Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa
File:                     3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (raw, json)
Hash identifier:          4X7N4qZpKKSXNiJFkETBCyydeD3mceDJMg3kxzlKghI=
Subject key identifier:   EC:87:D8:01:43:C2:58:2D:98:26:9B:F8:E6:96:AC:EB:3E:91:23:42
Certificate issuer:       /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial:       27FF9534426420A00A9E13FCF1543AB1DF199BC9
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa
Signing time:             Tue 07 May 2024 16:20:24 +0000
ROA not before:           Tue 07 May 2024 16:15:24 +0000
ROA not after:            Tue 06 May 2025 16:20:24 +0000
asID:                     28636
IP address blocks:        179.97.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
                          rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:95:34:42:64:20:a0:0a:9e:13:fc:f1:54:3a:b1:df:19:9b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
        Validity
            Not Before: May  7 16:15:24 2024 GMT
            Not After : May  6 16:20:24 2025 GMT
        Subject: CN=EC87D80143C2582D98269BF8E696ACEB3E912342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:c2:75:dd:8b:8b:42:9e:a1:c3:36:92:2b:
                    11:32:e7:d6:b5:c3:aa:de:89:5d:06:7e:bf:a2:8f:
                    2e:63:ed:9b:df:83:e9:b6:66:41:15:b6:2b:6b:ce:
                    8e:88:8f:6a:72:4d:87:19:a8:4f:50:7b:b3:c5:69:
                    ec:ca:82:e0:c7:38:fe:f5:8d:cb:33:e4:95:df:9a:
                    dd:ab:79:9a:56:ea:39:8b:bd:0d:da:d0:d1:0e:4d:
                    d4:72:ec:e7:23:a1:98:37:8e:4c:37:32:e4:84:b5:
                    c1:0a:b2:0f:58:08:14:37:c2:b1:73:2c:91:ff:4e:
                    36:8f:c8:50:d8:3d:69:10:9c:5b:c4:c0:54:3a:5e:
                    73:90:8b:ee:87:a9:8c:d2:1c:8f:42:22:2c:3b:66:
                    06:15:74:1d:2c:c0:e3:9d:63:e5:4e:6a:0b:92:2c:
                    5e:55:1a:d5:a3:e9:46:04:0a:bd:d4:87:1a:f4:0d:
                    aa:54:a4:a1:10:1a:55:46:2f:4e:53:7f:0c:4c:9c:
                    af:c6:8f:f8:e3:0d:04:f0:32:eb:16:a5:2b:c5:ee:
                    89:8b:c7:03:be:40:d4:10:1b:3b:70:24:3a:be:2e:
                    82:06:d1:dd:5c:52:28:25:a6:81:f8:28:6f:4c:4e:
                    b7:b7:ff:39:56:9a:81:54:12:9f:6e:28:aa:6e:8b:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:D8:01:43:C2:58:2D:98:26:9B:F8:E6:96:AC:EB:3E:91:23:42
            X509v3 Authority Key Identifier:
                keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:89:ee:f8:8d:99:f9:dd:ca:5f:9b:eb:c3:ac:8e:0c:79:9a:
         e1:25:62:d3:b6:31:ac:ce:83:4f:8d:e0:e7:70:f7:91:60:65:
         8d:56:51:ac:dd:3a:c8:ea:89:a5:f0:85:78:dd:b5:49:a4:4d:
         ee:58:fc:04:ae:6b:35:38:7f:e9:ee:1a:e2:0f:7b:21:be:bd:
         9f:6c:24:76:3b:28:8d:ba:2f:23:5d:bf:ea:9c:f3:45:5d:5d:
         39:13:d9:70:a7:30:be:b4:3d:45:a7:92:bb:11:41:6a:72:32:
         57:cc:4b:43:39:1d:a3:a2:76:68:4a:b3:83:1e:23:b7:dc:8a:
         c7:95:e3:97:4a:ca:bc:19:97:7c:91:94:28:a4:1b:41:53:8a:
         8e:31:8f:01:03:65:34:65:0b:be:b9:2c:d6:43:6c:e4:1f:41:
         2c:70:81:ec:f4:54:12:cd:f7:d9:7b:29:55:a8:54:8c:a1:86:
         13:95:ef:98:52:65:96:4d:05:66:31:1e:15:05:a9:8e:6d:1a:
         1a:3a:10:22:1b:c1:55:f9:46:48:1c:e3:3d:37:80:06:cb:4b:
         c4:d0:7b:21:73:16:9d:ee:0d:af:85:23:76:23:6a:ef:45:86:
         9f:d5:9a:b7:ab:ed:21:c5:bf:3f:9d:12:9e:29:9c:d3:8e:49:
         8f:75:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:42 2024 by rpki-client on console-ams.rpki-client.org