Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32322e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32322e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          q9eMEE/rhDYrslLx7QkyvSCuWlKqU3jvxh3Kd19+SaA=
Subject key identifier:   69:15:7A:FC:44:E6:CE:20:C1:77:48:73:02:9A:14:09:F6:2D:19:08
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       6FC78B166CE19C3782CE87CA7ABFE9D2288034ED
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32322e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:15 +0000
ROA not before:           Thu 04 Apr 2024 10:55:15 +0000
ROA not after:            Thu 03 Apr 2025 11:00:15 +0000
asID:                     263611
IP address blocks:        179.124.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c7:8b:16:6c:e1:9c:37:82:ce:87:ca:7a:bf:e9:d2:28:80:34:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:15 2024 GMT
            Not After : Apr  3 11:00:15 2025 GMT
        Subject: CN=69157AFC44E6CE20C1774873029A1409F62D1908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:4c:de:ae:b4:83:ac:23:ea:bb:8a:0f:13:
                    a4:75:8d:7b:1b:6f:57:85:f0:43:00:d9:ba:08:b4:
                    73:26:58:b4:f7:7c:ea:2a:9e:91:ee:41:51:7e:e5:
                    21:17:8e:0b:73:66:99:5d:d0:e1:8f:24:7c:80:d8:
                    e8:b6:10:cc:57:00:b3:8c:ab:6d:30:9c:03:5a:06:
                    e0:da:ec:a9:c6:73:de:1f:9c:0e:ed:5f:e8:12:6f:
                    65:51:3a:9b:c7:d9:02:12:89:d1:86:3c:ba:0e:65:
                    9a:0e:42:8d:77:64:80:ad:5a:bd:30:56:e5:d3:8a:
                    f5:dd:a1:9f:32:8a:62:88:3f:b6:42:3a:02:f8:9d:
                    16:02:1f:61:94:28:93:b9:93:13:01:f4:50:41:f7:
                    0a:a2:b9:84:79:5c:fe:b2:6a:af:b9:0c:d9:f0:4e:
                    52:10:14:77:f2:09:f9:f9:e1:1e:80:cc:d5:5f:b7:
                    84:47:f6:1a:e0:ef:48:ac:5d:e0:b4:08:ad:d9:6a:
                    56:57:e9:4e:66:7e:c6:98:9e:4d:72:a8:a1:63:18:
                    ec:de:2a:f2:98:13:b1:2a:b7:ed:ae:c5:8d:cc:e0:
                    49:36:94:b0:62:6f:16:3d:a6:dc:ab:d0:3f:d3:48:
                    53:01:a7:dd:0f:f2:59:44:10:dd:73:46:18:24:a3:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:15:7A:FC:44:E6:CE:20:C1:77:48:73:02:9A:14:09:F6:2D:19:08
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32322e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:cb:3c:e6:32:bc:6f:2b:c8:fe:89:21:9b:a2:b3:f4:a7:
         e5:a3:f8:39:bf:e3:bd:c5:a9:87:ea:ac:b5:32:9a:fa:fd:bb:
         85:15:55:e2:98:59:98:b8:d8:0b:82:a9:94:39:dd:3f:06:bc:
         25:4f:19:63:ee:c7:47:c2:59:18:1b:bd:1b:a6:b6:f8:7b:a2:
         76:cf:51:40:c5:4e:68:21:5c:ca:c3:6d:d9:6f:72:01:03:3c:
         2d:0a:b7:ce:ba:1f:e0:4c:44:70:92:1a:67:ca:23:7d:44:86:
         09:c3:e0:3e:e7:01:e0:2a:db:73:89:f4:c8:63:31:36:e5:92:
         c6:6b:7b:03:42:ae:49:bf:2a:ba:d7:21:60:4c:93:fd:37:ce:
         34:c8:05:e9:da:32:c2:06:96:10:a4:36:79:c7:66:e4:37:43:
         e2:a6:00:55:a2:97:bd:35:5c:e9:9b:87:8a:87:b4:56:a8:17:
         39:f8:e1:20:31:11:4f:f9:3c:82:1c:a8:c5:1f:ba:e3:f7:7b:
         59:80:f9:58:46:bb:b6:2f:6f:b5:3f:59:fd:fc:ab:be:0e:f5:
         69:67:3f:19:8c:32:cb:0f:99:7b:1a:ae:48:78:8d:2e:d3:49:
         c4:0f:0b:45:6a:07:31:34:89:a0:e2:4b:37:4f:59:88:56:f3:
         db:74:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:20 2024 by rpki-client on console-ams.rpki-client.org