Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32322d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          d0jIShVlx5e9HC8XcVCwDfbo1+m2zocyFeliwdPwL1Y=
Subject key identifier:   C4:E8:20:C0:5D:4A:61:FA:73:9F:46:12:D4:53:51:5F:6C:9B:52:B4
Certificate issuer:       /CN=D2D869CA8C0182B8F3C1BACFB318670556CFEC3C
Certificate serial:       077156168CEF7E4A9DB5361591A09420A632D6EC
Authority key identifier: D2:D8:69:CA:8C:01:82:B8:F3:C1:BA:CF:B3:18:67:05:56:CF:EC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3234203d3e20323730373630.roa
Signing time:             Fri 02 Aug 2024 14:02:52 +0000
ROA not before:           Fri 02 Aug 2024 13:57:52 +0000
ROA not after:            Fri 01 Aug 2025 14:02:52 +0000
asID:                     270760
IP address blocks:        179.109.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 17:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:71:56:16:8c:ef:7e:4a:9d:b5:36:15:91:a0:94:20:a6:32:d6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D869CA8C0182B8F3C1BACFB318670556CFEC3C
        Validity
            Not Before: Aug  2 13:57:52 2024 GMT
            Not After : Aug  1 14:02:52 2025 GMT
        Subject: CN=C4E820C05D4A61FA739F4612D453515F6C9B52B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:e2:54:81:34:b6:cd:14:6d:7e:b3:e8:39:
                    10:40:a0:d6:87:70:a0:f9:c6:9a:33:77:ed:b7:c0:
                    9d:49:0c:03:bb:fe:9d:ff:b3:49:63:de:b9:be:e4:
                    fb:d3:7e:d4:a1:8f:b9:38:d0:b9:ef:1b:6c:3e:8d:
                    f0:9d:56:4b:2b:14:3e:9e:6d:7a:3e:a3:ae:fd:20:
                    1b:08:bc:b7:57:9d:ab:2a:6d:48:89:56:36:5f:cf:
                    00:e5:1b:6a:0e:ed:4f:14:6c:25:7f:53:b4:1e:f0:
                    1d:1b:d5:4c:5a:52:92:73:5c:0b:02:09:5a:e9:73:
                    4d:4a:34:61:fd:e6:26:ce:18:09:df:f9:ab:7c:06:
                    95:c6:9d:36:89:36:68:e9:e7:c6:50:a4:9e:40:1f:
                    5b:2e:4e:c4:0b:a9:28:ac:43:c9:da:bb:a8:3d:ee:
                    18:8e:54:46:13:64:57:eb:b9:2a:ac:d4:75:25:d5:
                    99:90:08:a1:6b:9a:fe:79:2c:de:a6:1b:a6:d2:08:
                    b3:e5:29:ad:f2:9c:90:46:80:c4:1a:30:03:c9:93:
                    1d:d1:c6:f5:92:c3:9b:48:5e:97:9f:82:15:08:eb:
                    0b:2b:e1:31:e4:e5:bc:54:3c:03:8b:1b:b4:20:c0:
                    4f:89:62:ea:1e:6c:c7:9e:71:27:db:a2:10:be:da:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E8:20:C0:5D:4A:61:FA:73:9F:46:12:D4:53:51:5F:6C:9B:52:B4
            X509v3 Authority Key Identifier:
                keyid:D2:D8:69:CA:8C:01:82:B8:F3:C1:BA:CF:B3:18:67:05:56:CF:EC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:aa:ff:5c:40:e3:ab:a4:a4:e4:ab:8b:83:67:43:e5:34:
         ba:a0:9b:94:c8:4a:f6:ab:39:2c:1c:ff:3a:65:48:7f:4f:b9:
         e1:ce:3b:6d:39:41:96:13:87:d9:3b:28:cd:51:9e:63:74:f6:
         d9:b9:8a:95:1e:da:af:8a:10:9a:a8:72:68:9d:06:b6:b0:09:
         dd:fe:a9:1e:b3:6e:ff:69:77:f5:08:66:1d:31:17:3f:ad:45:
         13:b3:7d:5f:ad:cc:93:e8:68:63:cb:e8:74:22:78:57:15:b6:
         ab:ab:fe:e9:27:86:26:af:b7:02:08:eb:30:d2:d1:e8:b0:ab:
         cc:4d:6f:12:fa:90:aa:f9:f3:db:29:56:ae:29:45:8a:44:21:
         c4:d5:4c:c4:05:84:19:cd:57:73:d4:09:8b:c6:b0:37:99:ff:
         94:7a:62:39:96:35:e6:bd:a9:67:2f:56:73:11:6a:03:80:5f:
         c7:2f:91:26:e0:c2:b6:a7:07:4d:8d:ef:ee:72:e4:39:a2:e8:
         a5:d3:78:92:45:a7:e3:9c:08:b3:77:ca:59:dd:51:62:da:1f:
         ff:66:a3:9e:7b:37:f8:e2:96:74:df:e0:e3:68:bb:d9:69:73:
         d1:d3:10:21:9f:44:68:2a:ac:e4:a5:a6:98:2a:88:89:5b:15:
         68:19:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:56:30 2024 by rpki-client on console-ams.rpki-client.org