Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37392e302f32342d3234203d3e20323730343133.roa
File:                     3137302e302e37392e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          emow/I+mTSYDp7pFbpdvf4gqheJNkYvXG8KT2eByawg=
Subject key identifier:   8D:1B:FC:C8:B7:8F:0E:B4:35:6B:D7:D2:E3:6B:BA:F6:A4:C3:CF:AA
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       63497DADC04D9E780A3A585404186285A17E8450
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37392e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 03 Oct 2024 13:38:20 +0000
ROA not before:           Thu 03 Oct 2024 13:33:20 +0000
ROA not after:            Thu 02 Oct 2025 13:38:20 +0000
asID:                     270413
IP address blocks:        170.0.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:49:7d:ad:c0:4d:9e:78:0a:3a:58:54:04:18:62:85:a1:7e:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Oct  3 13:33:20 2024 GMT
            Not After : Oct  2 13:38:20 2025 GMT
        Subject: CN=8D1BFCC8B78F0EB4356BD7D2E36BBAF6A4C3CFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:76:49:48:f1:3e:bc:83:ed:5d:5c:5b:2a:
                    00:e3:91:5a:b6:9d:19:03:7c:5d:e0:6f:88:33:73:
                    e7:54:9d:38:df:25:6c:17:37:5d:c7:cc:8e:4b:a6:
                    98:df:a3:11:6c:36:32:63:33:7a:cc:ef:8a:c7:48:
                    d2:0e:04:cb:18:0d:a6:c7:aa:68:27:b8:2a:24:9e:
                    12:81:58:e6:43:92:88:dd:f8:2a:fe:96:8a:70:df:
                    a1:67:62:c0:5d:b2:ef:0e:d4:4d:04:0c:60:42:42:
                    15:e5:10:f7:b8:21:b1:03:b0:2f:98:25:a1:dc:71:
                    a8:96:15:3a:45:16:a2:29:ea:23:61:86:13:dc:d4:
                    87:2c:27:41:95:11:b5:95:e8:2e:10:61:5a:85:cd:
                    35:81:b9:cd:49:9a:98:68:31:67:0b:5b:11:00:5e:
                    29:06:bc:ae:08:b2:1d:50:0a:5e:06:61:77:c0:26:
                    fe:83:a8:04:0d:35:5f:f2:0c:d0:fb:46:5b:2b:b1:
                    5d:28:e7:a0:d9:90:4e:f8:0c:eb:e3:15:dd:4b:01:
                    8c:4e:2b:3a:6a:a9:a5:01:92:d5:05:16:26:7c:89:
                    56:6c:64:db:19:c8:d4:5b:b2:0e:e8:43:64:4e:48:
                    2d:54:6c:c4:d9:b2:56:5f:c7:5d:89:9f:9f:da:03:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1B:FC:C8:B7:8F:0E:B4:35:6B:D7:D2:E3:6B:BA:F6:A4:C3:CF:AA
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37392e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:78:7f:31:6b:1d:eb:20:b8:b3:a6:d6:4d:d7:31:e7:cc:0e:
         06:56:df:5b:88:4d:a6:f4:9c:bd:a4:7f:11:43:7f:fa:03:32:
         b6:a7:73:a1:d1:d2:c0:7a:f7:65:a1:25:57:20:ab:19:43:ce:
         78:4a:3f:ab:1d:88:8c:1d:43:35:c0:b2:e2:5f:d3:25:90:a9:
         6f:c5:1c:4d:03:ee:b8:95:2d:bc:06:df:6d:d5:0e:32:3c:58:
         35:d0:ae:e7:ba:9a:48:76:b5:49:0f:28:96:64:6d:54:da:71:
         81:66:60:5b:23:77:82:bc:2b:8f:ea:67:97:db:51:ee:3a:84:
         84:6e:d5:20:3a:88:3d:08:b9:6b:8e:74:e2:42:9a:bd:63:49:
         5d:b1:b5:19:d8:26:f2:76:97:4e:3c:df:03:03:88:5c:8b:59:
         c3:af:37:e6:79:e2:61:d6:a3:d6:47:02:06:90:19:92:ce:de:
         61:35:44:87:5c:34:6d:14:43:5a:88:92:0a:20:db:44:01:36:
         1e:7f:cf:b5:dd:96:af:6a:32:39:96:8f:27:58:4d:ba:62:be:
         62:9e:e5:86:da:0c:08:70:49:c4:1c:bd:00:49:85:17:f5:93:
         98:6a:e5:f8:1e:af:42:4e:67:20:58:bb:8b:f6:a6:87:9d:44:
         c5:a3:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org