Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32362e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32362e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          FySwW2RdvzAnT17xx3sI6LpCHK9lC3YWyZm0Y+ouIQE=
Subject key identifier:   08:09:EF:6D:41:18:1C:A8:17:82:4F:EE:BB:C4:87:E9:6A:1C:CB:0C
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       21F62F869BCE3B4DBFE57A2DF6B1BE236E132D59
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32362e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:16 +0000
ROA not before:           Thu 04 Apr 2024 10:55:16 +0000
ROA not after:            Thu 03 Apr 2025 11:00:16 +0000
asID:                     263611
IP address blocks:        179.124.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f6:2f:86:9b:ce:3b:4d:bf:e5:7a:2d:f6:b1:be:23:6e:13:2d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:16 2024 GMT
            Not After : Apr  3 11:00:16 2025 GMT
        Subject: CN=0809EF6D41181CA817824FEEBBC487E96A1CCB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:8b:e3:1c:72:70:db:8b:38:8a:90:4a:5f:
                    6c:84:38:3b:d1:42:05:89:be:5a:41:03:96:5f:8a:
                    ea:94:ed:56:59:f2:d4:20:d9:3c:b5:99:2d:d2:6b:
                    f8:4b:0c:4e:8d:34:b0:6a:04:99:ce:1c:4b:8c:d0:
                    01:01:5c:96:8a:5e:38:2a:60:37:5c:32:89:02:98:
                    46:f9:91:49:82:fb:a3:26:0a:9d:ef:28:8a:37:a6:
                    27:d9:48:4c:49:c8:11:ee:28:bd:b1:87:9f:e8:9e:
                    d8:29:bc:fd:09:6f:c9:db:51:85:2e:75:bd:e6:50:
                    72:28:8d:10:25:70:7b:be:09:ae:e8:8d:89:5b:4f:
                    50:84:30:0e:2a:90:0e:27:03:45:5c:ab:16:b9:39:
                    15:2b:a2:05:32:2f:de:6c:0b:b9:8b:aa:9a:bb:c9:
                    0a:b2:f9:87:91:85:42:41:f6:18:b6:69:6a:e8:52:
                    5c:3f:bd:85:74:da:ff:ea:52:61:93:08:83:74:e6:
                    d2:0f:ee:04:07:cc:d8:19:46:72:ff:05:81:69:ee:
                    c5:c6:4d:5f:16:ce:fa:ab:c1:32:e2:26:11:63:16:
                    30:55:d7:3b:49:43:06:a9:42:a8:a7:ba:45:8f:88:
                    59:f4:21:97:9c:50:ff:4e:eb:eb:0e:a2:34:69:59:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:EF:6D:41:18:1C:A8:17:82:4F:EE:BB:C4:87:E9:6A:1C:CB:0C
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32362e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:79:1f:e8:0a:d7:59:d6:a4:06:53:78:90:f7:b1:ad:d6:
         fa:ff:ae:ae:4b:16:50:c5:b4:b7:e3:51:d0:5f:72:0c:69:a1:
         67:00:02:71:b3:3c:6e:ee:a2:26:94:b1:ff:80:9c:83:fd:fe:
         51:cb:24:ba:78:8f:e1:fc:69:fe:a4:4c:35:ee:bc:61:21:f6:
         c2:f4:0a:17:fe:9b:d1:6e:94:ea:1c:07:46:c4:c1:8a:e9:4f:
         3a:19:11:89:a5:3b:f6:68:e2:be:39:c6:06:78:f7:44:16:a2:
         06:8f:13:6f:82:0d:ac:0b:4e:61:67:dd:6b:d3:4b:18:83:12:
         22:54:10:c6:73:20:89:d6:58:55:32:78:81:26:ef:53:16:87:
         7e:f2:fc:3b:c6:50:14:2a:31:9f:b6:8d:2e:ff:16:74:a4:97:
         e7:ca:6b:09:f8:cd:c2:9b:73:96:05:35:77:65:cd:3b:43:c5:
         ab:20:5e:a2:37:5f:b9:8d:0a:f4:9a:5f:ea:05:bc:3c:71:f6:
         a5:be:91:64:be:cd:eb:8b:f4:66:cb:14:aa:f5:2e:02:e6:3e:
         cb:ab:4b:28:64:85:f3:36:ee:4f:29:db:2e:e9:7c:db:98:fd:
         86:3b:49:68:fb:22:d7:8d:d7:13:ca:25:2d:e4:f3:88:d3:bd:
         a6:83:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:20 2024 by rpki-client on console-ams.rpki-client.org