Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32302d3230203d3e203237363933.roa
File:                     3137392e3130392e31362e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier:          my5IVV/DcHXR9hV6yngGhrDXvcUUjRWb6zjNo1shPds=
Subject key identifier:   20:C4:85:4B:05:C5:E5:18:CC:D6:D8:0F:29:B3:A4:E9:6F:64:94:59
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       383DC598AEE2E87BE3D184E03FBF3B0BA84CBB23
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32302d3230203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        179.109.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3d:c5:98:ae:e2:e8:7b:e3:d1:84:e0:3f:bf:3b:0b:a8:4c:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=20C4854B05C5E518CCD6D80F29B3A4E96F649459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:96:51:b9:87:22:1d:e7:90:1f:3d:fd:09:
                    33:98:2e:7f:e9:8a:8f:79:65:78:55:78:19:df:d9:
                    f6:7d:38:db:70:f8:63:70:42:86:94:a6:1b:26:55:
                    40:f3:b9:b5:b2:dd:e4:bd:da:ab:b9:ce:e3:14:3f:
                    c3:d4:d5:39:1e:fb:81:98:c6:42:dd:46:31:dd:10:
                    af:b6:fe:4b:3b:fa:db:d4:65:c6:fc:79:b4:72:57:
                    b5:8f:d9:69:69:74:71:5f:e4:e1:aa:02:4e:9a:48:
                    d0:f8:70:e7:d6:d7:82:1e:df:93:be:ac:6d:75:3b:
                    dd:e9:8f:0c:63:4a:67:b4:65:e7:93:59:a6:44:91:
                    45:a2:e2:f7:6a:1d:d9:71:50:1c:b7:81:56:ff:33:
                    e4:49:6c:88:25:cb:33:41:b3:c9:11:2c:e8:9f:1c:
                    58:34:48:e3:ad:63:b3:2a:55:7d:bd:bc:c4:15:37:
                    7d:4f:88:7c:25:2a:84:65:54:04:b7:63:fb:f1:6b:
                    28:0c:77:cf:65:da:dd:6d:f3:22:65:99:38:8e:30:
                    b0:e1:62:01:9f:2f:49:ce:4a:c0:65:e9:99:c5:a3:
                    49:83:00:73:a9:1d:58:2d:db:39:ad:8f:60:1c:aa:
                    b3:21:9e:ed:03:28:76:77:f2:84:cb:c4:bb:39:eb:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:85:4B:05:C5:E5:18:CC:D6:D8:0F:29:B3:A4:E9:6F:64:94:59
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32302d3230203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:97:f8:26:61:8f:2d:37:7c:7a:e3:ca:6a:71:c2:e2:04:
         70:cf:a5:2d:29:f2:10:7e:dd:56:d5:fc:1e:89:21:43:c9:ba:
         19:98:9f:3f:2d:e2:e7:c0:0d:8f:8b:29:f8:82:73:ec:1a:a1:
         71:27:2d:c8:1c:a1:b5:40:21:d3:52:d7:47:68:cc:c1:88:98:
         6d:d9:6e:2c:13:63:89:08:f0:7f:4b:66:f3:09:96:f7:73:37:
         89:a6:41:07:45:cf:5f:0a:01:4b:ca:ca:4e:eb:98:b7:f4:34:
         c6:25:79:0e:5d:c5:99:bb:28:40:90:07:6a:9f:72:46:0c:c7:
         a2:50:f8:84:92:00:3b:ba:cb:52:42:70:fb:46:e2:1d:fd:45:
         8a:5a:b1:e0:2c:13:cb:37:af:0e:2e:4e:b4:4c:0b:ca:dc:1f:
         e3:6b:7f:a4:78:b5:3d:8b:41:c1:15:f9:54:79:7a:4e:d5:f3:
         d0:28:68:79:cb:d5:c9:fe:e1:0d:dc:de:88:ba:2f:07:5e:ad:
         02:0e:68:0e:c5:13:f6:40:cf:12:fa:f2:5f:1a:91:0c:eb:e3:
         e3:6a:a2:36:85:5b:9d:f0:ba:8c:cf:79:4a:72:d6:47:77:78:
         38:49:42:4f:96:88:22:39:f9:1a:91:b5:ea:86:df:77:58:2b:
         5e:84:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:37 2024 by rpki-client on console-fra.rpki-client.org