Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e33302e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e33302e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          dOWnA4hhDY5IFEHi+gMzmb8o4y9EOBXSzfR24eVawQQ=
Subject key identifier:   EE:8B:F5:9A:D0:FF:A7:B4:00:83:18:52:5D:E7:A3:CB:31:BD:67:24
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       15264883673DE029FDC99DDE7A956FE9F35206C7
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e33302e302f32342d3234203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:17 +0000
ROA not before:           Thu 04 Apr 2024 10:55:17 +0000
ROA not after:            Thu 03 Apr 2025 11:00:17 +0000
asID:                     263611
IP address blocks:        179.124.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:26:48:83:67:3d:e0:29:fd:c9:9d:de:7a:95:6f:e9:f3:52:06:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:17 2024 GMT
            Not After : Apr  3 11:00:17 2025 GMT
        Subject: CN=EE8BF59AD0FFA7B4008318525DE7A3CB31BD6724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:16:17:41:e3:67:da:0d:5d:9d:b5:db:81:
                    89:98:8c:1e:e7:34:e3:b2:6b:00:2b:86:49:db:ff:
                    d8:52:95:b0:c9:a5:ed:d1:8b:18:f3:92:8a:18:23:
                    97:e4:74:8e:cd:a5:83:eb:f1:00:06:b4:d5:47:1a:
                    1c:39:1a:f6:1c:ee:2d:71:b4:09:6a:23:4a:4e:54:
                    ca:6a:78:bb:f1:87:75:a0:d7:f7:b3:a3:48:c5:0d:
                    60:7a:63:96:a3:e6:f6:cf:7b:18:3c:46:1c:61:38:
                    a4:b3:c6:b3:44:ee:39:5f:b2:b1:ae:5f:52:23:04:
                    f9:21:14:1e:d3:4c:35:11:f6:c6:07:bd:b6:b0:22:
                    71:3f:0f:40:e3:da:29:0e:94:f1:8f:1b:2b:bd:3e:
                    93:f2:0b:5c:27:76:2f:fa:57:13:e0:f3:2d:83:19:
                    98:b4:ce:9e:a9:21:85:d0:ac:af:3a:dd:49:fb:66:
                    13:07:72:6f:20:7c:12:74:72:12:e0:54:6c:04:12:
                    85:0e:34:89:64:09:b2:93:0a:fb:75:9f:f9:f8:ef:
                    ee:33:6d:f9:b5:7f:3f:ae:ce:ed:da:3e:bb:bc:40:
                    98:0d:63:7b:53:0e:a4:ff:bc:e2:02:23:22:6d:60:
                    65:b1:19:37:5f:98:b3:cf:ab:d3:e8:52:7c:97:3e:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8B:F5:9A:D0:FF:A7:B4:00:83:18:52:5D:E7:A3:CB:31:BD:67:24
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/3137392e3132342e33302e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:dd:c3:a6:87:40:ff:4f:5a:88:f8:f9:b6:4b:4e:8b:62:98:
         e9:20:21:90:56:dc:e2:5f:77:f5:ab:91:d2:a3:a9:fe:aa:57:
         bd:34:f1:fc:80:6d:ef:4e:90:00:6c:4b:03:be:a5:0d:c7:fd:
         47:00:95:2b:32:54:20:4f:04:54:0c:e6:03:89:cc:02:89:18:
         fc:7f:5e:cf:70:22:1e:5b:24:92:8d:7f:51:3c:dd:23:8f:7e:
         3e:d0:8d:be:c0:21:84:ca:c3:8f:00:5b:db:1a:35:35:51:a8:
         67:ae:0d:54:ea:61:97:13:44:e3:29:d2:06:60:cd:6e:6f:ed:
         3c:c3:fb:90:ff:a5:ce:99:3c:c9:15:0c:03:5c:89:88:ad:3f:
         03:c3:71:45:f5:33:e5:e4:c1:15:2d:22:45:f0:d9:16:4b:30:
         39:3c:c5:b3:98:ce:2a:03:5f:18:f4:52:3d:91:ed:8a:b7:28:
         4a:4a:3f:5a:2a:3d:2b:45:5b:c6:ba:bd:9c:c8:d3:9b:e3:2b:
         80:0d:e1:0d:f3:98:7e:99:1c:4a:5e:e2:10:97:9e:44:51:b4:
         fa:d5:d6:70:d0:83:13:90:7a:3c:b1:12:2f:5b:e5:c1:13:d5:
         49:0a:0e:1c:f0:95:81:68:8b:c5:e9:55:17:cb:ae:c0:6e:47:
         b5:16:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:47 2024 by rpki-client on console-fra.rpki-client.org