Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137392e3132372e302e302f31392d3234203d3e203238323039.roa
File:                     3137392e3132372e302e302f31392d3234203d3e203238323039.roa (raw, json)
Hash identifier:          8HBUICuErXnTP31C7q/rZ0TcDxHv4Dn+a2U4usvIFjg=
Subject key identifier:   7D:60:9B:04:7F:F8:B1:CA:79:11:1B:5F:C2:5D:6B:16:55:98:1D:1F
Certificate issuer:       /CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
Certificate serial:       097B14E6F18170996A36DD2809DA33196BDD11B0
Authority key identifier: 5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137392e3132372e302e302f31392d3234203d3e203238323039.roa
Signing time:             Fri 11 Oct 2024 20:34:04 +0000
ROA not before:           Fri 11 Oct 2024 20:29:04 +0000
ROA not after:            Fri 10 Oct 2025 20:34:04 +0000
asID:                     28209
IP address blocks:        179.127.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl
                          rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7b:14:e6:f1:81:70:99:6a:36:dd:28:09:da:33:19:6b:dd:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
        Validity
            Not Before: Oct 11 20:29:04 2024 GMT
            Not After : Oct 10 20:34:04 2025 GMT
        Subject: CN=7D609B047FF8B1CA79111B5FC25D6B1655981D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:1b:4d:d8:8e:7e:39:de:4b:7c:bf:f1:fe:
                    19:19:93:97:4b:75:8a:76:3d:49:f0:aa:e2:d0:b5:
                    a7:97:2d:15:db:40:63:6f:02:c9:97:da:ce:1b:0d:
                    5e:79:5e:f1:7f:c3:51:7f:b8:0b:bf:b9:6d:a9:54:
                    bd:e0:96:bd:a8:e2:84:8b:6b:21:3c:67:a3:76:85:
                    17:15:79:b6:03:83:2c:fb:89:5e:35:94:6f:0c:7d:
                    08:b5:0d:c7:02:8d:14:1f:6a:6b:90:ce:db:89:3c:
                    db:ef:97:e8:c8:50:98:ca:bd:b4:c5:97:46:d2:d7:
                    71:a9:57:54:e0:9a:67:6c:79:27:d8:55:3b:7d:1f:
                    9c:fb:d6:96:2c:cd:f4:1a:83:a2:ed:71:71:bd:e5:
                    48:46:73:bb:1e:37:14:bc:53:ea:ac:62:1f:fd:28:
                    9b:40:b4:0f:7f:5a:9a:85:fc:5f:20:fe:05:af:30:
                    60:86:ed:f9:73:c5:6a:17:79:c2:16:f3:64:a0:c7:
                    97:10:9c:82:bd:88:6b:05:0f:d9:ad:d4:1d:2e:04:
                    d0:ec:5c:b3:17:ac:0b:7b:00:b8:d9:4d:a5:7a:f5:
                    4d:20:8b:63:6b:f2:2b:ed:52:9f:89:fe:ab:ec:c6:
                    4e:2d:ac:4c:1d:b4:7b:64:4d:f4:2d:3a:ae:a7:58:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:9B:04:7F:F8:B1:CA:79:11:1B:5F:C2:5D:6B:16:55:98:1D:1F
            X509v3 Authority Key Identifier:
                keyid:5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137392e3132372e302e302f31392d3234203d3e203238323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:fe:98:4d:ff:e9:dd:5d:53:2b:3b:2f:73:b7:1b:ad:55:
         6c:80:c0:e0:9d:a0:dd:30:42:1d:57:04:fd:c7:fc:79:11:8d:
         de:80:c4:7d:ac:81:69:88:2e:ac:78:0d:1b:d9:cc:20:ca:69:
         cb:ff:04:93:53:da:42:0a:b3:fb:a8:34:6b:4b:0f:68:fd:f5:
         28:b5:02:43:6e:8f:19:0f:7d:a4:b4:89:5c:22:44:37:ac:50:
         fb:52:14:b9:93:cd:f8:75:55:81:4a:8a:bf:b9:4c:e2:4c:e2:
         81:e8:6d:be:14:cd:94:a7:dd:22:6b:a4:80:fe:c3:9d:f1:6c:
         f1:d3:8f:b4:5e:6b:c8:63:73:fe:e6:76:b2:b2:00:15:77:1f:
         cf:4d:43:c8:ae:ed:a4:48:23:52:e9:79:33:f2:5d:6c:b6:98:
         3c:4d:a3:a8:4c:5c:35:ec:c6:10:36:0c:7f:b5:66:9c:be:db:
         56:fd:b3:1c:1d:91:03:79:53:c3:b9:93:83:79:ce:9b:a7:90:
         ba:eb:d5:9e:e5:b5:43:5d:96:23:a0:78:49:b2:5d:39:cf:7a:
         cb:1f:9b:16:5d:08:24:45:99:13:b0:3c:b5:c6:44:70:10:fa:
         4f:d7:d8:78:aa:06:ce:9d:ac:cc:7d:2d:80:8a:4a:b3:a3:b4:
         0d:9c:b6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:06 2024 by rpki-client on console-ams.rpki-client.org