Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137372e37302e302e302f31392d3234203d3e203238323039.roa
File:                     3137372e37302e302e302f31392d3234203d3e203238323039.roa (raw, json)
Hash identifier:          cgPdELlbtg1Jz8F7tZOxXNhH2K5xRCNxWvwnGpaFH7c=
Subject key identifier:   92:13:01:F1:EB:F1:4B:7D:B3:02:29:3C:9D:8C:B6:25:14:7B:31:E5
Certificate issuer:       /CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
Certificate serial:       195947D1369113883DCA28E46F55308871445C38
Authority key identifier: 5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137372e37302e302e302f31392d3234203d3e203238323039.roa
Signing time:             Fri 11 Oct 2024 20:33:17 +0000
ROA not before:           Fri 11 Oct 2024 20:28:17 +0000
ROA not after:            Fri 10 Oct 2025 20:33:17 +0000
asID:                     28209
IP address blocks:        177.70.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl
                          rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:59:47:d1:36:91:13:88:3d:ca:28:e4:6f:55:30:88:71:44:5c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
        Validity
            Not Before: Oct 11 20:28:17 2024 GMT
            Not After : Oct 10 20:33:17 2025 GMT
        Subject: CN=921301F1EBF14B7DB302293C9D8CB625147B31E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:79:b7:89:a0:b4:71:ae:52:17:c7:a6:e7:
                    ed:73:b5:12:df:b0:01:dc:d7:ce:7a:de:bd:5e:57:
                    ab:5d:8d:dd:ec:5f:a9:91:e8:24:ce:88:2f:bb:47:
                    b4:3b:58:88:4b:88:71:1f:10:5f:cf:3d:49:91:74:
                    9d:3d:d9:18:05:6f:d5:77:a4:d9:00:95:7e:61:d2:
                    b4:8a:8c:37:0b:fd:1a:c2:ef:da:b2:e9:77:8c:9f:
                    d6:d7:60:bc:30:ce:06:15:0b:9b:db:61:62:76:61:
                    4a:44:61:34:ee:7c:e6:01:8a:96:a9:93:bf:3a:0c:
                    5e:92:13:2e:40:19:6e:a3:94:ad:dd:b1:1c:6e:8a:
                    69:d9:69:4f:cf:e3:06:54:d9:4b:83:67:af:79:41:
                    ed:6b:3f:b8:00:c6:67:77:5a:27:2b:c1:4f:51:f1:
                    44:47:30:40:a4:32:86:95:5a:ca:f9:18:c1:9b:8a:
                    b5:ce:90:e7:97:43:59:4a:36:5b:f7:86:e6:d2:39:
                    0f:e5:6a:0a:b0:7f:46:9c:a4:71:14:92:e6:6d:58:
                    43:5b:e4:e3:f1:23:22:eb:fb:cc:b5:1d:5c:1a:03:
                    14:a7:9a:30:19:86:0d:36:8f:cd:ae:c1:ef:ee:0b:
                    08:a0:03:5c:b3:5b:aa:58:0f:15:15:87:5f:11:a5:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:13:01:F1:EB:F1:4B:7D:B3:02:29:3C:9D:8C:B6:25:14:7B:31:E5
            X509v3 Authority Key Identifier:
                keyid:5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137372e37302e302e302f31392d3234203d3e203238323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:21:d1:e2:20:d2:52:5c:8c:6c:82:23:f0:48:37:33:dc:2c:
         78:5d:c1:8f:cd:fc:a9:7a:d8:95:e1:be:fe:94:e8:4e:8c:7c:
         c8:e2:5c:f8:80:37:55:48:5a:63:bf:9d:a6:53:0a:89:67:1f:
         d9:22:c4:35:35:0c:70:ed:4a:e2:8d:ac:7e:ae:43:bd:9d:39:
         af:79:78:db:e6:96:9c:61:30:28:20:4b:cb:13:ee:d5:22:b5:
         50:d6:be:9d:07:c4:7b:a1:05:2b:65:ed:73:b1:1e:33:ac:18:
         58:99:73:cb:b1:ce:f5:ea:bc:0b:c2:5e:d5:e4:44:7f:b2:0b:
         02:ac:36:dc:8c:eb:1a:88:7a:d5:4e:1a:9a:02:9e:4b:a6:85:
         ad:b2:86:cc:c0:68:f3:ff:9c:a6:15:a5:26:ef:92:ee:ee:23:
         c5:11:55:34:1c:1c:5a:83:ce:03:9b:00:05:15:a6:76:de:e0:
         a5:0f:f3:77:8d:ed:00:74:72:74:88:73:c2:8a:fc:35:51:76:
         39:7c:d3:90:57:cd:28:bf:63:8f:d7:22:cf:b4:24:58:5a:8e:
         97:a0:75:be:d5:4a:09:dc:62:68:21:4d:a1:a5:23:c6:d2:69:
         4d:5a:ab:95:25:86:2d:3b:87:62:4c:d6:05:8c:05:6f:4d:22:
         3b:0f:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org