Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
File:                     3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (raw, json)
Hash identifier:          heV7tsRmUf0VUUueVBbf1ND2zVAgOmHp+LEQSkNsXYM=
Subject key identifier:   BD:AE:01:A6:AC:00:7E:FE:50:91:75:2A:97:16:5A:27:38:30:BC:6A
Certificate issuer:       /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
Certificate serial:       2D212E62E7657EF40B7AC86C40080FFB12DE5578
Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
Signing time:             Thu 04 Apr 2024 05:39:41 +0000
ROA not before:           Thu 04 Apr 2024 05:34:41 +0000
ROA not after:            Thu 03 Apr 2025 05:39:41 +0000
asID:                     271101
IP address blocks:        179.48.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl
                          rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:21:2e:62:e7:65:7e:f4:0b:7a:c8:6c:40:08:0f:fb:12:de:55:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
        Validity
            Not Before: Apr  4 05:34:41 2024 GMT
            Not After : Apr  3 05:39:41 2025 GMT
        Subject: CN=BDAE01A6AC007EFE5091752A97165A273830BC6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:5b:a9:96:7e:aa:1a:b0:be:50:34:59:e2:
                    ce:13:72:2b:ab:fd:5c:46:b4:e8:ca:0b:da:c7:fa:
                    ab:1b:a1:aa:1a:01:c3:3d:d6:65:8b:03:fb:76:68:
                    33:91:1a:a4:a9:bf:2c:d6:31:fd:8f:7a:03:17:9e:
                    db:6a:b2:56:28:39:3e:a7:e1:fa:f4:fe:27:a5:79:
                    52:46:c6:30:42:c8:fb:39:b2:b4:9b:5f:fa:5c:2b:
                    31:0c:c4:78:57:e0:02:b1:c9:c8:81:e9:12:18:23:
                    99:26:12:ff:33:62:9a:22:2a:e5:b5:be:5b:05:7a:
                    89:7b:6e:7f:d6:d1:89:ba:ad:5f:76:57:43:24:a5:
                    86:45:1e:a0:63:ba:41:3c:35:85:23:24:66:28:0a:
                    bb:28:b4:0f:3d:4e:22:44:3e:b5:34:29:b1:11:f6:
                    98:5b:67:2a:d9:fe:de:d6:58:52:4e:0d:4e:04:32:
                    bf:bb:27:5e:6c:ff:7a:ff:04:6b:72:34:cb:78:8b:
                    e1:41:9a:de:6e:3b:e1:e6:29:d5:81:1c:05:a6:80:
                    6a:da:0a:2f:f9:53:b5:48:cd:a9:8c:4c:14:fb:3d:
                    53:c7:ae:9f:36:f6:be:aa:94:65:c9:d9:78:92:b8:
                    48:ff:22:07:30:e0:03:d2:d8:35:f6:7c:d9:a7:81:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AE:01:A6:AC:00:7E:FE:50:91:75:2A:97:16:5A:27:38:30:BC:6A
            X509v3 Authority Key Identifier:
                keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:75:19:66:7a:39:c3:8f:c6:5c:16:4b:44:b8:ba:9d:c5:
         00:15:98:3e:ff:25:7e:2e:70:fb:34:49:cb:db:4e:40:92:54:
         92:20:b0:2e:4f:1f:da:67:52:4d:21:5a:20:96:2a:82:03:a4:
         3b:4b:5a:bc:a9:f7:d9:40:59:b7:6f:6a:b4:41:bc:78:53:02:
         b6:6b:a1:23:e4:c5:ac:fb:63:25:98:f8:ef:b3:95:4b:1f:f4:
         fa:7f:e8:48:82:bb:58:2c:f9:4b:b2:01:7e:81:3c:7e:30:cb:
         d1:b3:68:b4:a7:c0:a7:ea:d7:b7:81:88:dd:af:c5:28:d1:8c:
         32:10:b5:ba:cf:74:5e:e8:b2:6b:9c:4a:6c:0b:56:fd:42:19:
         fd:53:24:fb:f9:76:d6:72:60:12:2b:e4:70:2e:0e:88:9a:41:
         81:65:03:ab:b8:28:e0:c2:00:20:bc:8c:41:ea:26:4b:6e:52:
         85:67:86:fc:f7:49:a6:a2:6d:85:2f:7c:70:5c:30:f5:83:eb:
         e0:3b:53:5d:d1:3e:37:2f:67:43:52:42:9d:90:cd:7d:dc:2a:
         60:b3:64:08:ef:f8:88:4b:2b:73:07:87:4c:63:6b:18:3f:5a:
         34:2a:1c:31:29:44:ae:2c:1e:21:29:89:fc:c1:fe:56:df:08:
         08:0e:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:28 2024 by rpki-client on console-ams.rpki-client.org