Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e32342e302f32312d3231203d3e203237363933.roa
File:                     3137392e3130392e32342e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          nsTqTWLjmb9fof9mffVgiZ75YlnhaCv5uDQ8O92xAEc=
Subject key identifier:   5F:54:81:71:22:76:12:AD:7F:4C:D0:55:96:52:94:11:55:52:74:D0
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       4D0976DD4DA5CE2B033ACDE94D171581928DDA68
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e32342e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        179.109.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:76:dd:4d:a5:ce:2b:03:3a:cd:e9:4d:17:15:81:92:8d:da:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=5F548171227612AD7F4CD05596529411555274D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:47:ec:dc:19:55:f5:d4:1a:45:67:6a:57:
                    6d:1b:5c:b8:ac:2d:e9:b3:35:ab:3d:70:ae:8b:d1:
                    0b:db:f3:a8:30:0c:54:63:db:92:25:60:4b:e5:1f:
                    42:f8:b4:63:62:3c:e2:cb:3e:82:19:ed:7b:00:21:
                    69:37:56:fb:fa:90:4a:7a:05:13:47:ac:a0:e6:a7:
                    79:c1:2f:ae:99:43:eb:6a:46:a4:7a:71:49:4f:f6:
                    c0:6a:0c:6e:ac:6e:98:e0:cf:90:45:de:7a:6e:fb:
                    b9:2f:8e:6f:8e:7d:5d:7e:20:87:27:aa:98:71:38:
                    49:57:76:b8:e7:91:22:df:5b:3a:81:47:24:3c:4e:
                    3d:c8:6b:f4:fb:25:1a:66:ed:54:95:84:f2:8b:3b:
                    12:4f:ee:af:d0:27:a7:a9:d8:bc:2f:e0:b6:e2:c2:
                    be:9c:1d:af:cd:56:a5:64:45:43:3c:5d:0c:ff:b1:
                    45:a1:88:85:b0:d6:50:8b:da:f4:49:5e:e2:3e:44:
                    ab:fb:4d:c8:dc:78:19:86:ce:4c:c9:dc:90:c3:62:
                    21:9f:95:91:ca:57:e7:4f:2d:b0:78:85:c4:c4:b8:
                    d9:0f:a8:4f:e7:f4:b1:51:f7:a2:82:80:54:f8:de:
                    53:3d:73:af:0b:56:ea:fa:82:df:90:1d:c6:a1:93:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:54:81:71:22:76:12:AD:7F:4C:D0:55:96:52:94:11:55:52:74:D0
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e32342e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:c8:d4:66:92:11:a7:87:ee:7b:9a:ac:7d:70:fb:f7:37:
         a2:ab:35:34:d8:0c:6b:25:39:c1:92:3e:c9:d0:00:3a:6f:c8:
         92:95:1d:57:49:73:ba:da:01:d6:8c:2f:59:d9:55:fc:0d:aa:
         ee:d9:dd:2a:08:04:f8:1a:95:31:9d:dd:d3:f1:68:30:a8:58:
         07:41:ff:0b:4c:29:49:c8:8e:06:a0:1d:30:44:a5:7d:d5:b1:
         78:99:1d:69:c6:e7:25:b2:48:73:62:29:04:ab:47:3a:9c:56:
         d3:93:e1:67:62:6a:ef:c4:ae:94:96:c5:bc:a6:6c:8e:ad:89:
         2a:75:18:b7:e6:94:2b:a8:35:ee:4d:4d:e2:de:0c:84:ab:0c:
         38:66:80:03:20:ba:c5:86:c3:57:99:83:b7:bf:e0:f9:ed:b4:
         6b:52:f5:7d:9e:6d:e7:05:68:7b:a9:9d:85:ad:d0:f5:be:ff:
         47:dd:93:b2:22:35:10:b8:b8:47:28:1b:5d:1b:f6:60:89:e7:
         6c:36:fd:ae:5a:ae:9a:84:59:f4:46:40:ac:d1:5b:1d:90:c3:
         e0:4d:3e:32:5a:bc:7c:7f:a4:a2:34:46:0b:3a:b1:ff:25:4d:
         10:ab:d6:c1:e3:cc:23:5d:97:3b:a0:b8:d0:35:62:ff:35:d8:
         25:cd:1c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:24:40 2025 by rpki-client