Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/3137372e39312e3232342e302f32322d3234203d3e20323731303335.roa
File:                     3137372e39312e3232342e302f32322d3234203d3e20323731303335.roa (raw, json)
Hash identifier:          XwtO8Er82OvxMVRJuXD8lrk3MDDQk+lmivTPxUs7UOI=
Subject key identifier:   99:8F:81:5E:5A:C0:38:66:DA:81:1E:F9:77:2D:64:0F:3D:61:33:12
Certificate issuer:       /CN=6A279B424612940DC791666933613422FF82BC7E
Certificate serial:       023D3A48A9AD6F31B06CB5FD63E9159BE1171D1A
Authority key identifier: 6A:27:9B:42:46:12:94:0D:C7:91:66:69:33:61:34:22:FF:82:BC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/3137372e39312e3232342e302f32322d3234203d3e20323731303335.roa
Signing time:             Tue 02 Jul 2024 14:34:34 +0000
ROA not before:           Tue 02 Jul 2024 14:29:34 +0000
ROA not after:            Tue 01 Jul 2025 14:34:34 +0000
asID:                     271035
IP address blocks:        177.91.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.crl
                          rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3d:3a:48:a9:ad:6f:31:b0:6c:b5:fd:63:e9:15:9b:e1:17:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A279B424612940DC791666933613422FF82BC7E
        Validity
            Not Before: Jul  2 14:29:34 2024 GMT
            Not After : Jul  1 14:34:34 2025 GMT
        Subject: CN=998F815E5AC03866DA811EF9772D640F3D613312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:77:ef:7c:a3:62:d8:ca:35:a1:a4:a4:95:6e:
                    c5:a1:27:d2:5f:2b:52:7d:ef:60:e2:d3:6c:c5:77:
                    95:04:07:eb:14:1a:ce:19:82:37:8e:73:c0:22:e3:
                    e7:2b:1e:28:22:24:5e:f3:98:14:6f:08:a9:0c:a0:
                    72:97:ed:56:f8:ff:24:82:1a:42:c5:65:23:aa:d5:
                    b1:a1:45:77:eb:fc:93:64:4d:bd:19:b0:6c:b1:ea:
                    22:87:54:46:8f:8f:3f:f9:18:1b:56:f0:7d:4b:6c:
                    f9:6d:ef:55:fc:6f:48:1d:af:9d:25:ee:e6:dd:f2:
                    d4:38:f0:28:43:7c:4f:bf:ff:0f:63:3b:39:43:90:
                    b2:57:51:59:0f:20:79:93:86:1f:4f:0a:da:4a:9d:
                    1f:aa:10:de:f7:b7:40:2e:b1:45:81:12:ad:61:a0:
                    da:94:e6:b9:c6:21:cd:69:4d:85:98:2f:0f:38:40:
                    2a:48:1f:c6:ab:6f:e1:04:56:41:9f:90:36:74:78:
                    e5:1d:2f:3a:5a:dd:64:42:cd:a5:2c:16:16:59:f5:
                    1d:ed:5c:f3:5b:ad:5d:af:18:bc:b8:1c:c1:d6:94:
                    b6:9c:6e:3c:45:27:2e:ed:7d:cb:7d:88:bb:1b:a7:
                    da:ab:09:7b:1f:29:7d:e3:6d:7b:2f:fc:0f:2c:3d:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8F:81:5E:5A:C0:38:66:DA:81:1E:F9:77:2D:64:0F:3D:61:33:12
            X509v3 Authority Key Identifier:
                keyid:6A:27:9B:42:46:12:94:0D:C7:91:66:69:33:61:34:22:FF:82:BC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/3137372e39312e3232342e302f32322d3234203d3e20323731303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:8e:a5:e9:67:99:4c:06:26:14:e1:4a:f3:3e:55:6c:c1:2e:
         86:da:62:3d:67:6a:e9:73:27:34:b3:91:67:04:9e:1d:30:65:
         a6:88:cd:7d:e3:a7:ed:99:cb:b4:b2:a0:7b:3d:1b:94:16:0c:
         37:12:21:71:e9:f9:d0:4f:f2:19:07:a9:7a:63:82:26:bd:b8:
         f6:7a:15:2e:34:60:4f:8e:2f:cf:d8:30:ef:d8:6d:be:79:97:
         64:1b:7f:04:b8:8e:36:ab:d8:61:9f:d4:26:e2:23:d3:1e:ac:
         50:bb:6a:77:d8:92:80:81:4f:68:7a:cf:ec:ed:36:f3:14:eb:
         bc:1c:f3:a8:59:b1:74:79:3b:70:0d:40:59:df:1e:5e:60:23:
         c7:d0:28:d2:2d:dc:8e:f8:d9:7c:89:e3:dd:91:39:85:d6:de:
         5e:19:9a:46:d6:77:e5:00:81:1d:12:b2:f5:b9:b2:17:04:5a:
         d2:a7:ea:22:27:5a:32:e5:68:fb:7e:31:94:1b:e4:93:2b:f9:
         42:83:67:31:4e:3f:e6:51:a8:a4:bc:59:43:88:c9:3b:e1:f9:
         b1:88:9b:f9:d7:5d:07:69:57:20:e8:3e:0e:07:b4:7b:0c:de:
         d2:b8:b1:a6:b0:f0:1c:3f:08:35:95:4f:dc:96:0b:5d:d5:82:
         b0:cb:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:03 2024 by rpki-client on console-ams.rpki-client.org