Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3233203d3e20323731353536.roa
File:                     3137392e36332e38302e302f32332d3233203d3e20323731353536.roa (raw, json)
Hash identifier:          0EGAyTsQbBDCaQggUcQXxe9tNcY7ZwHkDy6tVetAY1Q=
Subject key identifier:   61:E4:B3:E8:8F:55:9E:5F:CC:D1:66:FE:A7:11:B9:AE:F4:E8:C2:77
Certificate issuer:       /CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
Certificate serial:       3C553A3EF076AC79750944B7F68D18DF62744F51
Authority key identifier: A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3233203d3e20323731353536.roa
Signing time:             Tue 30 Apr 2024 08:10:21 +0000
ROA not before:           Tue 30 Apr 2024 08:05:21 +0000
ROA not after:            Tue 29 Apr 2025 08:10:21 +0000
asID:                     271556
IP address blocks:        179.63.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:3a:3e:f0:76:ac:79:75:09:44:b7:f6:8d:18:df:62:74:4f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
        Validity
            Not Before: Apr 30 08:05:21 2024 GMT
            Not After : Apr 29 08:10:21 2025 GMT
        Subject: CN=61E4B3E88F559E5FCCD166FEA711B9AEF4E8C277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:76:2a:2b:7c:63:06:e0:e2:48:63:0f:ac:
                    4c:8b:2d:72:62:8b:08:51:5e:32:71:6d:3b:da:ed:
                    a6:08:e9:dc:20:85:76:ee:3d:40:48:63:99:e5:77:
                    d8:5e:df:f9:f7:5f:47:00:80:c7:7d:5e:f1:75:c1:
                    3c:44:8a:1e:e7:b1:14:fb:c6:d2:38:08:27:a3:98:
                    29:bd:70:f5:a9:7d:be:e5:2b:41:10:0b:e1:9e:38:
                    f5:7b:9b:b2:54:2f:ec:08:1e:45:1d:42:90:19:ab:
                    f2:07:24:83:c0:2a:68:c0:8c:53:a1:b0:88:5a:6e:
                    76:f4:30:20:df:75:1b:bd:90:8d:e4:24:51:77:9f:
                    47:b7:84:0c:88:cf:2a:a4:bd:4d:bb:a1:b9:1c:e5:
                    f9:06:7e:cd:8a:88:a3:ef:b2:1f:1b:12:75:9d:23:
                    18:75:13:9b:e5:ea:81:cd:ab:cb:1a:87:ff:71:57:
                    c3:5b:82:8e:55:15:b6:88:4f:fb:d5:ad:5f:b4:d4:
                    35:d4:80:85:20:20:7d:05:93:71:ac:15:c8:a6:05:
                    c4:e0:7a:7d:a3:9c:26:75:7a:57:69:bc:76:25:4e:
                    ba:8a:87:53:4b:09:ad:f9:7d:8d:30:65:fc:5b:e1:
                    7d:cc:99:d3:34:e7:a5:00:f1:58:e5:b4:fd:65:56:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:B3:E8:8F:55:9E:5F:CC:D1:66:FE:A7:11:B9:AE:F4:E8:C2:77
            X509v3 Authority Key Identifier:
                keyid:A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3233203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:54:cd:6b:24:65:b9:e6:2b:c8:c2:66:f3:eb:cf:2f:64:d3:
         31:2f:cb:e9:63:70:73:f8:6d:09:25:43:2d:f2:89:b1:d5:a9:
         b1:39:ea:f4:a1:6c:98:25:2d:9f:1d:19:94:82:28:b7:03:c1:
         5e:7e:62:38:76:38:56:c7:21:f9:53:b8:23:6f:77:d1:cf:14:
         1e:d9:68:b7:5e:6b:29:4d:c1:76:db:71:0e:19:73:b3:bc:34:
         02:ed:8a:ca:12:c9:75:bb:79:4e:de:57:94:07:32:9c:86:57:
         c1:a2:0f:0b:b8:22:ac:20:8d:db:03:6d:9f:da:17:a6:df:b6:
         ee:50:54:b3:84:7a:4e:40:04:26:82:2e:fd:d0:13:e8:34:3d:
         c8:eb:6c:64:5b:94:48:0f:05:97:0a:09:f7:af:05:7f:ed:c7:
         ba:87:fc:e1:e7:d3:55:55:2a:4a:fc:71:27:c2:c3:f0:18:d6:
         14:53:eb:55:0f:1b:96:b5:13:4b:ca:88:1d:24:80:6d:dc:7f:
         a6:3a:cf:69:45:be:45:34:65:e7:d5:42:40:b4:2e:00:7b:1c:
         34:93:ec:a8:39:2e:db:b4:b1:2e:f5:55:6a:62:db:59:8b:8a:
         a4:ac:66:2c:be:2c:a2:c5:9d:0e:1f:ae:9a:43:e2:5e:e6:b0:
         71:9f:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:29:52 2024 by rpki-client on console-fra.rpki-client.org