Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32342d3234203d3e20323731353536.roa
File:                     3137392e36332e38322e302f32342d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          959WyyMKdAmA/DEfevAJvu6+2L7EpJ/jaOJqhICXP/A=
Subject key identifier:   A4:E1:54:19:E2:D4:B8:08:AE:79:63:AB:49:AB:2A:7B:8F:AB:5F:4F
Certificate issuer:       /CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
Certificate serial:       74CE342FDAF6067AF42ECA822BB41D58E39DA566
Authority key identifier: A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32342d3234203d3e20323731353536.roa
Signing time:             Tue 30 Apr 2024 08:10:20 +0000
ROA not before:           Tue 30 Apr 2024 08:05:20 +0000
ROA not after:            Tue 29 Apr 2025 08:10:20 +0000
asID:                     271556
IP address blocks:        179.63.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ce:34:2f:da:f6:06:7a:f4:2e:ca:82:2b:b4:1d:58:e3:9d:a5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
        Validity
            Not Before: Apr 30 08:05:20 2024 GMT
            Not After : Apr 29 08:10:20 2025 GMT
        Subject: CN=A4E15419E2D4B808AE7963AB49AB2A7B8FAB5F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:58:cc:0e:c2:fd:89:00:01:3f:3a:5b:0a:
                    c1:3a:f1:67:eb:ab:bd:ab:7f:c9:f9:ee:c5:33:ed:
                    2d:28:6a:9e:c3:7a:35:a5:95:ba:51:ce:e5:39:e5:
                    e5:2f:b6:f0:0e:1b:60:57:99:74:64:7a:e0:f7:b8:
                    3c:e0:c7:7d:36:cc:61:72:28:45:30:16:75:ef:c4:
                    be:9a:60:12:c0:99:e3:81:7f:ce:4a:9a:c0:c4:70:
                    1a:a3:8b:34:3a:0b:be:f7:2e:0d:69:97:51:5c:06:
                    f5:8e:74:20:1f:bd:de:62:74:01:70:20:73:01:78:
                    40:27:13:3a:f8:87:61:23:57:80:0b:5a:37:46:4d:
                    d9:13:4a:6f:74:82:8b:e2:fd:cc:99:fb:02:45:94:
                    f3:ad:1a:af:51:69:b7:56:cd:57:86:85:46:0b:3c:
                    e7:1a:5e:00:72:be:3f:98:e0:d3:ac:71:94:fb:94:
                    5d:d8:76:c2:b4:08:64:4f:33:3a:59:de:cd:43:22:
                    73:4b:9f:22:b7:02:39:e3:74:40:c0:ee:13:cb:45:
                    d5:a4:e4:6a:91:01:6f:db:a4:a6:5b:4b:c9:a7:e4:
                    24:57:3b:97:a4:e3:96:19:7c:0e:cd:8f:6c:69:9d:
                    e8:3c:c1:4d:1e:76:85:12:72:c9:4c:94:3c:d1:00:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:54:19:E2:D4:B8:08:AE:79:63:AB:49:AB:2A:7B:8F:AB:5F:4F
            X509v3 Authority Key Identifier:
                keyid:A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32342d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:d2:c9:fa:f1:05:90:e3:78:5b:10:23:01:aa:2e:d9:b2:
         83:83:fc:6a:84:89:6c:0d:a6:88:4e:39:f3:fb:cd:01:e1:d3:
         7e:64:49:46:45:8a:3a:26:f3:05:99:8e:d4:5c:ff:46:4a:c9:
         1a:61:6e:e3:fb:ff:e1:40:48:17:bf:83:50:5c:49:91:d0:fa:
         63:3f:dc:34:82:c4:c1:a3:3a:aa:53:0d:d3:8e:ef:0c:15:45:
         30:da:37:da:ec:9f:a0:16:08:b9:2c:71:fa:94:0f:9f:6b:fc:
         3f:15:b4:0b:31:bf:49:95:8a:8a:5d:4b:a8:3a:11:1b:28:c9:
         af:50:72:ca:75:98:fe:ce:da:88:86:8b:12:51:8f:ef:0b:84:
         4b:a7:63:ce:8c:be:70:db:c5:68:32:eb:1c:b5:0b:3b:8c:96:
         d2:33:eb:24:20:cf:ec:eb:8e:7a:aa:0c:6f:7d:5e:07:52:75:
         0c:0d:a4:cb:2e:44:77:98:bf:51:71:a2:a1:12:82:a9:3f:3b:
         dc:cb:34:b5:88:7a:91:f9:59:28:cd:e8:75:7a:87:6e:8c:a8:
         9b:f3:0c:fd:0f:00:13:c5:b0:21:e7:ff:b1:fc:5a:d8:dc:63:
         cd:c8:24:d1:8e:6a:a8:5b:71:68:e9:19:87:08:f7:f9:e2:30:
         72:e7:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:03 2024 by rpki-client on console-ams.rpki-client.org