Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32372e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32372e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          k6T3nnFoMRt7edKXK7RFh8YZm596B7ioN//T5KTNOOc=
Subject key identifier:   C7:AC:28:9E:93:26:84:84:9D:21:9B:3F:1B:A1:78:68:AA:1B:61:53
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       565E10D0AE21FFAFB792B1FCD33C467D5AFC790B
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32372e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:17 +0000
ROA not before:           Thu 04 Apr 2024 10:55:17 +0000
ROA not after:            Thu 03 Apr 2025 11:00:17 +0000
asID:                     263611
IP address blocks:        179.124.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5e:10:d0:ae:21:ff:af:b7:92:b1:fc:d3:3c:46:7d:5a:fc:79:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:17 2024 GMT
            Not After : Apr  3 11:00:17 2025 GMT
        Subject: CN=C7AC289E932684849D219B3F1BA17868AA1B6153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:c0:c0:9f:01:42:b4:5f:d7:61:ca:d6:a2:
                    9b:c1:9a:cb:f7:df:59:5f:2a:2d:3b:ec:eb:8d:29:
                    01:6f:69:e6:c5:05:20:87:56:cd:ba:7f:08:be:0d:
                    ac:a1:46:12:7b:1f:88:0e:3e:4c:e8:55:cd:e5:cd:
                    d1:d3:a2:26:ec:a0:e5:1d:85:11:5e:5e:97:f2:e5:
                    a1:d7:58:1d:3b:ee:d9:e4:28:87:8d:7a:ae:af:b1:
                    0c:fe:0f:31:ab:e0:ad:9b:f1:c6:bf:37:cb:ed:6a:
                    84:58:b6:4b:76:81:37:2b:5d:61:5c:d4:1d:73:24:
                    58:ed:5a:47:17:95:ed:6e:a3:7f:dd:04:4d:45:5d:
                    3a:5d:84:6c:ef:a6:69:21:a9:f2:3a:61:63:72:db:
                    f6:29:ad:c3:1f:4c:6e:18:b4:91:be:fe:9c:af:d3:
                    1f:4d:2c:82:06:a4:94:1f:98:e5:8a:78:c9:df:b7:
                    5f:12:64:4e:d6:72:4c:e1:9f:21:43:f9:28:2c:6b:
                    35:e2:a4:f1:84:20:f0:ff:20:51:e7:d5:8d:f1:51:
                    5c:4f:e9:fd:e4:60:e5:18:4c:b0:82:f0:c0:ba:66:
                    98:90:fc:c7:8d:be:a7:4f:a4:ed:69:4c:c9:e5:51:
                    20:67:42:49:82:86:32:fc:d2:41:0d:e4:50:45:ba:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:28:9E:93:26:84:84:9D:21:9B:3F:1B:A1:78:68:AA:1B:61:53
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e32372e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:72:13:a9:d9:55:4d:eb:be:89:8a:50:50:b0:cd:e2:0f:
         db:ee:47:58:21:80:2a:55:5c:e6:a5:16:7f:45:52:fd:99:54:
         93:c8:26:38:a2:c0:d5:9c:fc:2b:14:59:09:0d:03:4c:1d:a4:
         e1:e8:7c:b1:4a:2e:30:43:68:be:72:6f:28:34:90:af:a3:d4:
         b4:0d:c5:33:22:b6:b9:73:63:aa:4f:bf:6f:92:c3:20:7a:3a:
         e5:d9:ca:87:e6:f4:60:54:c9:1e:00:bd:d6:01:2f:1a:ae:e5:
         df:d6:1c:6f:c0:b7:21:54:a8:bb:6b:28:8a:20:ac:89:9f:e4:
         c2:22:b2:a3:3c:d2:46:d0:0c:7c:4a:6a:be:3e:06:0b:81:dd:
         ae:14:bf:63:6a:c9:70:bd:e9:76:82:9f:5d:39:ca:47:c8:86:
         4b:90:e7:11:c8:18:bc:ae:fc:63:9c:ed:b9:bc:ce:1d:e8:2b:
         71:29:dc:53:b3:c0:e2:5e:b4:ef:d8:a4:be:8a:28:e1:5e:3b:
         8a:fb:8d:50:ab:97:d0:ad:21:32:5e:d6:e7:95:97:0f:2f:83:
         ce:2a:9f:14:8d:4a:c1:9e:f2:1d:9b:df:23:00:7e:6c:6b:7c:
         5a:78:af:59:72:59:73:e2:f1:24:46:c8:94:8c:0c:66:9a:24:
         0f:dc:30:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 15:36:57 2024 by rpki-client on console-fra.rpki-client.org