d:ef:dd:34:78:27:aa:87:44:4f:45:5b:8c:6c:
         30:5f:d7:d0:dd:93:12:bb:cb:09:33:53:83:da:16:e6:3d:38:
         d8:f6:47:d6:37:98:d5:05:7f:b2:d2:71:dc:e5:82:91:ef:aa:
         93:49:b0:0e:8e:51:6e:f7:81:cb:f5:05:d2:b7:3f:23:74:46:
         ea:0c:1c:02:f0:6c:62:8f:11:5d:6f:b2:83:a9:7c:bc:44:5c:
         57:20:f6:c8:9d:5a:c3:63:8f:05:de:fa:38:fb:d1:f4:de:aa:
         a8:d0:cc:70:e3:c9:b1:a0:9f:1f:83:cf:f9:9b:f3:4d:fc:48:
         d4:bb:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:46 2024 by rpki-client on console-fra.rpki-client.org