Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/3137392e36332e34382e302f32322d3332203d3e20323732363734.roa
File:                     3137392e36332e34382e302f32322d3332203d3e20323732363734.roa (raw, json)
Hash identifier:          SJFl58xUaTuoYx+vl53Hsr0+NSavQEHv0/xbwXf2CHo=
Subject key identifier:   71:46:76:5F:0F:53:ED:DA:01:50:4A:8E:59:56:A6:99:DB:30:FA:D4
Certificate issuer:       /CN=7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC
Certificate serial:       50777E7477A65A3F127392F992CCD319FBC62CDE
Authority key identifier: 79:57:B9:FD:FB:5E:8E:73:FB:ED:C1:96:5C:13:C4:3C:19:79:2D:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/3137392e36332e34382e302f32322d3332203d3e20323732363734.roa
Signing time:             Thu 04 Apr 2024 09:30:37 +0000
ROA not before:           Thu 04 Apr 2024 09:25:37 +0000
ROA not after:            Thu 03 Apr 2025 09:30:37 +0000
asID:                     272674
IP address blocks:        179.63.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.crl
                          rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:77:7e:74:77:a6:5a:3f:12:73:92:f9:92:cc:d3:19:fb:c6:2c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC
        Validity
            Not Before: Apr  4 09:25:37 2024 GMT
            Not After : Apr  3 09:30:37 2025 GMT
        Subject: CN=7146765F0F53EDDA01504A8E5956A699DB30FAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:d6:59:ce:e4:66:3a:ae:59:a6:3e:94:da:
                    80:b0:eb:b6:2e:7b:60:21:00:2e:b5:4c:f3:09:c2:
                    11:48:7b:72:a0:a0:5d:5e:b2:7c:55:2b:b4:a1:f3:
                    61:8a:c3:94:fa:bd:55:74:a6:8f:3e:e2:e2:80:3f:
                    8c:4b:67:5e:89:e6:1c:64:30:a1:c6:4f:38:ee:21:
                    3a:22:d5:65:b4:89:63:68:d3:a0:ce:c9:1b:77:a7:
                    97:e1:ed:39:e8:37:e0:bb:7e:84:f7:28:2f:32:78:
                    09:7a:9a:17:9f:5b:5d:e1:51:6e:e1:8b:c0:73:e6:
                    55:7e:4d:d9:e3:77:32:0e:e5:e0:73:19:aa:37:7d:
                    f0:8e:7a:70:bb:50:f7:cc:42:1b:7b:d2:fe:18:09:
                    30:1f:bf:b1:8f:be:86:f7:a9:6d:0e:d4:fc:42:9e:
                    4a:ad:6b:08:71:79:57:d1:a8:29:72:d4:d3:b5:1e:
                    90:e4:6c:86:b7:fb:f0:b1:0c:71:12:6c:37:0d:49:
                    61:c8:c7:43:60:4e:ad:f5:6a:d9:20:a7:37:85:11:
                    60:1d:5e:a4:85:c5:3f:58:7d:f9:2f:41:c7:77:56:
                    d7:6f:09:29:9d:a2:fe:00:3e:2f:ea:10:9d:2b:39:
                    ec:c3:75:fd:19:4c:d8:2e:f9:b2:cc:b2:04:40:a1:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:46:76:5F:0F:53:ED:DA:01:50:4A:8E:59:56:A6:99:DB:30:FA:D4
            X509v3 Authority Key Identifier:
                keyid:79:57:B9:FD:FB:5E:8E:73:FB:ED:C1:96:5C:13:C4:3C:19:79:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/3137392e36332e34382e302f32322d3332203d3e20323732363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:01:ed:03:cb:30:dc:b7:12:ae:2c:23:54:22:db:15:b2:
         34:62:c4:5d:e5:d7:ae:d5:ea:b4:be:bd:d2:68:04:b9:a8:35:
         2e:6c:d6:29:ec:fe:c5:d4:ec:1f:db:26:b7:a7:53:40:dd:21:
         fa:92:03:0a:ee:2c:67:61:27:af:4b:77:d9:97:cb:2f:8f:bb:
         7a:86:8a:08:f0:fc:75:c5:d9:b1:61:aa:a0:a9:86:96:d1:03:
         b7:ae:bb:c0:3b:1b:da:d2:6a:a5:7d:38:61:1d:55:27:66:b4:
         31:52:7e:a9:c8:92:71:bd:81:08:dc:b6:88:9b:44:85:bf:cf:
         1d:56:e6:cc:d6:21:11:1d:1a:87:de:6a:5e:47:68:8d:97:ab:
         80:3b:5f:c6:fc:2e:10:63:23:f4:52:06:20:a9:3e:09:54:ab:
         b4:3c:e0:5b:bf:71:0c:7f:65:2f:96:94:c8:45:53:2b:e4:91:
         13:b1:cc:13:bc:6c:39:95:5d:aa:7b:d2:33:7d:e3:ca:bd:6f:
         1d:b8:39:56:c2:23:d5:e0:4c:67:19:dd:f7:a9:48:fd:bc:87:
         aa:55:39:d3:bc:25:b8:28:34:38:67:02:76:55:69:f9:c3:d0:
         33:a7:94:ca:8d:fc:3e:0f:68:8b:00:aa:be:4f:d3:dd:b2:95:
         41:e6:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:06 2024 by rpki-client on console-ams.rpki-client.org