Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32352e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32352e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          vaYItt5k2wUuK8cuUxT6NZb/QBAMpIEO+v0JRfWa+vc=
Subject key identifier:   92:AD:44:FC:35:5E:BA:30:C9:E8:20:32:8A:E5:10:E1:45:BF:79:D2
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       602D6AD82CADC0C42117A78E5176E7CD4C80C7CC
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32352e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:15 +0000
ROA not before:           Thu 04 Apr 2024 10:55:15 +0000
ROA not after:            Thu 03 Apr 2025 11:00:15 +0000
asID:                     263611
IP address blocks:        179.124.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2d:6a:d8:2c:ad:c0:c4:21:17:a7:8e:51:76:e7:cd:4c:80:c7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:15 2024 GMT
            Not After : Apr  3 11:00:15 2025 GMT
        Subject: CN=92AD44FC355EBA30C9E820328AE510E145BF79D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:7e:e4:98:17:9b:58:57:ca:84:21:fa:ce:
                    07:72:52:7a:43:26:3f:76:df:c0:b0:14:9e:8a:54:
                    01:4e:e4:ca:70:e8:80:47:cf:69:8e:49:02:15:5a:
                    67:27:07:5d:5a:b9:b7:e8:60:4e:4a:fc:6a:54:65:
                    81:be:22:33:29:4f:e9:ed:35:89:9a:8a:7a:f9:81:
                    08:a3:db:84:c6:9a:ce:f3:e7:46:d7:4f:50:50:48:
                    a5:2d:6a:f0:13:3f:b6:59:7a:d8:e2:17:66:2c:fe:
                    26:f3:8a:d9:fb:fe:c0:cd:90:14:db:47:9e:7c:97:
                    15:e2:31:85:6b:0b:c1:c6:93:4c:c6:70:b8:8b:ec:
                    d1:3e:69:d7:10:7b:ed:12:36:c8:4f:28:5a:dd:c6:
                    05:6c:40:b1:74:11:91:e8:77:63:f8:64:0c:7b:ea:
                    ad:e5:0f:01:5d:67:12:85:f8:b5:4b:99:ed:03:d7:
                    fd:38:7f:6e:a1:8e:66:bf:45:02:8c:19:06:ec:1a:
                    01:f1:ef:39:b2:f4:b7:63:79:ef:48:3c:f6:8f:97:
                    db:57:80:01:df:5b:f8:ae:99:44:f5:a6:b2:cb:f9:
                    e0:f7:cb:50:0d:ab:11:62:27:fe:eb:a9:95:91:4a:
                    32:63:82:12:0a:8e:b7:38:74:b3:0f:17:84:a2:74:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:44:FC:35:5E:BA:30:C9:E8:20:32:8A:E5:10:E1:45:BF:79:D2
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32352e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:86:1e:fe:e1:1b:68:39:1b:7b:e5:2e:30:5a:7c:09:de:82:
         f7:8f:98:82:d6:e8:30:59:2b:e2:3b:93:da:ec:8c:2e:39:47:
         52:0b:58:dd:b1:21:f0:d8:24:6f:40:34:08:82:ea:bf:d3:a6:
         94:a0:8d:f9:9e:23:c0:e1:b0:b4:20:6f:b2:59:2b:04:69:e6:
         8f:7e:89:f1:09:28:96:e2:1b:28:58:96:20:27:7c:cf:00:a2:
         b1:ef:50:52:6c:1f:e1:17:6f:4c:e6:22:fb:e3:56:2b:d5:f5:
         49:f0:a6:d9:c9:7a:7e:63:be:8c:3d:a0:0c:2f:cd:0b:f9:54:
         e0:e8:25:d8:0d:1d:a4:fb:52:94:da:37:06:03:b5:be:4a:c1:
         72:dc:0b:2c:2e:7d:af:42:bf:9a:57:36:c7:46:12:e1:d6:72:
         f4:30:e9:97:ed:2c:09:73:ff:51:8e:1b:d7:94:16:ab:0b:4a:
         96:a9:20:cc:fb:9f:b8:13:2f:ea:e9:67:bd:5d:52:da:16:be:
         9f:19:9c:f0:f9:ba:41:12:43:58:0d:7c:3f:67:81:ea:7f:c8:
         e7:e9:61:6a:7d:89:58:28:fa:60:e6:b8:60:99:a8:e7:05:3a:
         56:47:16:c1:d3:b0:91:3d:c7:11:ed:c3:2b:ae:e4:d6:9d:1c:
         c9:ea:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:32 2024 by rpki-client on console-ams.rpki-client.org