Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32332e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32332e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          CWImPdiJvwdpfKFE+X0GJU16hzanON9JSGhzyCBc8Hs=
Subject key identifier:   56:1E:E0:94:C9:E3:38:0E:B2:39:20:9B:F5:C5:74:1E:92:78:52:5D
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       68168DA09DA84F919741E33C5A3A7E469A7D12CF
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32332e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:15 +0000
ROA not before:           Thu 04 Apr 2024 10:55:15 +0000
ROA not after:            Thu 03 Apr 2025 11:00:15 +0000
asID:                     263611
IP address blocks:        179.124.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:16:8d:a0:9d:a8:4f:91:97:41:e3:3c:5a:3a:7e:46:9a:7d:12:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:15 2024 GMT
            Not After : Apr  3 11:00:15 2025 GMT
        Subject: CN=561EE094C9E3380EB239209BF5C5741E9278525D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:5d:26:e2:87:05:cc:78:42:82:95:7f:3f:
                    57:89:f5:62:0e:4a:0d:45:41:0d:89:64:44:03:89:
                    27:ff:d1:59:ab:5b:19:e5:31:15:6f:0d:52:1a:c9:
                    5b:65:9e:a1:0d:e1:4f:7e:ca:80:6f:2e:8c:55:89:
                    45:1c:b4:90:c7:d9:fd:35:71:a8:7b:05:a2:fc:df:
                    31:5b:12:1e:d4:3a:5a:e4:0d:0c:5f:95:39:c2:6f:
                    17:6f:92:53:5e:0d:dd:8a:a5:cd:c2:1b:6c:e7:6d:
                    ef:4c:c5:e3:06:78:b0:2d:df:d0:8e:2a:6c:43:cb:
                    fb:42:a9:8b:6c:88:7b:e5:c0:b3:9f:05:25:eb:1d:
                    61:17:ab:e6:7e:14:a9:6b:10:84:2e:cd:19:c9:de:
                    f8:25:22:d4:59:8c:d3:05:8d:a3:a4:6a:ef:c1:7a:
                    ab:3c:dc:d2:15:c9:9b:6f:61:f1:99:51:c3:10:42:
                    58:fd:37:4a:b9:cd:f2:54:30:bf:0d:1b:b9:bb:e9:
                    66:83:76:96:27:8c:a0:a6:a3:de:b0:bb:a6:64:be:
                    8f:bb:da:84:01:b1:9b:e2:07:49:4e:e4:4d:05:a4:
                    92:64:d1:e9:74:85:d8:0f:33:18:79:53:c3:e6:70:
                    34:bd:75:16:56:5f:53:7d:ab:9a:8d:61:b2:e8:18:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1E:E0:94:C9:E3:38:0E:B2:39:20:9B:F5:C5:74:1E:92:78:52:5D
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32332e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:66:b4:38:be:19:b6:73:3d:a3:a5:ed:5c:6e:3d:6e:37:c6:
         2e:1a:56:6f:90:73:3b:04:5f:41:16:8f:d4:bd:b5:5c:eb:39:
         e9:94:12:e7:8b:d3:b5:5d:31:04:0c:ef:03:c1:0a:a6:f1:c1:
         85:5a:f8:1f:6e:d4:ae:2a:ec:66:84:b5:87:63:08:2f:7c:dd:
         6e:a5:f2:b8:7a:bf:69:33:7f:b6:18:ee:fe:d7:1c:94:d1:a9:
         67:ac:bf:57:06:89:0b:95:64:da:63:33:77:f1:57:90:70:41:
         2b:3c:c1:96:c6:55:9e:e0:12:02:16:56:17:1b:0f:e4:cf:21:
         4c:56:b1:07:c3:41:34:14:af:de:be:04:96:5b:3f:42:3f:dc:
         53:68:92:b0:ce:58:e8:22:99:15:3b:2b:bc:5f:c2:f4:b2:6a:
         57:88:28:d7:47:25:53:71:77:0a:fd:63:51:3b:9f:65:74:31:
         c7:9e:7d:9a:ae:83:2d:c2:89:49:d9:ac:49:de:dd:19:49:79:
         9e:ad:88:3a:46:62:05:d7:08:58:75:81:c5:42:7c:b1:27:f7:
         5d:62:f5:39:0f:e0:0d:02:d5:e1:78:47:78:2f:49:05:c9:83:
         5d:08:a1:83:ec:51:70:65:41:21:53:e2:6f:73:2d:e6:65:4e:
         fe:4b:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:20 2024 by rpki-client on console-ams.rpki-client.org