Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137392e3130382e36342e302f32312d3234203d3e203532393638.roa
File:                     3137392e3130382e36342e302f32312d3234203d3e203532393638.roa (raw, json)
Hash identifier:          3ojlDc1vqO4L0IW23zxHEnYIY7hQkZadd5/eSuRpMmw=
Subject key identifier:   E5:94:CB:35:8D:B8:39:F5:B1:01:53:84:D4:C8:BC:94:DC:38:FF:AF
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       52B42EA46AB38B0C6DCE6878E5095C9647CFFF94
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137392e3130382e36342e302f32312d3234203d3e203532393638.roa
Signing time:             Thu 04 Apr 2024 07:08:04 +0000
ROA not before:           Thu 04 Apr 2024 07:03:04 +0000
ROA not after:            Thu 03 Apr 2025 07:08:04 +0000
asID:                     52968
IP address blocks:        179.108.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b4:2e:a4:6a:b3:8b:0c:6d:ce:68:78:e5:09:5c:96:47:cf:ff:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Apr  4 07:03:04 2024 GMT
            Not After : Apr  3 07:08:04 2025 GMT
        Subject: CN=E594CB358DB839F5B1015384D4C8BC94DC38FFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:b2:23:66:63:48:94:3b:6d:15:1a:d5:0d:
                    d7:17:fb:c7:f6:61:ed:73:b8:8c:72:c0:91:93:8a:
                    6e:c0:f2:73:4d:a3:22:ce:f5:f5:17:fd:bb:fc:f5:
                    c0:fd:99:46:02:8d:c2:46:f3:87:b9:25:c2:d0:a3:
                    59:a2:3d:ca:2a:41:9b:5d:99:b8:26:8b:6a:9a:0a:
                    f6:c8:8a:f4:22:ec:12:39:4b:6d:06:6e:d4:00:71:
                    f8:8d:e4:ab:ba:aa:60:b5:ea:01:4d:5a:2a:20:b6:
                    fe:05:8a:4c:bb:96:92:68:29:63:e0:e5:bc:7b:e0:
                    5d:a1:e2:e4:59:df:ed:88:ab:af:94:cf:54:5e:e5:
                    07:5a:65:37:9b:d3:00:c8:3c:67:01:de:a0:c6:05:
                    34:45:c4:9e:72:27:9f:84:6a:f7:3d:40:27:ed:74:
                    31:dd:54:d8:3b:a2:9f:57:5b:35:7e:77:c5:b4:e4:
                    3e:76:1c:dd:ec:d4:b5:7e:65:d5:f9:99:53:af:db:
                    35:df:a7:57:d5:c9:43:4a:f6:49:03:bc:b2:fc:1a:
                    52:26:5c:2c:55:35:01:73:27:18:2f:f6:26:43:19:
                    e2:1c:bf:b9:99:d7:da:e2:be:33:c8:ae:eb:74:ce:
                    2a:22:55:64:20:16:b5:c9:6b:87:6b:90:24:9f:dd:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:CB:35:8D:B8:39:F5:B1:01:53:84:D4:C8:BC:94:DC:38:FF:AF
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137392e3130382e36342e302f32312d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:cc:3d:ea:27:84:83:3a:fc:27:cb:6e:a0:40:ca:0c:63:
         f5:57:b0:07:46:b3:8b:73:45:8e:eb:01:09:9e:29:50:c7:58:
         ca:49:5b:86:2c:45:98:1d:3f:ed:b1:9c:02:5a:db:f7:c0:3c:
         eb:ae:65:7d:66:a8:61:9d:f6:dc:c9:03:5b:21:78:38:b9:8e:
         90:f1:c8:69:0c:9c:0d:84:54:5c:a2:9a:ba:89:15:66:ed:11:
         17:75:cf:c1:39:2f:7b:70:95:36:db:98:ee:f1:85:86:4b:4c:
         f4:8c:29:39:e4:3e:d5:12:fc:1f:81:82:de:3c:23:4a:a2:e6:
         fb:02:0c:54:23:fc:a4:aa:4e:b7:f2:3f:f7:6b:07:e6:c2:d1:
         f6:be:e0:9e:13:3d:33:89:ef:1b:e7:d7:a0:e1:39:f8:36:76:
         84:d4:3c:94:87:f1:14:7a:3f:dd:dd:84:72:0b:1a:d6:ae:81:
         d6:88:0a:16:d4:4c:e4:c9:5c:14:0a:b1:3d:22:65:58:14:b0:
         89:aa:4e:18:5a:42:09:26:40:74:0d:f4:c3:ae:69:0a:06:d7:
         3e:55:1a:46:44:aa:93:78:03:99:84:3a:04:dc:20:49:90:aa:
         c7:9e:2e:72:df:41:45:66:03:86:13:03:e4:a3:e7:c2:d6:0e:
         e6:21:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:43 2024 by rpki-client on console-fra.rpki-client.org