Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa
File:                     3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (raw, json)
Hash identifier:          jPHOmQlObNRMN8FO6Xrj6dawCf48Phx/yz8/0XZviLs=
Subject key identifier:   79:F0:C5:75:EF:4F:B5:67:E3:8D:3A:08:36:C2:76:47:D2:6E:0E:C6
Certificate issuer:       /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
Certificate serial:       49FF9845D1C58612718B4F40B391519D4390C060
Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa
Signing time:             Thu 04 Apr 2024 00:35:43 +0000
ROA not before:           Thu 04 Apr 2024 00:30:43 +0000
ROA not after:            Thu 03 Apr 2025 00:35:43 +0000
asID:                     263083
IP address blocks:        179.106.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl
                          rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ff:98:45:d1:c5:86:12:71:8b:4f:40:b3:91:51:9d:43:90:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Validity
            Not Before: Apr  4 00:30:43 2024 GMT
            Not After : Apr  3 00:35:43 2025 GMT
        Subject: CN=79F0C575EF4FB567E38D3A0836C27647D26E0EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:c8:49:78:e5:7f:50:df:7c:03:4f:46:69:
                    8b:90:dc:0d:ce:c3:ef:a7:9d:16:e2:1b:94:54:50:
                    2a:e7:54:9f:f3:0b:f0:66:85:19:cb:e9:ed:1b:ef:
                    94:b8:8d:36:54:94:e8:74:77:09:a0:9f:9d:bd:d5:
                    e8:7f:0a:f4:bb:6c:6d:a4:c6:4b:96:36:3c:59:52:
                    df:bd:04:11:9a:27:69:2e:39:28:ea:a5:34:88:f6:
                    36:40:4c:ce:e5:45:0e:e2:b5:0b:78:01:c6:48:f8:
                    ae:76:8e:e6:1f:42:97:89:20:e4:58:74:fe:c5:9d:
                    36:d0:11:9e:30:26:47:48:f4:88:b6:33:a6:ca:f7:
                    5b:06:b8:e4:d7:c1:d1:bf:8b:24:59:b7:09:44:84:
                    90:63:c7:45:c9:47:55:19:d4:ed:48:23:b0:c0:47:
                    ca:3d:d1:5b:ae:c9:0c:71:72:56:07:34:15:20:fa:
                    95:04:aa:86:38:99:af:1e:b6:23:e1:61:e3:ba:60:
                    0e:ec:da:10:7a:14:da:00:ba:47:f5:d1:87:26:04:
                    60:6f:a7:fb:8e:52:fd:16:3e:13:43:60:fb:f1:df:
                    3f:da:3b:da:e3:86:1c:24:5b:4c:14:9a:3d:4e:d6:
                    e7:78:74:97:7c:d9:f4:a0:3a:cc:34:4f:28:c3:25:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:C5:75:EF:4F:B5:67:E3:8D:3A:08:36:C2:76:47:D2:6E:0E:C6
            X509v3 Authority Key Identifier:
                keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:57:ff:20:1a:bd:e7:7b:68:6a:ef:c1:7f:37:c0:46:9a:81:
         4f:63:cb:0b:f9:25:82:31:53:a1:60:28:6b:1d:b9:af:ce:20:
         e7:4a:2f:f8:fb:33:30:42:71:4d:b5:15:f8:e2:ad:15:e3:3d:
         d5:b3:31:bc:f7:cf:fb:33:85:e5:75:f5:09:01:02:4b:e4:5b:
         91:3f:f5:f9:04:f4:ea:fb:dd:d0:1c:fb:53:33:34:93:62:20:
         ca:77:0a:b0:28:90:e6:c4:08:e9:c1:79:3f:9e:03:de:9b:0c:
         ff:21:c0:b7:44:49:f0:db:3c:d2:e8:52:2c:41:ed:24:01:ec:
         82:4e:19:8a:b6:74:dc:77:21:7a:e3:bf:e3:c7:4c:ec:b7:c3:
         88:83:90:f6:54:ef:19:b7:c2:52:4c:70:9e:0a:64:dc:7d:94:
         e6:fc:60:36:ac:0d:7b:79:db:87:e4:c8:59:fb:72:ee:36:ef:
         05:6f:2c:cb:81:ba:6d:e0:4a:e3:aa:4a:49:0b:c6:d7:e1:51:
         db:f5:25:bc:cc:5c:ff:6f:ee:2a:2a:af:00:b1:14:2d:53:32:
         3d:23:4e:35:f9:7c:8e:1a:24:7b:cd:41:d6:e8:58:c0:60:8e:
         1f:8e:66:8f:1e:35:7e:58:41:c1:00:5f:be:ad:e8:c7:52:0d:
         61:0d:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:42 2024 by rpki-client on console-ams.rpki-client.org