Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa
File:                     3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (raw, json)
Hash identifier:          RLeUBlsKVuFPiXo4WGKbhkC403lFtQ8sabnQi0ciVbc=
Subject key identifier:   47:F1:40:0D:7D:A3:CE:1F:BD:BE:24:83:F7:37:D2:39:A2:0E:1D:C5
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       61BB79BAAEF1BA9DDD6C3E2EF4C7F528EF8CB0ED
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa
Signing time:             Thu 04 Apr 2024 15:50:29 +0000
ROA not before:           Thu 04 Apr 2024 15:45:29 +0000
ROA not after:            Thu 03 Apr 2025 15:50:29 +0000
asID:                     263280
IP address blocks:        179.109.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bb:79:ba:ae:f1:ba:9d:dd:6c:3e:2e:f4:c7:f5:28:ef:8c:b0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  4 15:45:29 2024 GMT
            Not After : Apr  3 15:50:29 2025 GMT
        Subject: CN=47F1400D7DA3CE1FBDBE2483F737D239A20E1DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:dd:57:2c:65:10:7f:6a:4a:c7:8a:34:e3:
                    d8:f9:6b:e6:24:77:8e:8d:3f:1d:3e:16:e8:5a:96:
                    92:32:b0:8c:a2:9f:45:e1:ec:c7:e9:35:45:37:77:
                    2a:e3:7a:f6:80:8b:3d:42:c1:bb:a4:b0:b2:db:83:
                    3e:3d:76:af:dc:24:2f:ee:13:72:87:14:e3:a3:0d:
                    bf:60:a8:20:8b:55:cd:f7:cd:c8:28:d7:ee:a4:68:
                    8b:73:d4:55:da:87:92:fc:55:2e:e1:6f:45:20:2e:
                    61:8c:1d:76:96:a9:b1:d0:fd:68:fd:b9:e2:16:7c:
                    a4:f2:7e:c3:51:75:7f:45:fb:55:de:29:02:3a:38:
                    45:3e:52:62:32:4f:64:8d:20:9f:97:5f:66:ea:31:
                    b7:85:28:0a:3d:1a:db:92:21:dc:2c:e8:aa:df:70:
                    5a:0b:5c:b9:ea:9a:97:06:ca:f9:76:6c:b1:b5:e7:
                    2e:53:1a:5e:fb:a3:41:a3:e9:ae:3a:7d:dd:13:08:
                    88:be:92:55:9c:bd:64:6d:50:93:77:fc:97:a0:80:
                    a4:d6:fc:c5:ab:a9:f5:5b:db:8d:a9:66:f2:4c:98:
                    bd:3a:36:fd:18:32:8d:00:4d:80:56:93:08:02:4a:
                    4f:41:11:57:2f:5b:52:3e:c6:b2:c8:c5:e6:92:59:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:40:0D:7D:A3:CE:1F:BD:BE:24:83:F7:37:D2:39:A2:0E:1D:C5
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:08:68:8c:dd:dd:d0:e6:a2:fa:32:7a:27:c3:22:53:59:
         41:9d:77:80:5f:b5:20:17:e7:5f:11:1e:2f:2a:34:29:ad:6b:
         65:d0:fd:2a:55:57:dc:50:24:b5:a8:ce:5d:d1:ef:b3:a8:c9:
         a4:3f:82:a6:2d:cc:e2:f6:1d:0f:24:63:d9:e4:17:60:2c:96:
         6d:cb:30:c6:69:e5:2a:7a:65:a3:eb:c7:1d:8b:a4:b1:92:70:
         fd:b8:85:db:97:60:f2:e9:1d:cd:d8:00:cc:20:e7:6b:cb:4c:
         de:60:13:a4:4b:85:d9:6e:43:a9:69:b2:0a:9a:5e:a4:1f:bb:
         85:ff:74:c8:0b:bc:17:7c:cf:80:6a:f3:02:d5:82:6f:ee:66:
         50:95:c5:72:c2:a8:a6:c6:87:4c:96:2a:43:a7:92:94:b2:1a:
         45:27:80:5e:0e:0f:30:e3:e6:4c:7c:12:69:e4:1a:eb:3f:77:
         ae:8b:75:4d:21:b0:93:31:0b:b0:14:e8:c7:13:c4:89:69:09:
         9d:ca:f2:b7:c0:2a:40:c9:ce:01:32:12:32:e5:7a:4e:8f:61:
         5b:9a:54:74:54:6e:c3:6e:29:1c:f3:6a:48:3a:47:aa:a2:bf:
         6c:1c:94:52:ed:a3:ca:bd:72:3b:14:f6:bd:78:e2:37:01:91:
         b7:97:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org